Ship agent workflows in 30 seconds. Browse 2,000+ expert-built and security scanned skill -> Browse skills
THE AGENSI STORE
62 skills found
Flag the destructive operations in a shell command or script before anyone runs it. Catches recursive force deletes, force pushes and history rewrites, database drops and truncates, disk-wipe commands (mkfs, dd to a device), permission blowouts (chmod 777), remote content piped into a shell, broad wildcard deletes, and prod-targeting or disabled-safety flags. Each finding comes with a severity and a safer alternative.
Review a database schema, queries, or migration for the mistakes that get expensive in production — bad table design, missing or wrong indexes, slow and N+1 queries, SQL injection, and migrations that lock or break prod. Engine-aware (PostgreSQL, MySQL, SQLite, SQL Server), it runs an ordered review and returns a PASS/REVIEW/BLOCK verdict with prioritized fixes. Schema mistakes are the most expensive kind — this catches them before they ship.
Scaffold a secure, spec-compliant MCP server from a description of the tools you want to expose. Sets up the official SDK (TypeScript or Python/FastMCP), defines tools/resources/prompts with strict JSON Schema, wires the right transport (stdio or Streamable HTTP), adds OAuth 2.1 for remote, and hardens against the MCP-specific footguns — prompt injection via tool output, token passthrough, over-broad scopes, command/path/SSRF injection, leaked secrets — before it ships. Returns a runnable skeleton plus a security checklist. Built by someone who's shipped production MCP servers.
A senior WordPress security auditor that reasons about WP-API taint flow — not regex hits — to find the 8 real plugin/theme vulnerability classes a generic scanner misses, and returns scored findings with ready-to-merge before→after patches.
Generate the model and vendor risk register a security lead asks for the morning after a model gets switched off. It scans your codebase for every model and provider, merges in the owner and data-residency notes you supply, and renders a register with provider, model, where it's used, fallback status, and an availability-risk rating per dependency. Markdown by default, CSV with a flag. Continuity-focused, not a compliance assessment.
Check your app, site, and ad copy for the AI disclosures US regulators and ad platforms now expect: undisclosed AI chatbots, unlabeled AI-generated media, AI-origin ad copy with no disclosure line, and sponsored content with no material-connection language. Read-only, every finding explained in plain English. US and ad-platform focused.
by MasterKilo
All-in-one EU compliance assistant: AI Act classification, GDPR audit, cross-border legal structuring, and EU grant/subsidy scanning — one skill for founders and small businesses.
Red-team your own AI agent for prompt-injection and tool-misuse vulnerabilities before it ships — then fix them. Maps your attack surface, generates a defensive test plan with the safe behavior expected for each case, and gives a prioritized mitigations list. Defensive use only.
Before you point a bot or AI agent at X (Twitter), audit it against the platform's rules. Classifies each action as safe, risky, or likely-to-get-you-suspended, names the rule it hits, and rewrites the dangerous parts into a compliant, account-safe version. For keeping your own account safe — not for spam or evasion.
Review an AI-generated code diff for the failure modes coding agents actually have — claimed-done-but-not-done, gamed or weakened tests, stubs passed off as complete, silent scope creep, hallucinated APIs, and security regressions. Returns an APPROVE or REQUEST CHANGES verdict with a completion check and severity-ranked fixes.
Before you send proprietary or sensitive data to an AI vendor, assess the risk. Classifies what's actually your moat versus regulated, contractual, or harmless data, maps the real exposure vectors by vendor tier, lists the questions to get in writing, and gives a send / send-with-controls / keep-in-house recommendation per data type.
by Timoranjes
Automated security audit and health check for software dependencies across polyglot projects.
A fast, free 3-point accessibility screen (text contrast, image alt text, form labels) to spot the most common ADA/WCAG problems before they cost you.
A pre-submission gate for medical and scientific manuscripts. It audits your near-final draft, abstract, poster, or congress submission for the disclosures journals now screen on intake — AI/LLM-use disclosure (ICMJE-aligned), authorship against the four ICMJE criteria, conflict-of-interest and funding statements, and data availability — then returns a PASS/REVISE verdict naming every gap, plus a ready-to-paste AI-use disclosure statement. Built by a CMPP-certified medical writer.