by ComposioHQ
doppler-secretops-automation helps agents automate Doppler SecretOps through Rube MCP by checking connections, searching live tool schemas first, and planning safe workflows.
by ComposioHQ
bitwarden-automation helps agents automate Bitwarden tasks through Composio Rube MCP, with required tool discovery, Bitwarden connection checks, and safer Access Control workflows.
by alirezarezvani
env-secrets-manager helps audit .env files, source code, and config for likely secret leaks, missing variable risks, and rotation readiness. Use it for repository hygiene, CI-friendly scans, and Security Audit workflows with scripts and references for detection, severity, validation, and containment.
by alirezarezvani
senior-security helps AI agents run STRIDE/DREAD threat modeling, analyze DFDs, prioritize mitigations, and perform quick secret scans with included scripts and references. Best for architecture reviews where broad security requests need routing to the right specialist skill.
by alirezarezvani
security-pen-testing is an authorized penetration testing skill for OWASP Top 10 reviews, web and API checks, static analysis, dependency auditing, secret detection, safe attack patterns, responsible disclosure, and structured pen test reports.
by trailofbits
The insecure-defaults skill helps spot fail-open configuration patterns that let software run with unsafe settings instead of stopping. Use it for a Security Audit of production code, deployment configs, and secret-handling logic to catch weak auth, hardcoded secrets, and permissive defaults.
by microsoft
azure-keyvault-secrets-rust is a Rust skill for Azure Key Vault Secrets. It covers storing, reading, updating, deleting, and listing secret metadata with the official azure_security_keyvault_secrets crate, plus authentication, AZURE_KEYVAULT_URL setup, and practical guidance for backend development.
by microsoft
azure-keyvault-py is a Python Azure Key Vault skill for secrets, keys, and certificates. It helps backend development teams choose the right client, install the right packages, configure Azure credentials and environment variables, and follow a practical azure-keyvault-py guide for secure runtime access.
by microsoft
azure-security-keyvault-secrets-java is a Java Azure Key Vault Secrets skill for backend development. Use it to install dependencies, set up authentication, and generate code for storing, reading, updating, deleting, and recovering secrets in Azure-backed services.
by alinaqi
The credentials skill helps locate, identify, and normalize API keys and environment variables from centralized access files like Access.txt. Use it for credentials install, credentials usage, and workflow setup when secrets are stored in one place and need clear env var mapping.
by wrsmith108
varlock is a secure environment variable management skill for Claude Code workflows. It helps you work with secrets, API keys, credentials, and .env files without exposing values in terminals, logs, diffs, or model context. Use varlock when you need safe validation, masking, and guarded access control workflows.
by mukul975
detecting-supply-chain-attacks-in-ci-cd skill for auditing GitHub Actions and CI/CD configs. It helps find unpinned actions, script injection, dependency confusion, secret exposure, and risky permissions for Security Audit workflows. Use it to review a repo, workflow file, or suspicious pipeline change with clear findings and fixes.
by alinaqi
security skill for OWASP patterns, secrets management, and security testing. Use it to review auth, user input, API keys, env vars, and repo hygiene, especially for Security Audit work.
by microsoft
azure-keyvault-secrets-ts helps backend developers manage Azure Key Vault secrets in TypeScript with @azure/keyvault-secrets and @azure/identity. Use it to install, configure auth, and safely store, read, update, delete, list, or recover secrets in Node.js services.
