Security: skills, plugins, subagents, slash commands and mcp servers

dependabot official github skill A GitHub Copilot skill that helps write and tune .github/dependabot.yml: grouped updates, monorepo patterns, security updates. GitHub Copilot 4,400installs python-configuration Seth Hobson skill This skill moves Python settings into environment variables and validates typed configuration. Use it for secrets and environment-specific behavior. Claude Code CX Codex Cursor 11,508installs security-auditor VoltAgent Community subagent Audits security controls, vulnerabilities, risks, and compliance gaps across systems, infrastructure, and processes. Use it when you need documented findings. Claude Code 10,718installs google-cloud-scc-query official google skill Reads active Security Command Center findings in Google Cloud and helps an agent inspect them before triage. Claude Code Gemini CLI CX Codex 3,600installs k8s-manifest-generator Seth Hobson skill This skill helps create Kubernetes manifests for applications and infrastructure. Use it when you need Deployments, Services, ConfigMaps, Secrets, or PersistentVolumeClaims. Claude Code CX Codex Cursor 11,166installs google-cloud-solution-multi-agent-security official google skill This skill designs and secures Google Cloud Agent Gateway setups for ingress and egress traffic. Use it with Model Armor, IAP, and Agent Registry. Claude Code Gemini CLI CX Codex 3,500installs memory-forensics Dávid Balatoni skill This skill covers RAM capture and memory-dump analysis, including process review, injection checks, network traces, and malware artifacts. Claude Code CX Codex Cursor 11,027installs binary-analysis-patterns Dávid Balatoni skill This skill helps inspect disassembled code, recover program logic, and recognize common patterns in executable files during static analysis. Claude Code CX Codex Cursor 10,900installs anti-reversing-techniques Dávid Balatoni skill This skill examines anti-reversing, obfuscation, and anti-debugging checks. Use it for authorized binary analysis, CTF work, malware research, and security tooling. Claude Code CX Codex Cursor 10,900installs sast-configuration Seth Hobson skill Configures SAST checks for finding vulnerabilities in application code. Useful for CI/CD setup, custom rules, and security policy checks. Claude Code CX Codex Cursor 10,800installs pci-compliance Seth Hobson skill This skill guides PCI DSS work for payment systems, including tokenization, encryption, access control, logging, and cardholder data handling. Claude Code CX Codex Cursor 10,600installs hybrid-cloud-networking Seth Hobson skill Plans connectivity between on-premises infrastructure and AWS, Azure, GCP, or OCI through VPNs and dedicated links. Claude Code CX Codex Cursor 10,600installs defi-protocol-templates Seth Hobson skill This skill provides Solidity templates for staking and AMMs, plus governance and flash loans. Use it as a starting point for DeFi protocol work. Claude Code CX Codex Cursor 10,400installs mtls-configuration Seth Hobson skill This skill configures mutual TLS for service-to-service communication. Use it for zero-trust networking, certificate management, or TLS debugging. Claude Code CX Codex Cursor 10,300installs linkerd-patterns Seth Hobson skill Set up Linkerd in Kubernetes with patterns for mTLS, traffic policies, canary releases, and multi-cluster networking. Useful when configuring a service mesh or troubleshooting its policies. Claude Code CX Codex Cursor 10,200installs kyc-rules official anthropics skill Applies your firm's KYC/AML rules grid to a parsed onboarding record, assigns a risk rating, and routes the case — to doc request, enhanced due diligence, or decline. Works after kyc-doc-parse. Claude Code CX Codex Cursor +1 1,200installs multi-reviewer-patterns Seth Hobson skill This skill coordinates parallel reviews across code-quality dimensions and merges the results into one report. Use it when a change needs several review angles. Claude Code CX Codex Cursor 9,800installs team-composition-patterns Seth Hobson skill Choose agent team sizes, roles, and display modes for a task. The skill covers code reviews, debugging, feature work, research, security audits, and migrations. Claude Code CX Codex Cursor 9,600installs k-skill-setup NomaDamas skill Installs the k-skill bundle via a unified CLI, verifies the agent runtime, and keeps coding-agent skills up to date. Claude Code CX Codex Cursor +1 8,200installs google-cloud-storage-bucket-architect official google skill This skill plans and creates Google Cloud Storage buckets around a workload and the project's security settings. Use it when an app, service, or pipeline needs object storage. Claude Code Gemini CLI CX Codex 2,800installs dpop-adoption