security first
by Roy Yuen
Free
Prevent vulnerabilities before they happen by forcing early security framing and secure-by-default design patterns.
2
33
Security & Compliance Skills for GitHub Copilot
Skills for security audits, static analysis, vulnerability triage, and compliance checks. Ship safer software and meet regulatory requirements faster.
318 live security & compliance skills for GitHub Copilot.
AI Cleanroom Solutions Tool Cleanroom Design
Free
Expert AI guidance for ISO-compliant cleanroom design, HVAC filtration setup, and controlled environment installation.
2
9
ADA Compliance Checker (Free) Most Common problems only
Free
A fast, free 3-point accessibility screen (text contrast, image alt text, form labels) to spot the most common ADA/WCAG problems before they cost you.
2
5
prompt injection auditor
by Timoranjes
Free
The security auditor for AI agents. Detect prompt injection, secret leaks, and unsafe tool access in SKILL.md files.
1
5
accessibility auditor
by Timoranjes
Free
Audit frontend code for WCAG 2.2 AA compliance with prioritized remediation steps and deep semantic analysis.
2
4
sast configuration
by LocoLoboZ
$10
Automate the setup and optimization of Semgrep, SonarQube, and CodeQL for high-signal security testing.
3
3
soc2 compliance pack
by Kaymue
Free
Get SOC2 Type II-ready in 90 days. 17 policy templates, 64 control mappings, automated AWS/GCP/GitHub evidence collection.
2
3
prompt injection auditor v2
by Kaymue
Free
Audit prompts and MCP tools for prompt injection. 47 attack patterns, OWASP LLM Top 10, generates adversarial tests. CVSS-scored.
2
3
AI Code Reviewer
Free
Evidence-first AI code review that discovers, verifies, prioritizes, and explains meaningful code problems.
1
3
Ironclad — Senior Software Developer
by OnwireFlow
$9.99
Makes your coding agent work like a senior developer: exact money with no rounding errors, configurable rules, real audit trails, honest testing and review. Any stack, any country.
2
1
Api Security Scanner
by Echo Rose
$5
Api Security Scanner - A Premium AI Agent Skill
2
1
Accessibility Auditor (WCAG 2.2)
by rayyer
$10
Find accessibility barriers and WCAG 2.2 AA failures in web and mobile UI code — with file:line, the exact criterion, and a fix
2
15.0(1)
Cloud & Infrastructure Config Security Gate
Free
An adversarial gate that audits cloud and infrastructure-as-code config — Terraform, Kubernetes, IAM, security groups, buckets — for the misconfigurations that cause real breaches, and returns a structured PASS/REVISE/BLOCK verdict with severities and exact fixes before anything reaches your environment.
1
1
dependency auditor
by Samuel Rose
$5
Audit dependencies for security, licenses, and health while generating a phased, low-risk upgrade and migration plan.
1
1
nex us construction payapps
by Nex AI
Free
Generate US construction pay applications, G702/G703 structures, lien waivers, and certified payroll drafts.
5
0
Container Security
by Echo Rose
$7.99
Container Security - A Premium AI Agent Skill
3
0
ransomware response coordinator
by LocoLoboZ
$20
Professional-grade orchestration for ransomware triage, containment, recovery planning, and executive reporting.
3
0
📢 AI Disclosure Linter
$12
Check your app, site, and ad copy for the AI disclosures US regulators and ad platforms now expect: undisclosed AI chatbots, unlabeled AI-generated media, AI-origin ad copy with no disclosure line, and sponsored content with no material-connection language. Read-only, every finding explained in plain English. US and ad-platform focused.
2
0
Medical & Pharma AI Compliance Gate
Free
Audit AI-assisted medical and pharma content for compliance-readiness before it enters formal MLR review or journal submission. It checks claim substantiation and on-label scope, reference integrity (the acute AI risk: fabricated or misrepresented citations), fair balance and safety, AI-use disclosure, ICMJE authorship and GPP, COI and funding, data integrity and patient privacy, and adverse-event flags — then returns a PASS / REVISE / BLOCK verdict with the must-fix list. A readiness pre-check built for the regulated reality of medical communications — not a replacement for formal review.
2
0
cve 2026 31431 copy fail
by Liam Romanis
$5
Detect and assess CVE-2026-31431 "Copy Fail" vulnerability on Linux systems and Kubernetes clusters.
2
0
regex pattern validator
by Timoranjes
Free
Expert regex architect for building, auditing, and optimizing high-performance, ReDoS-safe patterns.
2
0
Security Vulnerability Triage Agent for Small Teams
by Shandra
$50
Turns dependency scan reports and security alerts into prioritized remediation plans with severity, exploitability, affected area, safe fix strategy, and verification checklists.
2
0
Kandji Configuration Auditor
by LB Creations
$24.99
Security review of Kandji agent configurations, library items, and automation for compliance and safety
2
0
Jamf Self Service Credential Helper
by LB Creations
$12.99
Secure, battle-tested patterns for user detection and credential prompting in Jamf and Kandji scripts
2
0
Why security & compliance skills work in GitHub Copilot
Each skill on this page is a SKILL.md file built for security & compliance work and confirmed to run in GitHub Copilot. Install one into .github/copilot/skills/ (repo) or VS Code workspace, start a new session, and GitHub Copilot follows the workflow the creator encoded instead of improvising from a short prompt.
Listings are ranked by installs, upvotes and reviews, so what surfaces first is what other GitHub Copilot users actually keep. Free and paid skills compete on the same page, and every listing shows its security scan result before you download anything.