Browse The Skill Store

linux audit

by SkillBill

$9

Complete security audit for Linux systems and WSL2. Checks kernel CVEs, SSH, firewall, users, and more hardening in one shot.

Agent Hooks Security and Quality Gate

by PubsProToolkit

$12

Adversarially audit your agent hooks before you trust them. Catches command injection, secret leakage, over-broad matchers, destructive actions, and blocking-logic mistakes in pre/post-tool-use, prompt, and stop hooks — with a PASS or REVISE verdict and severity-ranked fixes.

Pre-commit security hooks: secret detection, destructive command prevention

Project-specific Claude Code agent harness setup

Automated security auditing and risk assessment for Model Context Protocol (MCP) servers.

incident lessons learned review

by LocoLoboZ

$10

Convert cyber incident evidence into blameless post-mortem reports, root cause analyses, and action trackers.

PrivacyShield

by Martin Gunderman

$19

Protect sensitive data before it reaches an AI model and automatically restore it in the final response.

🛡️ Skill Injection Scanner

by JustHandled Labs

$15

Scan a SKILL.md package for prompt injection and secret exfiltration before you install or publish an agent skill. Flags env-variable-to-URL exfiltration wording, conditional triggers with hidden side effects, imperative instructions buried in HTML comments, zero-width characters, base64 and long-token blobs, remote content treated as instructions, pipe-to-shell and recursive force-delete references, and overbroad tool requests (network plus browser plus file-write with no scope).

Coding Agent Quality Gate

by PubsProToolkit

$24

An adversarial senior engineer review gate that audits AI-written code for security gaps and logic errors before shipping.

Fact Check & Compliance Gate

by PubsProToolkit

$19

A pre-publish audit gate to extract claims, verify facts, and flag compliance risks in public-facing content.

Cloud & Infrastructure Config Security Gate

by PubsProToolkit

$34

An adversarial gate that audits cloud and infrastructure-as-code config — Terraform, Kubernetes, IAM, security groups, buckets — for the misconfigurations that cause real breaches, and returns a structured PASS/REVISE/BLOCK verdict with severities and exact fixes before anything reaches your environment.

🛡️ Helm Chart Security Doctor

by JustHandled Labs

$13

Audit a Helm chart for insecure defaults before you deploy to Kubernetes. Flags privileged containers, allowPrivilegeEscalation, missing CPU/memory limits and requests, hostPath volumes, hostNetwork/hostPID/hostIPC sharing, readOnlyRootFilesystem not set, runAsNonRoot not enforced (or runAsUser 0), plaintext secrets in values.yaml, missing NetworkPolicy, and NodePort/LoadBalancer services exposed without restriction.

AI Paper Mill & Research Integrity Screener

by PubsProToolkit

$12

First-pass screener that flags AI-generated, paper-mill, and fabricated scholarship using tortured-phrase, citation, statistical, and template detectors.

🕵️ Confusable Handle Detector

by JustHandled Labs

$5

Flag the hidden and look-alike characters lurking in a handle or brand string. Catches zero-width characters, mixed-script look-alikes (a Cyrillic "а" passing as a Latin "a"), right-to-left and bidi override characters, unexpected non-ASCII, and stacked combining marks. These are the spoofing tricks and display bugs you cannot catch by reading.

Human Oversight Evidence Pack

by PubsProToolkit

$24

Generate structured, audit-ready evidence logs documenting human review of AI-assisted work products.

🔳 QR Payload Auditor

by JustHandled Labs

$5

Audit the decoded text a QR code carries before you print it on something. Flags URLs that are not absolute, link shorteners that hide the real destination, unsafe schemes (javascript:, data:, file:), payloads too long to scan reliably, malformed Wi-Fi or contact payloads, and exposed credentials like a Wi-Fi password or a token sitting in a URL. It audits the decoded payload you paste; it does not read images.

PII & Privacy Leak Gate

by PubsProToolkit

$5

An adversarial security gate to detect and redact PII, secrets, and confidential data before sending prompts.

ai agent production hardening kit

by Arnstein Larsen

$19

Transform fragile AI prototypes into resilient, enterprise-ready production agents with professional hardening tools.

AI Disclosure & Provenance Gate

by PubsProToolkit

$5

An adversarial gate to verify AI-use disclosures and draft compliant provenance statements for any venue.

Auth System Designer

by Arnstein Larsen

$9.99

Auth is where one wrong early decision becomes a security incident with your name on it — JWTs chosen for sessions because a tutorial used them, refresh token rotation implemented wrong, RBAC bolted on after the fact

Enterprise-grade WhatsApp Business Cloud API integration for Python with session window management and webhook security.

Dockerfile & Container Build Sanity Gate

by PubsProToolkit

$13

An adversarial reviewer for Dockerfiles and container builds. It flags root users, image bloat, unpinned or cache-busting layers, leaked secrets, and missing hardening, then returns a PASS / FIX / BLOCK verdict — before you build or push the image.

Dependency & Supply Chain Risk Gate

by PubsProToolkit

$12

Audit your project's dependencies for supply-chain risk before they ship. Detects the ecosystem, runs the right vulnerability scanners against live advisory data, and adds the checks tooling misses — outdated or abandoned packages, typosquatted or suspicious names, risky install scripts, and license conflicts — then returns a prioritized fix list and a PASS / REVIEW / BLOCK verdict. It's npm audit with triage and judgment on top.

WordPress CI/CD Pipeline Builder

by Arnstein Larsen

$22.99

Scaffold or harden a production-grade GitHub Actions pipeline for WordPress — with a blocking lint gate that stops broken code before it deploys, and a fail notification that makes silent deployment failures impossible.