Best Claude skills for security
Security skills range from Cloudflare's multi-phase security audit to hundreds of structured cybersecurity playbooks mapped to MITRE ATT&CK and NIST. Use them to audit your own code, harden infrastructure or practice CTF challenges. Always stay within systems you are authorized to test.
140 security skills · ranked live · November 2026
The top 10. Ranked by the Alyn Score.
- 1#1
affaan-m
Accessibility
Design, implement, and audit accessible UI to WCAG 2.2 Level AA across Web, iOS, and Android — semantic ARIA roles and labels, accessibility traits and hints, focus management, contrast…
301k1.7MScore 89 - 2#2
Agent Security Hardening
Security hardening guidance for AI agent frameworks that process untrusted content, invoke tools, write workspace files, manage runtime identifiers, or handle credentials. Use when building…
301k1.7MScore 89 - 3#3
Addy Osmani
Security And Hardening
Hardens code against vulnerabilities. Use when auditing an input handler for vulnerabilities, when handling user input, authentication, data storage, or external integrations, or when…
115k1.8MScore 87 - 4#4
wshobson
Agents
wshobson
Hybrid Cloud Networking
Configure secure, high-performance connectivity between on-premises infrastructure and cloud platforms using VPN and dedicated connections. Use when building hybrid cloud architectures…
42k2.6MScore 85 - 5#5
morluto
Rea Analysis Optimization
Optimize REA providers and shared analysis workflows for agent context, latency, CPU, and memory while preserving correctness and Evidence. Use for analysis bottlenecks and cache or query…
450k29kScore 85 - 6#6
Rea Ci Tests Audit
Audit REA CI and test suites for correctness, fixture drift, false passes, and measured performance; use for suite or workflow investigations and efficiency changes, rather than ordinary…
450k29kScore 85 - 7#7
Reverse Engineer Anything
Reverse engineer native, managed, Electron/JavaScript, packaged, firmware, and browser targets with REA, and build agent environments (AgentEnv bundles) of web applications from a live…
450k29kScore 85 - 8#8
wshobson
Agents
Screen Reader Testing
Test web applications with screen readers including VoiceOver, NVDA, and JAWS. Use when validating screen reader compatibility, debugging accessibility issues, or ensuring assistive…
42k2.6MScore 85 - 9#9
GitHub
Awesome Copilot
GitHub
Agent Owasp Compliance
Check any AI agent codebase against the OWASP Agentic Security Initiative (ASI) Top 10 risks. Use this skill when: - Evaluating an agent system's security posture before production…
41k2.4MScore 83 - 10#10
Google
Skills
Google
Agent Platform Alert Configuration
Configures best-practice alerting policies for AI agents using OpenTelemetry (OTel) metrics, generating output as Terraform (.tf) configuration files. Use when analyzing, writing, or…
24k1.1MScore 83
What makes a great security skill.
Findings with evidence and severity, not speculative warnings.
Clear scope rules: only systems you own or are authorized to test.
Machine-readable output you can track over time.
All 140 security skills.
BagelHole
DevOps Security Agent Skills
BagelHoleai-pipeline-orchestration
Orchestrate AI/ML pipelines for data ingestion, model training, batch inference, and RAG indexing using Prefect, Airflow, or Dagster. Build reliable, observable, and retriable workflows for…
BagelHole
DevOps Security Agent Skills
BagelHoleai-sre-incident-response
Build AI-focused SRE incident response practices for LLM outages, degraded quality, runaway cost events, and safety regressions.
BagelHole
DevOps Security Agent Skills
BagelHolealerting-oncall
Set up alerting rules, configure on-call rotations, and manage incident response workflows. Integrate with PagerDuty, Opsgenie, or Grafana OnCall for alert routing and escalation. Use when…
BagelHole
DevOps Security Agent Skills
BagelHoleasset-inventory
Maintain IT asset inventory and configuration management database. Track hardware, software, and cloud resources. Use when managing IT assets.
BagelHole
DevOps Security Agent Skills
BagelHoleaudit-logging
Implement centralized audit logging and SIEM integration. Configure log retention and security monitoring. Use when implementing audit trail requirements.
BagelHole
DevOps Security Agent Skills
BagelHoleaws-cloudtrail
Configure AWS CloudTrail for audit logging. Set up organization trails and event analysis. Use when auditing AWS activity.
BagelHole
DevOps Security Agent Skills
BagelHoleazure-devops
Set up Azure Pipelines for CI/CD, configure build and release pipelines, manage Azure DevOps projects, and integrate with Azure services. Use when working with Azure DevOps Services or…
BagelHole
DevOps Security Agent Skills
BagelHoleazure-monitor-audit
Configure Azure Monitor and Activity Log for auditing. Set up diagnostic settings and log analytics. Use when auditing Azure activity.
BagelHole
DevOps Security Agent Skills
BagelHolebusiness-continuity
Develop business continuity plans and impact analysis. Implement BCP testing and communication procedures. Use when building organizational resilience.
BagelHole
DevOps Security Agent Skills
BagelHolechange-management
Implement change management processes. Configure CAB reviews, change windows, and rollback procedures. Use when managing production changes.
