Search iThub

Search tools, categories and collections. Type at least two characters.

Explore all tools
↑ ↓ to explore resultsEnter to open · Esc to close

Security Skills

Security skills & plugins for AI agents and assistants.

Choosing guide

3 results in Security Skills

Active Pro listings from this category appear first. Your sort applies within Pro and Free results.

Focused collections

Shortlists for Security Skills

Explore collections with tools relevant to this category, grouped by deployment, source model or workload.

Open-source IT tools →

3 matching tools from this category

How to choose security skills tools

Security skills give coding agents structured methods for defensive and investigative work, such as phased source code audits with independent verification, tracing entry points and execution flows through an unfamiliar repository, and organising evidence for reverse engineering or authorised penetration tests. They supply checklists, routing rules and validators rather than scanners of their own. Application security platforms run continuous automated testing, while these skills make an agent's manual review more disciplined.

Read the guide

Who uses these tools

  • Application security engineers reviewing source code
  • Penetration testers working on authorised engagements
  • Developers auditing their own projects before release

Capabilities to compare

  • Phased audit workflows with coverage tracking
  • Independent verification of reported findings
  • Execution flow and entry point tracing
  • Evidence organisation for each investigation case

Operating considerations

  • Legal authorisation for every target analysed
  • Sensitive findings stored in agent logs and files
  • False positives reported with unwarranted confidence
  • Local tool dependencies the skill expects to find

Selection checklist

  1. Run the skill against a project with known vulnerabilities and count which ones it finds.
  2. Check how it separates confirmed findings from hypotheses, and whether each claim cites code evidence.
  3. Confirm the skill refuses or flags work on targets without documented authorisation.

What belongs in this category: A skill or plugin belongs here when it guides an assistant through security review, vulnerability research, reverse engineering or capture-the-flag work, including how findings and evidence are recorded and verified.

Security Skills on iThub in figures

iThub lists 3 tools in Security Skills. 3 of 3 are open source, 1 of 3 can be self-hosted and 3 of 3 have a free, freemium or open-source pricing model.

Tools listed
3
Open source
3
Self-hostable
1
Free to start
3
Desktop app
2

Recently added: Reverse Engineering, reverse-skill, Cloudflare Security Audit Skill

Typical use cases

  • Auditing a codebase for injection and authentication flaws
  • Mapping an unfamiliar repository's architecture before a review
  • Organising evidence during an authorised penetration test
  • Working through capture-the-flag reverse engineering challenges

Trade-offs to model

  • Agent-led audits reason about business logic that scanners miss, but they cost more per run and vary between attempts.
  • Strict verification steps reduce false positives, while faster single-pass reviews surface more leads that need manual triage.

Common mistakes

  • Treating an agent's audit as a complete assessment and skipping dependency scanning and human review.
  • Storing audit findings in shared folders where unpatched vulnerability details can leak.
Decision resources

Continue the technical evaluation

Use the resources that match your decision stage. Profile data and linked sources were refreshed through November 5, 2026.

Evaluation methodology · Corrections process