Security: skills, plugins, subagents, slash commands and mcp servers

it-ops-orchestrator VoltAgent Community subagent Coordinates multi-domain IT operations by routing tasks across PowerShell, Azure, M365, and Active Directory subagents. Claude Code 194installs powershell-security-hardening VoltAgent Community subagent This subagent hardens PowerShell scripts, remoting, and Windows settings. Use it to review automation, credentials, logs, and CI/CD security gates. Claude Code 194installs azure-smart-city-iot-solution-builder official github skill This skill turns an Azure IoT or Smart City idea into an architecture, security plan, cost strategy, and phased delivery roadmap. Use it before implementation. GitHub Copilot 74installs resemble-detect official github skill Detects synthetic audio, images, video, and text using Resemble AI. Helpful for media verification, watermark detection, and voice provenance checks. GitHub Copilot 68installs msgraph-sdk official github skill This skill connects Microsoft Graph SDK to .NET, TypeScript/JavaScript, or Python projects. Use it when an app needs Microsoft 365 data. GitHub Copilot 57installs mcp-implementation-security-review official github skill Audits MCP server and client code against baseline controls, RCE vectors, and the OWASP MCP Top 10, producing file and line evidence. GitHub Copilot 49installs aws-resource-query official github skill Turn natural-language questions about AWS resources into read-only AWS CLI queries. Use it to inspect infrastructure without changing resources. GitHub Copilot 47installs azure-well-architected-review official github skill Reviews Azure IaC and deployed resources against the five Well-Architected Framework pillars. Use it to surface risks and track remediation in GitHub issues. GitHub Copilot 41installs azure-developer-cli official github skill Helps design, review, and maintain Azure Developer CLI (azd) repositories. Useful when structuring azure.yaml, managing Bicep or Terraform code, and setting up CI/CD workflows. GitHub Copilot 32installs REA morluto MCP server Wires your agent to tools for inspecting binaries, Electron apps, .NET assemblies and websites. Useful when you want to understand someone else's feature and rebuild it. Claude Code CX Codex Cursor +1 ★ 376,805repo stars verify-agent-action official github skill Audits proposed AI agent actions, deployments, and approvals before execution. It checks parameters, nonces, and telemetry, never authorizing or running actions on its own. GitHub Copilot 29installs tm7-threat-model official github skill Creates .tm7 threat model files for Microsoft Threat Modeling Tool and adds STRIDE threats. Use it when a system description must become an editable threat model diagram. GitHub Copilot 29installs application-integration-troubleshooting official google skill Diagnoses failed, stuck, or silent Google Cloud Application Integration and Integration Connectors runs. Use it when HTTP 200 does not match the work completed. Claude Code Gemini CLI CX Codex 16installs signing-entitlements official OpenAI skill Diagnoses macOS code signing, App Sandbox, and Gatekeeper failures. Useful when a binary or app bundle refuses to launch on macOS. CX Codex GP ChatGPT 60installs packaging-notarization official OpenAI skill This skill checks macOS app archives, signing, and notarization readiness. Use it when preparing a build for distribution or investigating failures that appear only in distributed builds. CX Codex GP ChatGPT 56installs agent-decision-receipts Alireza Rezvani skill Mints tamper-evident, post-quantum-signed receipts for agent actions like deploys or payments. Lets you verify autonomous decisions offline from the certificate alone. Claude Code 44installs supabase-postgres-best-practices official supabase skill Supabase guidelines for Postgres performance optimization. Helps developers write SQL queries, design database schemas, and configure RLS. CX Codex GP ChatGPT 40installs security-scan official OpenAI skill Runs a single-pass security audit on a repository or selected path. Use it for a general review when there is no diff to inspect. CX Codex GP ChatGPT 39installs stripe-best-practices official Stripe skill Integration guide for Stripe in Codex: covers Checkout Sessions, Connect Accounts v2, tax setup, and restricted API keys. CX Codex GP ChatGPT 36installs threat-model official OpenAI skill Builds repository threat models, maps trust boundaries, and outputs threatmodel.md in