BagelHole
DevOps Security Agent Skills
BagelHolecircleci
Configure CircleCI workflows and orbs for continuous integration and deployment. Create config.yml pipelines, use orbs for reusable configurations, and optimize build performance. Use when…
BagelHole
DevOps Security Agent Skills
BagelHolecontainer-registries
Manage container registries including ECR, ACR, GCR, and Docker Hub. Push and pull images, configure authentication, set up repository policies, and implement image lifecycle management…
BagelHole
DevOps Security Agent Skills
BagelHoledevcontainers-nix
Create reproducible development environments with Dev Containers, Nix flakes, and Devbox for consistent toolchains across teams. Use when onboarding developers, standardizing build…
BagelHole
DevOps Security Agent Skills
BagelHoledisaster-recovery
Implement disaster recovery strategies and runbooks. Configure RPO/RTO targets and failover procedures. Use when planning for business continuity.
BagelHole
DevOps Security Agent Skills
BagelHolefedramp-compliance
Implement FedRAMP requirements for federal cloud services. Configure NIST 800-53 controls and continuous monitoring. Use when providing cloud services to US federal agencies.
BagelHole
DevOps Security Agent Skills
BagelHolegcp-audit-logs
Configure GCP Cloud Audit Logs for compliance. Set up log routing and BigQuery analysis. Use when auditing GCP activity.
BagelHole
DevOps Security Agent Skills
BagelHolegdpr-compliance
Implement GDPR data protection requirements. Configure consent management, data subject rights, and privacy by design. Use when processing EU personal data.
BagelHole
DevOps Security Agent Skills
BagelHolehipaa-compliance
Implement HIPAA security and privacy rules. Configure PHI protections and BAA requirements. Use when handling healthcare data.
BagelHole
DevOps Security Agent Skills
BagelHoleincident-management
Implement incident management processes and escalation procedures. Configure on-call schedules and post-incident reviews. Use when managing production incidents.
BagelHole
DevOps Security Agent Skills
BagelHoleiso27001-compliance
Implement ISO 27001 Information Security Management System. Configure ISMS controls and risk management. Use when implementing enterprise security frameworks.
BagelHole
DevOps Security Agent Skills
BagelHolellm-caching
Implement multi-layer LLM caching with exact match, semantic similarity, and provider-side prompt caching. Reduce API costs by 30–70%, cut latency, and improve throughput using Redis…
BagelHole
DevOps Security Agent Skills
BagelHolellm-cost-optimization
Reduce LLM API and infrastructure costs through model selection, prompt caching, batching, caching, quantization, and self-hosting strategies. Track spend by team and model, set budgets…
BagelHole
DevOps Security Agent Skills
BagelHolellmops-platform-engineering
Build production LLMOps platforms with CI/CD, model promotion workflows, evaluation gates, rollback, and governance across cloud and self-hosted inference.
BagelHole
DevOps Security Agent Skills
BagelHolemodel-registry-governance
Establish model registry standards, governance controls, metadata schemas, approvals, and lifecycle policies for enterprise AI deployments.
BagelHole
DevOps Security Agent Skills
BagelHolepci-dss-compliance
Implement PCI DSS requirements for payment card data. Configure cardholder data environment and security controls. Use when processing payment cards.
BagelHole
DevOps Security Agent Skills
BagelHolepodman
Manage containers using Podman, the daemonless container engine. Run rootless containers, create pods, manage images, and use Docker-compatible commands. Use when working with Podman or…
BagelHole
DevOps Security Agent Skills
BagelHolepolicy-as-code
Implement policy as code with OPA, Sentinel, and Kyverno. Automate policy enforcement in CI/CD and infrastructure. Use when enforcing compliance through automation.
BagelHole
DevOps Security Agent Skills
BagelHolerag-observability-evals
Monitor and evaluate RAG systems with retrieval quality metrics, groundedness checks, hallucination detection, and continuous regression testing.
BagelHole
DevOps Security Agent Skills
BagelHolerunbook-creation
Create operational runbooks and standard operating procedures. Document troubleshooting guides and recovery procedures. Use when documenting operational knowledge.
BagelHole
DevOps Security Agent Skills
BagelHolesoc2-compliance
Implement SOC 2 Trust Services Criteria. Configure security, availability, and processing integrity controls. Use when achieving SOC 2 certification.
BagelHole
DevOps Security Agent Skills
BagelHolevendor-management
Implement vendor risk management programs. Assess third-party security and maintain vendor inventory. Use when managing supplier security.
zubair-trabzadalegal
You are the AI Legal Assistant, a suite of 14 Claude Code skills that help users review contracts, generate legal documents, check compliance, and produce professional PDF reports.
Security skills, explained.
Also searched as: security audit skill, cybersecurity agent skills, pentest skill, ctf skills.
What are the best Claude skills for security?
Right now the top-ranked security skills on Alyn are Accessibility (affaan-m), Agent Security Hardening (affaan-m), Security And Hardening (Addy Osmani). Rankings combine GitHub stars, installs, freshness and depth, and update live.
What is the Cloudflare security audit skill?
A coding-agent skill from Cloudflare that runs multi-phase security audits and produces independently verified, machine-readable findings.
Can skills themselves be a security risk?
Yes. Skills can include scripts. Read SKILL.md and any bundled scripts before installing, and prefer well-known authors. Alyn shows file counts and links every file.
How do I install a security skill?
Run npx skills add owner/repo in your project, or copy the folder with SKILL.md into ~/.claude/skills. Every skill on this page has a ready-to-copy command.
More in Build
Security skills for your agent