official google skill This skill guides DPoP setup for Google OAuth refresh tokens, including P-256 keys and proof JWTs. Use it when exchanging an authorization code or refreshing a token. Claude Code Gemini CLI CX Codex 2,600installs iam-helper-for-troubleshooting official google skill Diagnoses Google Cloud IAM access denials and routes developers or administrators toward a controlled fix. Useful when a request returns 403 or a permission is missing. Claude Code Gemini CLI CX Codex 2,500installs devops-engineer VoltAgent Community subagent This subagent reviews infrastructure and helps with CI/CD, containers, and deployment workflows. Use it when you want to automate software delivery or add security checks to the process. Claude Code 7,392installs iam-helper-for-policy-management official google skill This skill manages Google Cloud IAM allow policies v1 and deny policies v2. Use it to inspect access or prepare controlled policy changes. Claude Code Gemini CLI CX Codex 2,400installs google-cloud-filestore-auditing official google skill This skill audits Google Cloud Filestore for backup readiness, NFS access exposure, and zone isolation. Use it when reviewing storage posture across projects. Claude Code Gemini CLI CX Codex 2,300installs block-no-verify-hook cskwork skill Sets up a PreToolUse hook in Claude Code to block AI agents from skipping pre-commit checks with --no-verify and --no-gpg-sign flags. Useful for strict commit gates. Claude Code CX Codex Cursor 6,500installs gke-workload-identity official google skill Diagnoses Pod authentication failures in Google Cloud through Workload Identity Federation for GKE. Use it to check KSA, IAM bindings, and the GKE metadata server. Claude Code Gemini CLI CX Codex 2,000installs signed-audit-trails-recipe Tom Farley skill A step-by-step guide to signed records for Claude Code tool calls. Use it to evaluate policy gates and offline verification before installing protect-mcp runtime hooks. Claude Code CX Codex Cursor 6,200installs secops-triage official Google LLC skill This skill triages Google SecOps alerts, assesses entity risk, and helps decide whether a case should be closed or escalated. Claude Code Gemini CLI CX Codex 1,900installs secops-investigate official Google LLC skill This skill supports deep incident and entity investigations in Google SecOps. Use it for UDM searches, asset and user timelines, and lateral movement analysis. Claude Code Gemini CLI CX Codex 1,900installs secops-hunt official Google LLC skill secops-hunt supports proactive threat hunting in Google SecOps, from IoC lookups to UDM-based anomaly searches. Use it when testing a hunt hypothesis. Claude Code Gemini CLI CX Codex 1,900installs secops-detection-engineering official Google LLC skill This skill authors, validates, tests, and deploys YARA-L 2.0 rules in Google SecOps. Use it to examine detection coverage gaps. Claude Code Gemini CLI CX Codex 1,900installs secops-cases official Google LLC skill Manage Google Security Operations SOAR cases, from queue review and alert grouping to investigation notes, status changes, and closure. Claude Code Gemini CLI CX Codex 1,900installs protect-mcp-setup Tom Farley skill This skill configures Cedar checks for tool calls and Ed25519-signed receipts. Use it when you need policy-gated actions and an audit trail that can be verified offline. Claude Code CX Codex Cursor 6,000installs github-actions-hardening official github skill This skill audits GitHub Actions for injection, excessive permissions, and risky triggers. Use it when reviewing CI or writing a new workflow. GitHub Copilot 2,200installs codeql official github skill Walks you through CodeQL code scanning: Actions workflows, CLI commands, SARIF output, and fixing failed analyses. GitHub Copilot 2,000installs review-agent-setup Tom Farley skill This skill gates AI review actions behind manual human approval before pull requests or CI pipelines change. Every attempt generates an Ed25519-signed receipt for offline auditing. Claude Code CX Codex Cursor 5,200installs google-cloud-filestore-log-troubleshooting official google skill Diagnoses Google Cloud Filestore mount failures, access errors, and network timeouts. Use it when an NFS share stops mounting from a VM, GKE pod, or another supported workload. Claude Code Gemini CLI CX Codex 1,600installs sandbox-npm-install official github skill This skill installs npm dependencies on Docker's local ext4 filesystem and symlinks node_modules back into the workspace. Use it with virtiofs mounts. GitHub Copilot 1,700installs gdpr-compliant official github skill This skill guides GDPR-aware work with APIs, user data, logs, retention, and deletion. Use it when a code task involves personal data. GitHub Copilot 1,700installs