Agent skills for Zed

Audits and hardens process historian servers (OSIsoft PI, Honeywell PHD,

Hardens managed Kubernetes clusters on EKS, AKS, and GKE by implementing

Designs and configures secure remote access to OT/ICS environments for

Secure coding practices for agent-native apps: input validation, SQL injection, XSS, secrets, data scoping, and auth.

Comprehensive security scanning and vulnerability detection.

Audit a codebase or directory for security issues (hardcoded secrets, injection, unsafe deserialization, weak crypto, authz gaps) and…

Comprehensive security auditing workflow covering web application testing, API security, penetration testing, vulnerability scanning, and…

Expert security auditor specializing in DevSecOps, comprehensive cybersecurity, and compliance frameworks.

Perform language and framework specific security best-practice reviews and suggest improvements.

Use when storing credentials securely, encrypting data, implementing passkeys, securing AI/agentic features against prompt injection, code…

Adversarial defense layer for the mortgage plugin — protects against prompt injection, system prompt extraction, PII leakage, workflow…

PreToolUse security-anti-pattern hook for Claude Code.

PreToolUse security-anti-pattern hook for Claude Code.

Analyze git repositories to build a security ownership topology (people-to-file), compute bus factor and sensitive-code ownership, and…

Use when the user asks to perform security audits, penetration testing, vulnerability scanning, OWASP Top 10 checks, or offensive security…

Use when the user asks to perform security audits, penetration testing, vulnerability scanning, OWASP Top 10 checks, or offensive security…

Use when the user mentions security review, App Store submission prep, Privacy Manifest requirements, hardcoded credentials, or sensitive…

Analyze code, infrastructure, and configurations by conducting comprehensive

Derive security requirements from threat models and business context.

This skill ensures all code follows security best practices and identifies potential vulnerabilities.

Run full security scans on the codebase using Ruflo security tools.