Home / Stacks / Security Engineer Kit
🔒

Security Engineer Kit

Essential security tools for finding vulnerabilities, scanning secrets and dependencies, running static analysis, managing secrets, and implementing secure authentication

9 skills · Works with Claude Code, Codex, Cursor & more

⚙️ Engineering
RARE

Security Audit & OWASP Review

Audit an application for security vulnerabilities across the OWASP Top 10. Reviews code for injection, XSS, broken access control, and insecure config, scans dependencies for CVEs, detects exposed secrets, and returns prioritized findings with severity ratings and concrete fixes.

Community 3.9K
Scanned
security owasp audit
mkdir -p ~/.claude/skills/security-audit && curl -fsSL https://raw.githubusercontent.com/TerminalSkills/skills/main/skills/security-audit/SKILL.md -o ~/.claude/skills/security-audit/SKILL.md
⚙️ Engineering
RARE

Semgrep Static Analysis

Run lightweight static analysis on your code using Semgrep. Supports 30+ languages with customizable rules for security vulnerabilities, bug patterns, and code style enforcement.

Trail of Bits 2.8K
Scanned
security sast static-analysis
mkdir -p ~/.claude/skills/semgrep-sast && curl -fsSL https://raw.githubusercontent.com/trailofbits/skills/HEAD/plugins/semgrep-rule-creator/skills/semgrep-rule-creator/SKILL.md -o ~/.claude/skills/semgrep-sast/SKILL.md
⚙️ Engineering
RARE

TruffleHog Secrets Scanner

Scan your codebase for leaked credentials, API keys, and secrets using TruffleHog. Detects 800+ credential types with live verification against real APIs to confirm which leaks are active.

Trail of Bits 3.2K
Scanned
security secrets credentials
mkdir -p ~/.claude/skills/trufflehog-secrets && curl -fsSL https://raw.githubusercontent.com/trailofbits/skills/HEAD/plugins/supply-chain-risk-auditor/skills/supply-chain-risk-auditor/SKILL.md -o ~/.claude/skills/trufflehog-secrets/SKILL.md
⚙️ Engineering
RARE

Trivy Vulnerability Scanner

Scan container images, filesystems, and git repos for CVEs, misconfigurations, exposed secrets, and license issues with Trivy. Covers Docker/OCI images, IaC (Terraform, Kubernetes, Dockerfile), SBOM generation, and gating builds in CI on severity thresholds.

Community 4.2K
Scanned
security vulnerability-scanning containers
mkdir -p ~/.claude/skills/trivy-scanner && curl -fsSL https://raw.githubusercontent.com/TerminalSkills/skills/main/skills/trivy/SKILL.md -o ~/.claude/skills/trivy-scanner/SKILL.md
⚙️ Engineering
RARE

Snyk Vulnerability Scanning

Find and fix vulnerabilities in code, open-source dependencies, containers, and IaC with Snyk. Scans npm, PyPI, and more for CVEs, suggests upgrade paths and patches, checks Docker images and Terraform, and integrates security gates into pull requests and CI.

Community 3.8K
Scanned
security sca dependency-scanning
mkdir -p ~/.claude/skills/snyk-scanning && curl -fsSL https://raw.githubusercontent.com/TerminalSkills/skills/main/skills/snyk/SKILL.md -o ~/.claude/skills/snyk-scanning/SKILL.md
⚙️ Engineering
RARE

HashiCorp Vault Secrets

Manage secrets, encryption keys, and dynamic credentials with HashiCorp Vault. Configure secret engines, issue short-lived dynamic database and cloud credentials, write access policies, integrate with Kubernetes and CI, and use Transit for encryption-as-a-service.

Community 3.4K
Scanned
security secrets-management vault
mkdir -p ~/.claude/skills/hashicorp-vault && curl -fsSL https://raw.githubusercontent.com/TerminalSkills/skills/main/skills/hashicorp-vault/SKILL.md -o ~/.claude/skills/hashicorp-vault/SKILL.md
⚙️ Engineering
RARE

CodeQL Security Analysis

Scan a codebase for security vulnerabilities using CodeQL's interprocedural data flow and taint tracking. Build databases, run security-and-quality and experimental suites, and process SARIF output to surface high-precision findings.

Trail of Bits 1.9K
Scanned
security sast codeql
mkdir -p ~/.claude/skills/community-codeql-analysis && curl -fsSL https://raw.githubusercontent.com/trailofbits/skills/HEAD/plugins/static-analysis/skills/codeql/SKILL.md -o ~/.claude/skills/community-codeql-analysis/SKILL.md
⚙️ Engineering
RARE

OAuth & Authentication

Implement authentication and authorization — OAuth 2.0/OIDC flows, JWT handling, session management, RBAC, and integration with providers like Auth0, Clerk, and NextAuth. Generates secure auth code with proper token handling.

Community 3.8K
Scanned
authentication oauth jwt
mkdir -p ~/.claude/skills/oauth-auth && curl -fsSL https://raw.githubusercontent.com/Jeffallan/claude-skills/HEAD/skills/secure-code-guardian/SKILL.md -o ~/.claude/skills/oauth-auth/SKILL.md
🌐 Community
COMMON

Trail of Bits Security

Security analysis skills from Trail of Bits — static analysis with CodeQL and Semgrep, vulnerability detection, code auditing, and security review workflows.

Trail of Bits 500
Scanned
security automation
mkdir -p ~/.claude/skills/trailofbits-security && curl -fsSL https://raw.githubusercontent.com/georgekhananaev/claude-skills-vault/HEAD/.claude/skills/trailofbits-security/SKILL.md -o ~/.claude/skills/trailofbits-security/SKILL.md

More Stacks

🤝

Agent Engineering Kit

Engineer reliable AI agents — build on the Claude Agent SDK, coordinate teams with multi-agent patterns, give them memory, and keep them safe with mechanical guardrails and evaluation
🕹️

AI Agent Frameworks

Pick the right framework and ship agents fast — type-safe Python with Pydantic AI, multi-agent orchestration with OpenAI Agents SDK, Agno, and CrewAI, TypeScript graphs with LangGraph.js, and typed workflows with Mastra
🤖

AI Builder Stack

Build AI-powered applications with RAG, multi-agent systems, prompt engineering, and MCP integrations

View all stacks →

Added to wishlist