Agent Skills Hub

code-security

Comprehensive secure coding guidelines for 15+ languages, covering OWASP Top 10, infrastructure security, and best practices to identify vulnerabilities in code, configurations, and cloud setups.

security-assessment

Systematic security assessment using STRIDE threat modeling, OWASP top 10 review, and secure coding practices for code, architecture, and infrastructure.

Auditing Security

Perform systematic security audits, vulnerability scanning, and risk assessments with OWASP-aligned methodology for robust code protection.

code-review-specialist

A specialized code review agent that performs multi-dimensional analysis covering security vulnerabilities, performance optimization, code quality, and maintainability standards.

clawsec-nanoclaw

Security advisory monitoring for NanoClaw WhatsApp bots, providing vulnerability scanning, skill safety checks, and integrity protection through MCP tools.

performance-security

Optimize React performance, implement security hardening, and ensure WCAG accessibility compliance with automated patterns and checklists.

springboot-security

Spring Security best practices for Spring Boot: Auth, validation, CSRF protection, secret management, rate limiting, and dependency security.

security-hardening

Comprehensive security audit and hardening for AI agents: credential scanning, PII protection, prompt injection defense, and workspace config optimization.

report-writing

A professional bug bounty reporting agent that enforces impact-first writing, CVSS 3.1 scoring, and pre-submit validation for platforms like HackerOne, Bugcrowd, and Intigriti.

security-testing

Automated security vulnerability scanner implementing OWASP Top 10 testing for SAST/DAST, dependency auditing, and auth/authorization validation in CI/CD pipelines.

backend-core

Language-agnostic backend architectural patterns covering API design, authentication, security protocols, and database modeling.

configuring-firewalls

Configure host-based firewalls (UFW, nftables, iptables) and cloud security groups (AWS, GCP, Azure) with production-ready security rules.