SkillHey.
Submit a skill

Security Skills for Claude Code, Codex & AI Agents

These skills let an agent review code for vulnerabilities, run penetration-testing workflows against a web app or API, and dig into compiled binaries. The page brings together Strix testing, hardening, dependency review, and reverse engineering.

26 skills

Sub-topics

Security Review & Audit 25 skills

Explore Security skills

5 skills
RecommendedNewest first

Learn Claude Code Skills: Code Review

shareAI-lab

Review code for security, correctness, performance, maintainability and testing gaps.

  • code-review
  • security-review
  • quality-assurance
80.3KStars12.8KForks
Repository last pushed
Ponytail code reuse example
Free
Testing & security

Ponytail: Codebase Audit

Produce a ranked repository audit covering bugs, risky untested code, slow paths and code bloat.

189.4KStars10.5KForks
Repository last pushed
DietrichGebert
Ponytail code reuse example
Free
Testing & security

Ponytail: Code Review

Review a change and its connected code for correctness, safety, performance and unnecessary complexity.

189.4KStars10.5KForks
Repository last pushed
DietrichGebert

Find Security Vulnerabilities In Code

usestrix

Find security vulnerabilities in a codebase or repository with Strix — a white-box AI security review that reads your source, reasons about the actual data flow and authorization model, then exploits what it finds in a live sandbox so every reported issue has a working proof-of-concept instead of a noisy static-analysis alert.

  • security-review
  • code-review
75.1KStars8.5KForks
Repository last pushed

Cloudflare Security Audit

cloudflare

Review security boundaries and investigate evidence-backed vulnerabilities across code, APIs, services and command-line tools.

  • security-audit
  • security-review
70.7KStars4.7KForks
Repository last pushed

Related guides

How to choose Security skills

Start from the artifact: source code points to review or hardening, a running app points to a pentest workflow, and a binary points to reverse-engineering tools. Have a person review the findings before acting on them.

  • Scan a codebase for OWASP Top 10 issues
  • Run a penetration-testing workflow against a staging web app
  • Analyze a binary or CVE and write remediation notes