Browse The Skill Store

ransomware response coordinator

by LocoLoboZ

$20

Professional-grade orchestration for ransomware triage, containment, recovery planning, and executive reporting.

anti phishing training program

by LocoLoboZ

$10

Design, govern, and report on enterprise-grade anti-phishing training programs and simulation metrics.

🔒 PII & Data Leak Scanner

by JustHandled Labs

$15

Scan your schemas, seed data, config, and logs for personal data before it leaks. Detects PII-indicating column and key names (email, ssn, phone, address) across SQL, CSV, and JSON, plus PII in the data itself: email addresses, SSN-like numbers, credit-card-like numbers, phone numbers, and PII written into log files. Each finding is flagged with its location and a GDPR-style review note. Heuristic by design: it surfaces what to review, not a compliance guarantee.

🤖 AI Agent Auditor

by Martin Gunderman

$7

Analyzes AI agents for performance, reliability, security, and optimization opportunities.

cyber attack chain analysis

by LocoLoboZ

$12

Transform incident timelines into structured Cyber Kill Chain mappings and high-impact defensive roadmaps.

PrivacyShield

by Martin Gunderman

$19

Protect sensitive data before it reaches an AI model and automatically restore it in the final response.

Detect and remediate CVE-2026-45185 "Dead.Letter" RCE vulnerabilities in Exim mail servers.

Coding Agent Quality Gate

by PubsProToolkit

$24

An adversarial senior engineer review gate that audits AI-written code for security gaps and logic errors before shipping.

nex dark pattern detector ext

by Nex AI

$5

A complete Manifest V3 Chrome extension to detect and highlight manipulative UI dark patterns on any website.

GDPR Compliance Scanner for Marketing and Code

by Martin Gunderman

$15

Automatically detect GDPR compliance risks in websites, codebases, marketing assets, and AI workflows.

✍️ AI Prompt Auditor

by Martin Gunderman

$7

Systematic audit for AI prompts to detect security flaws, bias, and cost-inefficiencies with auto-optimization.

The security auditor for AI agents. Detect prompt injection, secret leaks, and unsafe tool access in SKILL.md files.

🛡️ GitHub Actions Permission Hardener

by JustHandled Labs

$19

Audit and harden GitHub Actions workflows against overbroad permissions, secrets exposure, and supply-chain risks.

Fact Check & Compliance Gate

by PubsProToolkit

$19

A pre-publish audit gate to extract claims, verify facts, and flag compliance risks in public-facing content.

🛡️ Helm Chart Security Doctor

by JustHandled Labs

$13

Audit a Helm chart for insecure defaults before you deploy to Kubernetes. Flags privileged containers, allowPrivilegeEscalation, missing CPU/memory limits and requests, hostPath volumes, hostNetwork/hostPID/hostIPC sharing, readOnlyRootFilesystem not set, runAsNonRoot not enforced (or runAsUser 0), plaintext secrets in values.yaml, missing NetworkPolicy, and NodePort/LoadBalancer services exposed without restriction.

🚀 Launch Readiness Checklist Generator

by JustHandled Labs

$9

Generate a personalized before-you-ship checklist for your app, with the things you already have checked off. Pick your app type (web app, SaaS, store, or content) and it builds a tailored list covering security, legal basics (privacy policy, terms, cookie consent), social preview, payments and refunds, accessibility, analytics, and backups, then scans your repo and pre-checks what is already there. Every item says why it matters in plain English.

🔐 Email Auth Deliverability Doctor

by JustHandled Labs

$12

Audit your SPF, DKIM, and DMARC records for the misconfigurations that get mail rejected or sent to spam. Flags a missing DMARC record or p=none, missing rua reporting, a missing or duplicated SPF record, SPF over the 10-lookup limit, permissive +all/?all, a missing DKIM selector, and SPF/DKIM domain-alignment mismatches. Paste a DNS zone file or dig/nslookup output.

Prompt Injection & Agent Security Gate

by PubsProToolkit

$14

An adversarial security gate that audits untrusted content — web pages, tool outputs, documents, emails — for embedded instructions, exfiltration, and authority spoofing, then returns a SAFE/REVIEW/BLOCK verdict.

AI Paper Mill & Research Integrity Screener

by PubsProToolkit

$12

First-pass screener that flags AI-generated, paper-mill, and fabricated scholarship using tortured-phrase, citation, statistical, and template detectors.

📦 Package Supply Chain Sentinel

by JustHandled Labs

$19

Vet dependency changes for supply-chain risk before you install, commit, or release. Scans package and lockfile diffs for install-time lifecycle scripts, non-registry sources, suspicious download commands, typosquatting, and floating versions, across npm, pnpm, yarn, pip, uv, and poetry. Flags what to review with evidence. No install required.

Detect and assess CVE-2026-31431 "Copy Fail" vulnerability on Linux systems and Kubernetes clusters.

nex multitenant saas fastapi

by Nex AI

$9

Prevent data leaks with auto-injected SQLAlchemy tenant scoping and Cloudflare Access auth for FastAPI SaaS apps.

A security auditor that identifies Docker vulnerabilities, scores configurations, and generates hardened replacements.

Generate source-safe repository audits and repair handoff bundles without mutating your code.