Browse The Skill Store

Expert regex architect for building, auditing, and optimizing high-performance, ReDoS-safe patterns.

🛡️ GitHub Actions Permission Hardener

by JustHandled Labs

$19

Audit and harden GitHub Actions workflows against overbroad permissions, secrets exposure, and supply-chain risks.

The security auditor for AI agents. Detect prompt injection, secret leaks, and unsafe tool access in SKILL.md files.

Fact Check & Compliance Gate

by PubsProToolkit

$19

A pre-publish audit gate to extract claims, verify facts, and flag compliance risks in public-facing content.

🛡️ Helm Chart Security Doctor

by JustHandled Labs

$13

Audit a Helm chart for insecure defaults before you deploy to Kubernetes. Flags privileged containers, allowPrivilegeEscalation, missing CPU/memory limits and requests, hostPath volumes, hostNetwork/hostPID/hostIPC sharing, readOnlyRootFilesystem not set, runAsNonRoot not enforced (or runAsUser 0), plaintext secrets in values.yaml, missing NetworkPolicy, and NodePort/LoadBalancer services exposed without restriction.

Professional-grade Kubernetes YAML auditor for security, API deprecations, and deployment best practices.

🔐 Email Auth Deliverability Doctor

by JustHandled Labs

$12

Audit your SPF, DKIM, and DMARC records for the misconfigurations that get mail rejected or sent to spam. Flags a missing DMARC record or p=none, missing rua reporting, a missing or duplicated SPF record, SPF over the 10-lookup limit, permissive +all/?all, a missing DKIM selector, and SPF/DKIM domain-alignment mismatches. Paste a DNS zone file or dig/nslookup output.

Prompt Injection & Agent Security Gate

by PubsProToolkit

$14

An adversarial security gate that audits untrusted content — web pages, tool outputs, documents, emails — for embedded instructions, exfiltration, and authority spoofing, then returns a SAFE/REVIEW/BLOCK verdict.

📦 Package Supply Chain Sentinel

by JustHandled Labs

$19

Vet dependency changes for supply-chain risk before you install, commit, or release. Scans package and lockfile diffs for install-time lifecycle scripts, non-registry sources, suspicious download commands, typosquatting, and floating versions, across npm, pnpm, yarn, pip, uv, and poetry. Flags what to review with evidence. No install required.

Accessibility Auditor

by Arnstein Larsen

$9.99

Expert accessibility auditing that prioritizes user impact and provides production-ready code fixes for WCAG compliance.

Cloud & Infrastructure Config Security Gate

by PubsProToolkit

$34

An adversarial gate that audits cloud and infrastructure-as-code config — Terraform, Kubernetes, IAM, security groups, buckets — for the misconfigurations that cause real breaches, and returns a structured PASS/REVISE/BLOCK verdict with severities and exact fixes before anything reaches your environment.

🔳 QR Payload Auditor

by JustHandled Labs

$5

Audit the decoded text a QR code carries before you print it on something. Flags URLs that are not absolute, link shorteners that hide the real destination, unsafe schemes (javascript:, data:, file:), payloads too long to scan reliably, malformed Wi-Fi or contact payloads, and exposed credentials like a Wi-Fi password or a token sitting in a URL. It audits the decoded payload you paste; it does not read images.

A security auditor that identifies Docker vulnerabilities, scores configurations, and generates hardened replacements.

Generate source-safe repository audits and repair handoff bundles without mutating your code.

Security Audit & Compliance Toolkit

by Arnstein Larsen

$12.99

A professional-grade toolkit for SAST code reviews, PII scanning, and automated compliance gap analysis.

ai act transparency pack

by Nex AI

$9/mo

Automate EU AI Act transparency audits, Article 50 disclosures, and AI literacy documentation for your apps.

Human Oversight Evidence Pack

by PubsProToolkit

$24

Generate structured, audit-ready evidence logs documenting human review of AI-assisted work products.

Deep audit and detection of the Dirty Frag (CVE-2026-43284/43500) Linux privilege escalation exploit chain.

WordPress Accessibility Auditor

by Arnstein Larsen

$13.99

A structured WCAG 2.1 AA audit and fix agent for WordPress themes, organized by block theme, Gutenberg, forms, and navigation context, with scored findings and complete before-to-after code patches.

WordPress Launch QA Gate

by Arnstein Larsen

$29.99

Turns Claude into a senior WordPress launch reviewer that audits a site, theme, or plugin against the entire pre-launch standard across 7 weighted domains and returns one objective go/no-go decision with a scored blocker list.

WordPress Hardening & Security Audit

by Arnstein Larsen

$8.99

A professional security-ops audit and hardening suite for WordPress installs, including incident recovery runbooks.

Professional accessibility auditing for architects, balancing legal regulations with real-world usability.

MCP Server & Tool Definition Security Gate

by PubsProToolkit

$16

An adversarial gate that audits an MCP server or agent tool definition — schemas, descriptions, scopes, auth — for tool poisoning, excessive agency, injectable descriptions, and missing access controls, then returns one SAFE/REVIEW/BLOCK verdict.

Dependency & Supply Chain Risk Gate

by PubsProToolkit

$12

Audit your project's dependencies for supply-chain risk before they ship. Detects the ecosystem, runs the right vulnerability scanners against live advisory data, and adds the checks tooling misses — outdated or abandoned packages, typosquatted or suspicious names, risky install scripts, and license conflicts — then returns a prioritized fix list and a PASS / REVIEW / BLOCK verdict. It's npm audit with triage and judgment on top.