“MCP and agent security”

Audit, score, and compare repositories containing portable Agent Plugins against the official Agent Plugins specification.

This skill should be used when the user asks to "scan AI systems for security threats", "check for prompt injection vulnerabilities", "assess model security…

Perform a thorough security review of the project, starting from a randomly selected file.

A.I.G Scanner — AI security scanning for infrastructure, AI tools / skills, AI Agents, and LLM jailbreak evaluation via Tencent Zhuque Lab AI-Infra-Guard.

Review how the lean-ctx ctx_* MCP tools performed in the current session and file upstream issues for confirmed problems.

Run an adversarial security review of untrusted Codex CLI skills, agent skill folders, or downloaded skill repositories before installation or use, only when…

Use when auditing AgentHub agent instructions, MCP configurations, hooks or permissions across Claude, Codex, Cursor and other configured IDEs.

Phased risk-centric security assessment framework.

Audit the workbench for security beyond what the scan sees: every skill, agent, agent override, provider, adapter, script, hook and CI workflow answered…

Rewrites the seed prompt as a professional security inquiry — assigns a credible role (security researcher, red-team analyst, compliance officer) and includes…

Pre-launch security and performance audit for AI-built ("vibe coded") web and mobile apps.

Perform an explicitly requested local or offline source security audit when a hosted scanner is unavailable or a portable audit is requested; preserve…

Use this skill when you need to design security testing around OWASP risks, vulnerability scanning, and penetration scenarios; triggers include security…

Use this skill when you need to design security testing around OWASP risks, vulnerability scanning, and penetration scenarios; triggers include 安全测试 and…

Use when the user asks why IBM Bob asks for approval, how approved or denied command patterns match (prefix, wildcard, case), what "Security warning" or…

Comprehensive security engineering skill for application security, penetration testing, security architecture, and compliance auditing.

Deep, multi-agent security audit of a codebase — WordPress plugin, Laravel, Next.js, Node/Express, Django/Rails, or any app.

Security intelligence for code analysis.

DevSecOps practices including secrets management, SSL/TLS, vulnerability scanning, and compliance

Security forensics for git repos, AI skills, and MCP servers.

Comprehensive security scanning and vulnerability detection.

Scans target codebase files for hardcoded secrets, plain credentials, and dangerous execution functions.

Security assessment and intelligence — network reconnaissance, web app security testing, prompt injection testing, security news monitoring, and annual report…

Database security, access control, and data protection