Agent skills for HTTP / API

An agent-native CLI for SEC EDGAR — six sanctioned endpoints, SQLite-cached filings with FTS5, and LODESTAR-shaped...

When to activate: second brain, BASB, Building a Second Brain, CODE method, knowledge management, creative output, insight capture…

Helps users organize knowledge, categorize notes, and discover connections within their personal knowledge management systems (e.g…

When to activate: secondary research, desk research, industry reports, data sources, Statista, Gartner, IBISWorld, citation validation…

Agent-only reference for persistent secondmate setup and retirement.

Use when you suspect API keys, tokens, or passwords are hardcoded in source code or committed to git history — scans and guides safe…

Scan for exposed secrets/credentials/API keys

Secure secrets management practices for CI/CD pipelines using Vault, AWS Secrets Manager, and other tools.

When to activate: secrets, API keys, environment variables, Vault, AWS Secrets Manager, .env, secret rotation, credentials

Declaratively register API keys and service credentials a template needs so they appear in the agent sidebar settings UI and the…

Skill for the Securacymcp area of Securacy. 101 symbols across 20 files.

Security audit. Use when hunting secrets, reviewing auth, threat modeling, checking skill supply chain, or hardening an app before it goes…

Use when implementing authentication/authorization, securing user input, or preventing OWASP Top 10 vulnerabilities — including custom…

Use when designing or implementing software securely: define security requirements, threat-model a feature, choose secure defaults, design…

Production-grade secure file upload pipeline with multi-stage validation, malware scanning (ClamAV), hash-based duplicate detection, and…

Secure coding practices for agent-native apps: input validation, SQL injection, XSS, secrets, data scoping, and auth.

Comprehensive security analysis with vulnerability detection and remediation tracking

Master skill for comprehensive security analysis.

Audit a codebase or directory for security issues (hardcoded secrets, injection, unsafe deserialization, weak crypto, authz gaps) and…

Perform language and framework specific security best-practice reviews and suggest improvements.

Hunt for exploitable, bounty-worthy security issues in repositories.