Browse The Skill Store

Automated governance and risk audit for AI agent tool permissions and authentication boundaries.

Solo SaaS Architect

by tudor

$5

Automatically builds complete, launch-ready SaaS websites, databases, and secure user dashboards, with security audits at each step.

phishing simulation campaign manager

by LocoLoboZ

$12

End-to-end management of authorized phishing simulations, from safe content design to executive reporting.

A rigorous security auditor that scans code for OWASP Top 10 vulnerabilities with severity ratings and concrete fixes.

spearphishing simulation governance

by LocoLoboZ

$12

Design and govern authorized spearphishing simulations with professional reporting and stakeholder alignment.

Prompt Injection & Agent Security Gate

by PubsProToolkit

Free

An adversarial security gate that audits untrusted content — web pages, tool outputs, documents, emails — for embedded instructions, exfiltration, and authority spoofing, then returns a SAFE/REVIEW/BLOCK verdict.

🔐 Email Auth Deliverability Doctor

by JustHandled Labs

$12

Audit your SPF, DKIM, and DMARC records for the misconfigurations that get mail rejected or sent to spam. Flags a missing DMARC record or p=none, missing rua reporting, a missing or duplicated SPF record, SPF over the 10-lookup limit, permissive +all/?all, a missing DKIM selector, and SPF/DKIM domain-alignment mismatches. Paste a DNS zone file or dig/nslookup output.

nex multitenant saas fastapi

by Nex AI

$9

Prevent data leaks with auto-injected SQLAlchemy tenant scoping and Cloudflare Access auth for FastAPI SaaS apps.

MCP Server & Tool Definition Security Gate

by PubsProToolkit

Free

An adversarial gate that audits an MCP server or agent tool definition — schemas, descriptions, scopes, auth — for tool poisoning, excessive agency, injectable descriptions, and missing access controls, then returns one SAFE/REVIEW/BLOCK verdict.

Auth System Designer

by Arnstein Larsen

$9.99

Auth is where one wrong early decision becomes a security incident with your name on it — JWTs chosen for sessions because a tutorial used them, refresh token rotation implemented wrong, RBAC bolted on after the fact

authorizing api requests

by Daryna Ivanova

Free

Secure authentication and account resolution for Mailtrap Email Sending, Sandbox, and Account APIs.

API Contract Tester

by Arnstein Larsen

$5

Turns an OpenAPI/Swagger spec into an exhaustive, framework-ready test suite — happy-path, validation, contract-conformance, auth, and defensive security tests — with a coverage matrix mapping every endpoint, status code, and schema constraint to a test.

MCP Server Builder

by PubsProToolkit

Free

Scaffold a secure, spec-compliant MCP server from a description of the tools you want to expose. Sets up the official SDK (TypeScript or Python/FastMCP), defines tools/resources/prompts with strict JSON Schema, wires the right transport (stdio or Streamable HTTP), adds OAuth 2.1 for remote, and hardens against the MCP-specific footguns — prompt injection via tool output, token passthrough, over-broad scopes, command/path/SSRF injection, leaked secrets — before it ships. Returns a runnable skeleton plus a security checklist. Built by someone who's shipped production MCP servers.

Manuscript Disclosure & Submission Readiness Gate

by PubsProToolkit

Free

A pre-submission gate for medical and scientific manuscripts. It audits your near-final draft, abstract, poster, or congress submission for the disclosures journals now screen on intake — AI/LLM-use disclosure (ICMJE-aligned), authorship against the four ICMJE criteria, conflict-of-interest and funding statements, and data availability — then returns a PASS/REVISE verdict naming every gap, plus a ready-to-paste AI-use disclosure statement. Built by a CMPP-certified medical writer.

Medical & Pharma AI Compliance Gate

by PubsProToolkit

Free

Audit AI-assisted medical and pharma content for compliance-readiness before it enters formal MLR review or journal submission. It checks claim substantiation and on-label scope, reference integrity (the acute AI risk: fabricated or misrepresented citations), fair balance and safety, AI-use disclosure, ICMJE authorship and GPP, COI and funding, data integrity and patient privacy, and adverse-event flags — then returns a PASS / REVISE / BLOCK verdict with the must-fix list. A readiness pre-check built for the regulated reality of medical communications — not a replacement for formal review.

Android Auth Pro

by Echo Rose

$5

Android Auth Pro - A Premium AI Agent Skill

Auth System Auditor

by Echo Rose

$7.99

Auth System Auditor - A Premium AI Agent Skill

User Profile & Account Settings UI Architect

by Shandra

$7.99

Designs complete, trustworthy, accessible, and implementation-ready profile and account-settings experiences for web and mobile products. Covers personal information, public and private profiles, authentication, security, sessions, billing, subscriptions, notifications, privacy, connected accounts, integrations, preferences, teams, data controls, account status, deactivation, deletion, analytics, QA, and developer handoff.

Mobile App UX Flow Architect

by Shandra

$7.99

Creates complete mobile app UX flows from first launch to activation, conversion, retention, and account management. Covers onboarding, authentication, account setup, permissions, home screens, navigation, search, profiles, checkout, booking, subscriptions, notifications, settings, security, errors, offline states, deep links, accessibility, analytics, QA, and developer handoff.

Authorization Boundary Test Reviewer

by heyhridyansh

$9.99

Audit authorization test coverage to find gaps in tenant isolation, object ownership, and privilege boundaries.

Repair file-upload drift across validation, object keys, authorization, quarantine, scanning, finalization, retries, downloads, cleanup, tests, and docs.

Repair session revocation gaps that leave JWTs, refresh tokens, cookies, WebSockets, or cached authorization usable after logout or suspension.

Repair invitation lifecycle drift across tenant scope, tokens, roles, expiry, resend, revoke, acceptance, account linking, and retries.

Automatically add login authentication to existing apps.