Security Skills
Security skills & plugins for AI agents and assistants.
3 results in Security Skills
Active Pro listings from this category appear first. Your sort applies within Pro and Free results.
Shortlists for Security Skills
Explore collections with tools relevant to this category, grouped by deployment, source model or workload.
Open-source IT tools →
3 matching tools from this category
How to choose security skills tools
Security skills give coding agents structured methods for defensive and investigative work, such as phased source code audits with independent verification, tracing entry points and execution flows through an unfamiliar repository, and organising evidence for reverse engineering or authorised penetration tests. They supply checklists, routing rules and validators rather than scanners of their own. Application security platforms run continuous automated testing, while these skills make an agent's manual review more disciplined.
Who uses these tools
- Application security engineers reviewing source code
- Penetration testers working on authorised engagements
- Developers auditing their own projects before release
Capabilities to compare
- Phased audit workflows with coverage tracking
- Independent verification of reported findings
- Execution flow and entry point tracing
- Evidence organisation for each investigation case
Operating considerations
- Legal authorisation for every target analysed
- Sensitive findings stored in agent logs and files
- False positives reported with unwarranted confidence
- Local tool dependencies the skill expects to find
Selection checklist
- Run the skill against a project with known vulnerabilities and count which ones it finds.
- Check how it separates confirmed findings from hypotheses, and whether each claim cites code evidence.
- Confirm the skill refuses or flags work on targets without documented authorisation.
What belongs in this category: A skill or plugin belongs here when it guides an assistant through security review, vulnerability research, reverse engineering or capture-the-flag work, including how findings and evidence are recorded and verified.
Security Skills on iThub in figures
iThub lists 3 tools in Security Skills. 3 of 3 are open source, 1 of 3 can be self-hosted and 3 of 3 have a free, freemium or open-source pricing model.
- Tools listed
- 3
- Open source
- 3
- Self-hostable
- 1
- Free to start
- 3
- Desktop app
- 2
Recently added: Reverse Engineering, reverse-skill, Cloudflare Security Audit Skill
Typical use cases
- Auditing a codebase for injection and authentication flaws
- Mapping an unfamiliar repository's architecture before a review
- Organising evidence during an authorised penetration test
- Working through capture-the-flag reverse engineering challenges
Trade-offs to model
- Agent-led audits reason about business logic that scanners miss, but they cost more per run and vary between attempts.
- Strict verification steps reduce false positives, while faster single-pass reviews surface more leads that need manual triage.
Common mistakes
- Treating an agent's audit as a complete assessment and skipping dependency scanning and human review.
- Storing audit findings in shared folders where unpatched vulnerability details can leak.
Browse all AI skills and plugins →Browse open-source security tools →Browse all security skills →
Continue the technical evaluation
Use the resources that match your decision stage. Profile data and linked sources were refreshed through November 5, 2026.
