Essential security tools for finding vulnerabilities, scanning secrets, enforcing code quality, and implementing secure authentication patterns
6 skills · Works with Claude Code, Codex, Cursor & more
Scan your codebase for leaked credentials, API keys, and secrets using TruffleHog. Detects 800+ credential types with live verification against real APIs to confirm which leaks are active.
claude install-skill trailofbits/skills/plugins/supply-chain-risk-auditor/skills/supply-chain-risk-auditor Run lightweight static analysis on your code using Semgrep. Supports 30+ languages with customizable rules for security vulnerabilities, bug patterns, and code style enforcement.
claude install-skill trailofbits/skills/plugins/semgrep-rule-creator/skills/semgrep-rule-creator Security analysis skills from Trail of Bits — static analysis with CodeQL and Semgrep, vulnerability detection, code auditing, and security review workflows.
claude install-skill trailofbits/skills Expert guidance for ffuf web fuzzing during penetration testing. Directory brute-forcing, parameter discovery, virtual host enumeration, and fuzzing workflows.
claude install-skill jthack/ffuf_claude_skill Implement authentication and authorization — OAuth 2.0/OIDC flows, JWT handling, session management, RBAC, and integration with providers like Auth0, Clerk, and NextAuth. Generates secure auth code with proper token handling.
claude install-skill Jeffallan/claude-skills/secure-code-guardian Review code changes for security vulnerabilities, performance issues, and correctness. Catches N+1 queries, injection risks, missing edge cases, and error handling gaps before they reach production.
/engineering:code-review Build AI-powered applications with RAG, multi-agent systems, prompt engineering, and MCP integrations
Modern warehouse-native data engineering — dbt for transformations, Dagster for orchestration, DuckDB and Polars for fast local analytics, plus pipeline and SQL fundamentals
End-to-end deployment, monitoring, and infrastructure skills for shipping and operating production systems