Security & Testing Agent Skills for Claude Desktop

This skill enables comprehensive vulnerability scanning using the vulnerability-scanner plugin.

Tenable Nessus is the industry-leading vulnerability scanner used to

This skill enables Claude to automatically scan source code for potential input validation vulnerabilities.

Performs advanced network recon using Nmap''s Scripting Engine (NSE),

Set up or repair Cisco SCC Firewall Manager with either a complete pipx runtime or a managed Ansible companion for an existing Homebrew…

Implementation guidelines for SDD workflow.

Secure secrets management practices for CI/CD pipelines using Vault, AWS Secrets Manager, and other tools.

Use when the user asks to set up secret management infrastructure, integrate HashiCorp Vault, configure cloud secret stores (AWS Secrets…

Use while the user is writing a new feature — a login flow, an API endpoint, a file upload, cookie handling, Keychain use, a call to an…

Hardens AWS IAM configurations to enforce least-privilege access, covering

Secures container registry images (ECR, ACR, GCR, Docker Hub) by scanning

Configures the security features of the Harbor open-source container registry - integrated Trivy scanning, Cosign and Notary content trust…

Hardens GitHub Actions workflows against supply chain attacks, credential

Audits and hardens process historian servers (OSIsoft PI, Honeywell PHD,

Designs and configures secure remote access to OT/ICS environments for

USAP agent skill for Security Architecture.

Security payloads, bypass tables, wordlists, gf pattern names, always-rejected bug list, and conditionally-valid-with-chain table.

Perform a comprehensive, adversarial security audit of a codebase, API, application, or system design.

Run and troubleshoot privacy-preserving, local DSPy RLM security audits for large legacy .NET codebases.

Comprehensive security auditing workflow covering web application testing, API security, penetration testing, vulnerability scanning, and…

URL validation and content sanitization for untrusted sources — use when handling external input safely