Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →alinaqi/security
OWASP security patterns, secrets management, security testing
Passed 13 of 22 test cases with the skill, and 7 of 22 without it.
and 7 more in the full report
6 fixed7 passed either way9 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 6 test cases the skill fixed. Same model, same prompt, with and without the skill.
Please conduct a comprehensive adversarial security audit on our pull request #142 to identify all zero-day exploit vectors, generate proof-of-concept exploit payloads, and produce an evidence-grounded vulnerability assessment report.
| Checked | Without skill | With skill |
|---|---|---|
| Directs the user to an audit-focused tool or auditing skill rather than applying baseline preventive setup configurations. | Missed | Passed |
The instructions your model reads when the skill loads.
Security best practices and automated security testing for all projects.
This skill is preventive — how to write and ship secure code. To audit an existing codebase or PR for vulnerabilities, use the
security-auditskill (structured, adversarial, evidence-grounded); for a quick pass over the current branch, run/security-review.
Security is not optional. Every project must pass security checks before merge. Assume all input is malicious, all secrets will leak if committed, and all dependencies have vulnerabilities.
Every project must have these in .gitignore:
# Environment files - NEVER commit
.env
.env.*
!.env.example
# Secrets
*.pem
*.key
*.p12
*.pfx
credentials.json
secrets.json
*-credentials.json
service-account*.json
test cases passed, vs 7 / 22 without
More skills from the same source and nearby in the registry, with their headline benchmark lift.