Codex. CX Codex GP ChatGPT 32installs compliance-os Alireza Rezvani skill This skill selects applicable frameworks, maps shared controls, and builds a combined audit and evidence plan for multi-framework programs. Claude Code 33installs triage-finding official OpenAI skill Triages external security reports against repository code and SECURITY.md policies, assigning static-evidence verdicts without modifying files. CX Codex GP ChatGPT 30installs security-diff-scan official OpenAI skill Reviews pull requests, commits, and local diffs for security vulnerabilities. Catches risks in modified and deleted code before merging. CX Codex GP ChatGPT 30installs aims-audit Alireza Rezvani skill Runs a six-question ISO/IEC 42001 internal audit check for AI Management Systems. Helps verify readiness before stage 1 audits or when onboarding models. Claude Code 31installs validation official OpenAI skill This skill checks whether candidate security findings hold up. Use it to validate findings from discovery, not to start a full repository scan. CX Codex GP ChatGPT 29installs deep-security-scan official OpenAI skill This skill runs multiple independent security scans across your entire repository or a scoped path, aggregates findings, and generates a complete report. Use it when standard scanning needs more depth and confidence. CX Codex GP ChatGPT 29installs vercel-sandbox official Vercel Labs skill This skill runs user-generated and AI-generated code inside an ephemeral Vercel Sandbox. Use it for browser automation and code checks that should stay outside the main environment. CX Codex GP ChatGPT 27installs fix-finding official OpenAI skill Resolves confirmed security vulnerabilities through targeted, validated patches. Useful when you need to close an exploit path without breaking existing APIs. CX Codex GP ChatGPT 27installs attack-path-analysis official OpenAI skill Evaluates plausible security findings in Codex and ChatGPT, traces paths from source to sink, and calibrates severity against the repository threat model. CX Codex GP ChatGPT 27installs gdpr-audit-prep Alireza Rezvani skill Runs a six-question DPO interrogation citing GDPR articles. Prepares teams for annual privacy reviews, breach responses, and regulatory inquiries. Claude Code 28installs track-findings official OpenAI skill This skill moves validated Codex Security findings into Linear, Jira, or GitHub. Use it when scan results are reviewed and ready for controlled tracking. CX Codex GP ChatGPT 26installs compliance-readiness Alireza Rezvani skill Runs a 6-question compliance officer interrogation to pressure-test compliance programs before audits or new framework adoption. Maps overlapping controls and flags gaps. Claude Code 27installs vulnerability-writeup official OpenAI skill Turns vulnerability notes, PoCs, and source code into a checked, self-contained report. Use it to assess one finding or a disclosure campaign. CX Codex GP ChatGPT 25installs deploy microsoft skill Executes validated IaC templates against Azure and verifies resource health. Runs automatically at Phase 4 of the azure-app-onboard orchestrator. Claude Code GitHub Copilot 126installs soc2-audit-prep Alireza Rezvani skill This skill checks SOC 2 Type II readiness with six questions about scope, control cycles, exceptions, and evidence. Use it before or during the observation period. Claude Code 25installs finding-discovery official OpenAI skill This skill searches code or changes for plausible security vulnerabilities in the context of a threat model. Use it during finding discovery, not to start a full scan. CX Codex GP ChatGPT 24installs iso27001-audit-prep Alireza Rezvani skill Prepares your ISMS for ISO 27001 internal, surveillance, or stage 1 certification audits. It runs a 6-question sample-driven interrogation across core controls. Claude Code 22installs fda-qsr-audit-prep Alireza Rezvani skill This skill checks FDA QSR readiness through 6 forcing questions. Use it before an internal audit, an FDA inspection, or a Form 483 response. Claude Code 17installs openai-platform-api-key official OpenAI skill Checks for an OpenAI key before API-backed work and guides secure OPENAI_API_KEY setup. Useful when Codex builds or runs an AI tool. CX Codex GP ChatGPT 16installs entra-agent-id microsoft skill Provisions OAuth2-capable identities for AI agents using Microsoft Graph beta API. Useful when configuring Microsoft Entra service principals and blueprints. Claude Code GitHub Copilot 69installs