Security & Compliance Skills for Gemini CLI

    Skills for security audits, static analysis, vulnerability triage, and compliance checks. Ship safer software and meet regulatory requirements faster.

    318 live security & compliance skills for Gemini CLI.

    soc2 compliance pack

    by Kaymue

    Free

    Get SOC2 Type II-ready in 90 days. 17 policy templates, 64 control mappings, automated AWS/GCP/GitHub evidence collection.

    2
    3

    prompt injection auditor v2

    by Kaymue

    Free

    Audit prompts and MCP tools for prompt injection. 47 attack patterns, OWASP LLM Top 10, generates adversarial tests. CVSS-scored.

    2
    3

    Prompt Injection Red Team Kit

    by PubsProToolkit

    Free

    Red-team your own AI agent for prompt-injection and tool-misuse vulnerabilities before it ships — then fix them. Maps your attack surface, generates a defensive test plan with the safe behavior expected for each case, and gives a prioritized mitigations list. Defensive use only.

    1
    2

    Ironclad — Senior Software Developer

    by OnwireFlow

    $9.99

    Makes your coding agent work like a senior developer: exact money with no rounding errors, configurable rules, real audit trails, honest testing and review. Any stack, any country.

    2
    1

    Agent Hooks Security and Quality Gate

    by PubsProToolkit

    Free

    Adversarially audit your agent hooks before you trust them. Catches command injection, secret leakage, over-broad matchers, destructive actions, and blocking-logic mistakes in pre/post-tool-use, prompt, and stop hooks — with a PASS or REVISE verdict and severity-ranked fixes.

    2
    1

    Accessibility Auditor (WCAG 2.2)

    by rayyer

    $10

    Find accessibility barriers and WCAG 2.2 AA failures in web and mobile UI code — with file:line, the exact criterion, and a fix

    2
    15.0(1)

    cve 2026 31431 copy fail

    by Liam Romanis

    $5

    Detect and assess CVE-2026-31431 "Copy Fail" vulnerability on Linux systems and Kubernetes clusters.

    2
    0

    User Detection & Session Context Reviewer

    by LB Creations

    $14.99

    Review macOS admin scripts for reliable current-user detection and safe session-context handling.

    2
    0

    Credential Handling Safety Reviewer

    by LB Creations

    $24.99

    Review scripts and docs for safer handling of passwords, tokens, keys, and sensitive values.

    2
    0

    Shell Script Admin Safety Reviewer

    by LB Creations

    $19.99

    Review bash and zsh admin scripts for safer quoting, input handling, permissions, and rollout readiness.

    2
    0

    campaign attribution evidence analysis

    by LocoLoboZ

    $12

    Professional CTI analysis skill for structured attribution using ACH, Diamond Model, and confidence scoring.

    2
    0

    License & Dependency Compliance Auditor

    by rayyer

    $10

    Automated open-source license audit and risk assessment based on your project's specific distribution model.

    2
    0

    Mobile Store Compliance Auditor

    by rayyer

    $10

    Catch App Store and Google Play rejection causes before you submit — privacy manifest, permissions, billing, target SDK, ATT

    2
    0

    Legal, Security & Compliance Auditor

    by rayyer

    $10

    Adaptive GDPR, CCPA, security, and AI compliance audit with severity-graded findings and law citations

    2
    0

    Agent Skill Adoption Gatekeeper

    by 香意國際

    $19.99

    Review a supplied Agent Skill before installation and produce a documented adopt, sandbox, revise, or decline decision with provenance, permissions, update, and approval controls.

    1
    0

    illinois ai hiring audit

    by Elyas

    $20

    Audits AI hiring tools against Illinois HB 3773 requirements, including ZIP code proxies and notice obligations.

    1
    0

    X Automation Compliance Gate

    by PubsProToolkit

    Free

    Before you point a bot or AI agent at X (Twitter), audit it against the platform's rules. Classifies each action as safe, risky, or likely-to-get-you-suspended, names the rule it hits, and rewrites the dangerous parts into a compliant, account-safe version. For keeping your own account safe — not for spam or evasion.

    1
    0

    AI Data Exposure and Vendor Risk Assessor

    by PubsProToolkit

    Free

    Before you send proprietary or sensitive data to an AI vendor, assess the risk. Classifies what's actually your moat versus regulated, contractual, or harmless data, maps the real exposure vectors by vendor tier, lists the questions to get in writing, and gives a send / send-with-controls / keep-in-house recommendation per data type.

    1
    0

    Dependency Upgrade Planner

    by Edric Vale

    Free

    Safe dependency upgrade plans: changelog-aware risk scoring, test hints, and rollback paths.

    11
    82

    security first

    by Roy Yuen

    Free

    Prevent vulnerabilities before they happen by forcing early security framing and secure-by-default design patterns.

    2
    33

    cybersecurity bridge for all agentic

    by Roy Yuen

    Free

    A high-performance wrapper to route security tasks directly to the Anthropic-Cybersecurity-Skills library.

    3
    23

    skill security vendor pack

    by Roy Yuen

    Free

    Audit AI agent skills for security risks, packaging errors, and marketplace readiness with professional reports.

    3
    20

    Bounty Security Pattern Master Library — 399 Vulnerability Patterns

    by Atlas Agent Suite

    $75

    A premium library of 399 vulnerability patterns and DeFi attack vectors for AI-driven bug hunting and security audits.

    6
    135.0(1)

    skill install safety gate

    by Roy Yuen

    Free

    Automated security and compatibility firewall for installing AI agent skills and Codex/OpenClaw packages.

    2
    13

    Why security & compliance skills work in Gemini CLI

    Each skill on this page is a SKILL.md file built for security & compliance work and confirmed to run in Gemini CLI. Install one into ~/.gemini/skills/, start a new session, and Gemini CLI follows the workflow the creator encoded instead of improvising from a short prompt.

    Listings are ranked by installs, upvotes and reviews, so what surfaces first is what other Gemini CLI users actually keep. Free and paid skills compete on the same page, and every listing shows its security scan result before you download anything.

    Frequently asked questions