Security: skills, plugins, subagents, slash commands and mcp servers

arduino-azure-iot-edge-integration official github skill Guides Arduino-to-Azure IoT Hub and IoT Edge design, from telemetry to device commands. Use it when a project needs an edge gateway or must handle unreliable links. GitHub Copilot 100installs slack-expert VoltAgent Community subagent This subagent builds Slack apps, connects Slack APIs, and reviews bot code for security. Use it when a project needs a Slack integration or audit. Claude Code 246installs azure-infra-engineer VoltAgent Community subagent A Claude Code subagent for Azure network design, Entra ID integration, PowerShell automation, and Bicep IaC. Use it when planning or operating Azure deployments. Claude Code 245installs iot-engineer VoltAgent Community subagent This subagent helps plan IoT systems from device connectivity and edge processing to cloud services. Use it when a project has varied connectivity needs or substantial data flows. Claude Code 238installs m365-admin VoltAgent Community subagent Automates Microsoft 365 administration tasks, including Exchange mailboxes, Teams, SharePoint sites, and license management via Graph API. Built for M365 engineers. Claude Code 229installs ad-security-reviewer VoltAgent Community subagent Audits Active Directory security, detects privilege escalation paths, and generates remediation scripts. Use it to inspect GPO rules and domain trusts. Claude Code 212installs vendor-management claude-code-skills skill Reviews third-party SaaS vendors, tracks SLA breaches for credit claims, and scores suppliers using industry profiles before contract renewal. Claude Code 297installs aws-well-architected-review official github skill Audits repository IaC files against the 6 AWS Well-Architected Framework pillars and opens GitHub issues with remediation snippets. GitHub Copilot 84installs powershell-5.1-expert VoltAgent Community subagent A subagent for PowerShell 5.1 automation on Windows, covering Active Directory, DNS, DHCP, and GPO tasks in legacy .NET Framework environments. Claude Code 196installs it-ops-orchestrator VoltAgent Community subagent Coordinates multi-domain IT operations by routing tasks across PowerShell, Azure, M365, and Active Directory subagents. Claude Code 194installs powershell-security-hardening VoltAgent Community subagent This subagent hardens PowerShell scripts, remoting, and Windows settings. Use it to review automation, credentials, logs, and CI/CD security gates. Claude Code 194installs azure-smart-city-iot-solution-builder official github skill This skill turns an Azure IoT or Smart City idea into an architecture, security plan, cost strategy, and phased delivery roadmap. Use it before implementation. GitHub Copilot 74installs resemble-detect official github skill Detects synthetic audio, images, video, and text using Resemble AI. Helpful for media verification, watermark detection, and voice provenance checks. GitHub Copilot 68installs msgraph-sdk official github skill This skill connects Microsoft Graph SDK to .NET, TypeScript/JavaScript, or Python projects. Use it when an app needs Microsoft 365 data. GitHub Copilot 57installs mcp-implementation-security-review official github skill Audits MCP server and client code against baseline controls, RCE vectors, and the OWASP MCP Top 10, producing file and line evidence. GitHub Copilot 49installs aws-resource-query official github skill Turn natural-language questions about AWS resources into read-only AWS CLI queries. Use it to inspect infrastructure without changing resources. GitHub Copilot 47installs azure-well-architected-review official github skill Reviews Azure IaC and deployed resources against the five Well-Architected Framework pillars. Use it to surface risks and track remediation in GitHub issues. GitHub Copilot 41installs azure-developer-cli official github skill Helps design, review, and maintain Azure Developer CLI (azd) repositories. Useful when structuring azure.yaml, managing Bicep or Terraform code, and setting up CI/CD workflows. GitHub Copilot 32installs REA morluto MCP server Wires your agent to tools for inspecting binaries, Electron apps, .NET assemblies and websites. Useful when you want to understand someone else's feature and rebuild it. Claude Code CX Codex Cursor +1 ★ 376,805repo stars verify-agent-action official github skill Audits proposed AI agent actions, deployments, and approvals before execution. It checks parameters, nonces, and telemetry, never authorizing