Bounty Security Pattern Master Library — 399 Vulnerability Patterns
$75
A premium library of 399 vulnerability patterns and DeFi attack vectors for AI-driven bug hunting and security audits.
4
145.0(1)
GitHub Copilot Skills for Security
Skills for security audits, static analysis, vulnerability triage, threat modeling, and secrets hygiene. Ship safer software with fewer surprises.
435 live security skills for GitHub Copilot.
security audit
by Roy Yuen
$10
Professional security audit skill for web apps and APIs with structured severity-based findings and remediation plans.
4
0
truth first enterprise
by Roy Yuen
$5
Transform AI claims into verified, risk-assessed technical reports for production, DevOps, and enterprise governance.
3
1
security first
by Roy Yuen
Free
Prevent vulnerabilities before they happen by forcing early security framing and secure-by-default design patterns.
2
63
skill security vendor pack
by Roy Yuen
Free
Audit AI agent skills for security risks, packaging errors, and marketplace readiness with professional reports.
3
29
cybersecurity bridge for all agentic
by Roy Yuen
Free
A high-performance wrapper to route security tasks directly to the Anthropic-Cybersecurity-Skills library.
3
34
AI Cleanroom Solutions Tool Cleanroom Design
Free
Expert AI guidance for ISO-compliant cleanroom design, HVAC filtration setup, and controlled environment installation.
2
10
dependency auditor
by Samuel Rose
$5
Audit dependencies for security, licenses, and health while generating a phased, low-risk upgrade and migration plan.
1
1
skill install safety gate
by Roy Yuen
Free
Automated security and compatibility firewall for installing AI agent skills and Codex/OpenClaw packages.
2
20
Skill Safety Scanner
$29
Scan AI agent skill definitions for malicious instructions, prompt injections, and security risks—locally.
2
0
Claude Code Security Hooks
by Shogun Labs
$15
Pre-commit security hooks: secret detection, destructive command prevention
2
0
business ai governance mesh
by Roy Yuen
$7
A modular governance framework for AI policy, agent risk assessment, human-in-the-loop approvals, and audit trails.
2
0
agent permission boundary audit
by Roy Yuen
$5
Automated governance and risk audit for AI agent tool permissions and authentication boundaries.
2
0
Bug Bounty Triage
$15
Accelerate your bounty hunting with smart program prioritization and vulnerability report triaging for DeFi protocols.
2
0
campaign attribution evidence analysis
by LocoLoboZ
$12
Professional CTI analysis skill for structured attribution using ACH, Diamond Model, and confidence scoring.
2
0
Dependency Upgrade Planner
by Edric Vale
$5
Safe dependency upgrade plans: changelog-aware risk scoring, test hints, and rollback paths.
11
91
Claude Code Agent Harness Setup
by Shogun Labs
$15
Project-specific Claude Code agent harness setup
2
0
Accessibility Auditor (WCAG 2.2)
by rayyer
$10
Find accessibility barriers and WCAG 2.2 AA failures in web and mobile UI code — with file:line, the exact criterion, and a fix
2
15.0(1)
x402 attack surface gate
by Tate Lyman
$19
Automated launch-readiness auditor for x402 and agent-payment API surfaces.
2
0
industrial security zones designer
by LocoLoboZ
$15
Design and validate IEC 62443-compliant security zones and conduits for industrial (OT) networks.
2
0
🛡️ GuardrailDoctor
$29
Review Claude Code hooks, spot configuration gaps, and plan controlled checks with evidence you can inspect.
2
0
MCP Server Safety Checklist
$15
Automated security auditing and risk assessment for Model Context Protocol (MCP) servers.
1
0
sast configuration
by LocoLoboZ
$10
Automate the setup and optimization of Semgrep, SonarQube, and CodeQL for high-signal security testing.
3
3
ai security auditor
by Timoranjes
Free
Comprehensive security auditing for AI agents, covering prompt injection, tool permissions, and data leakage risks.
2
16
Why security skills work in GitHub Copilot
Each skill on this page is a SKILL.md file built for security work and confirmed to run in GitHub Copilot. Install one into .github/copilot/skills/ (repo) or VS Code workspace, start a new session, and GitHub Copilot follows the workflow the creator encoded instead of improvising from a short prompt.
Listings are ranked by installs, upvotes and reviews, so what surfaces first is what other GitHub Copilot users actually keep. Free and paid skills compete on the same page, and every listing shows its security scan result before you download anything.
Learn how it works: Best security auditing skills and How to use Copilot Agent mode skills.
What can you do with GitHub Copilot security skills?
These are the jobs creators are actually shipping skills for in this category. Each one encodes a full workflow, so GitHub Copilot follows the same method every time instead of improvising from a one-line prompt.
- Security
- Cybersecurity
- Security Audit
- Appsec
- Vulnerability
- Pentest
Choosing the right GitHub Copilot skill for security
Start with the outcome, not the label. Open the listing and read the SKILL.md preview: a good security skill states exactly what it does, what it needs from you, and what it deliberately refuses to do. Vague descriptions usually mean vague output.
Then check three things: the install count and reviews (other GitHub Copilot users voting with their setup), whether the creator ships updates, and whether the skill is universal SKILL.md or agent-specific. Free skills are a fine way to test a creator's style before buying their paid work.
Related categories for GitHub Copilot: DevOps & Cloud, APIs & Backend and Code Quality & Review.
Why choose Agensi for GitHub Copilot skills?
Verified creators
Every paid creator is verified before they can sell, so skills come from practitioners, not scraped prompt packs.
8-point security scan
Each version is scanned for prompt injection, credential exfiltration and destructive commands before it goes live.
Free and premium together
Some skills are free, but most are paid. Paid skills show the price upfront and include future updates from the creator.
Installs in 30 seconds
Unzip into .github/copilot/skills/ (repo) or VS Code workspace and start a new session. No plugin store, no build step.
Frequently asked questions
Get in touch
Questions, partnership ideas, or feedback on the platform? Tell us what's working and what isn't, we love to hear from you!
SR
Samuel Rose
Founder & CEO of Agensi
Email UsBook a Callinfo@agensi.io
We typically respond within a few hours during business hours.