or running actions on its own. GitHub Copilot 29installs tm7-threat-model official github skill Generates valid .tm7 threat model files for Microsoft Threat Modeling Tool v7.3+ using STRIDE. Useful when you need ready-to-open threat models directly from architecture descriptions. GitHub Copilot 29installs application-integration-troubleshooting official google skill Diagnoses failed, stuck, or silent Google Cloud Application Integration and Integration Connectors runs. Use it when HTTP 200 does not match the work completed. Claude Code Gemini CLI CX Codex 16installs signing-entitlements official OpenAI skill Diagnoses macOS code signing, App Sandbox, and Gatekeeper failures. Useful when a binary or app bundle refuses to launch on macOS. CX Codex GP ChatGPT 60installs packaging-notarization official OpenAI skill This skill checks macOS app archives, signing, and notarization readiness. Use it when preparing a build for distribution or investigating failures that appear only in distributed builds. CX Codex GP ChatGPT 56installs agent-decision-receipts Alireza Rezvani skill Mints tamper-evident, post-quantum-signed receipts for agent actions like deploys or payments. Lets you verify autonomous decisions offline from the certificate alone. Claude Code 44installs supabase-postgres-best-practices official supabase skill Supabase guidelines for Postgres performance optimization. Helps developers write SQL queries, design database schemas, and configure RLS. CX Codex GP ChatGPT 40installs security-scan official OpenAI skill Runs a single-pass security audit on a repository or selected path. Use it for a general review when there is no diff to inspect. CX Codex GP ChatGPT 39installs stripe-best-practices official Stripe skill Integration guide for Stripe in Codex: covers Checkout Sessions, Connect Accounts v2, tax setup, and restricted API keys. CX Codex GP ChatGPT 36installs threat-model official OpenAI skill Builds repository threat models, maps trust boundaries, and outputs threatmodel.md in Codex. CX Codex GP ChatGPT 32installs compliance-os Alireza Rezvani skill This skill selects applicable frameworks, maps shared controls, and builds a combined audit and evidence plan for multi-framework programs. Claude Code 33installs triage-finding official OpenAI skill Triages external security reports against repository code and SECURITY.md policies, assigning static-evidence verdicts without modifying files. CX Codex GP ChatGPT 30installs security-diff-scan official OpenAI skill Reviews pull requests, commits, and local diffs for security vulnerabilities. Catches risks in modified and deleted code before merging. CX Codex GP ChatGPT 30installs aims-audit Alireza Rezvani skill Runs a six-question ISO/IEC 42001 internal audit check for AI Management Systems. Helps verify readiness before stage 1 audits or when onboarding models. Claude Code 31installs validation official OpenAI skill This skill checks whether candidate security findings hold up. Use it to validate findings from discovery, not to start a full repository scan. CX Codex GP ChatGPT 29installs deep-security-scan official OpenAI skill This skill runs multiple independent security scans across your entire repository or a scoped path, aggregates findings, and generates a complete report. Use it when standard scanning needs more depth and confidence. CX Codex GP ChatGPT 29installs vercel-sandbox official Vercel Labs skill This skill runs user-generated and AI-generated code inside an ephemeral Vercel Sandbox. Use it for browser automation and code checks that should stay outside the main environment. CX Codex GP ChatGPT 27installs fix-finding official OpenAI skill Resolves confirmed security vulnerabilities through targeted, validated patches. Useful when you need to close an exploit path without breaking existing APIs. CX Codex GP ChatGPT 27installs attack-path-analysis official OpenAI skill Evaluates plausible security findings in Codex and ChatGPT, traces paths from source to sink, and calibrates severity against the repository threat model. CX Codex GP ChatGPT 27installs gdpr-audit-prep Alireza Rezvani skill Runs a six-question DPO interrogation citing GDPR articles. Prepares teams for annual privacy reviews, breach responses, and regulatory inquiries. Claude Code 28installs track-findings official OpenAI skill This skill moves validated Codex Security findings into Linear, Jira, or GitHub. Use it when scan results are reviewed and ready for controlled tracking. CX Codex GP ChatGPT 26installs