Complete application security toolkit: OWASP Top 10 protection, secure code review, vulnerability detection, secrets scanning, and security best practices for modern applications.
Comprehensive API security for REST and GraphQL APIs. Use this skill when building or reviewing API endpoints, implementing authentication, or securing data transfer. Activate when: API security, REST security, GraphQL security, API authentication, API rate limiting, API versioning, secure endpoint, API design.
OWASP A09 - Using Components with Known Vulnerabilities. Use this skill when auditing dependencies, updating packages, or reviewing security advisories. Activate when: npm audit, dependency check, vulnerable package, CVE, security advisory, outdated packages, supply chain, package vulnerability, Dependabot, Snyk.
JSON Web Token security best practices. Use this skill when implementing JWT authentication, validating tokens, or reviewing JWT usage. Activate when: JWT, JSON Web Token, token authentication, bearer token, refresh token, token validation, JWT secret, token expiry.
Find and prevent leaked secrets, API keys, and credentials in code. Use this skill when reviewing code for exposed secrets, setting up pre-commit hooks, or auditing repositories. Activate when: leaked secret, API key exposed, credentials in code, hardcoded password, secret scanning, git secrets, pre-commit hook.
Systematic security code review methodology. Use this skill when reviewing pull requests for security issues, auditing critical code paths, or performing security assessments. Activate when: security review, code audit, secure code, review PR for security, find vulnerabilities, security assessment.
Requires secrets
Needs API keys or credentials to function
Own this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimOwn this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimBased on adoption, maintenance, documentation, and repository signals. Not a security audit or endorsement.
67 professional skills + 7 full-featured plugins for AI coding agents — organized by audience so you can find exactly what you need.
Works with Claude Code, Claude Cowork, Cursor, Codex, Windsurf, and 35+ other AI agents.
# Cross-platform skills (works with any AI agent)
npx skills add latestaiagents/agent-skills --all
# Claude Code / Cowork plugins (with MCP integrations)
/plugin marketplace add latestaiagents/agent-skills
/plugin install devops-sre@latestaiagents-agent-skills
Works with Claude Code, Cursor, Codex, Windsurf, Cline, Aider, and 35+ other AI agents.
npx skills add latestaiagents/agent-skills --all
Full plugins with MCP tool integrations and slash commands. Works with Claude Code CLI and Claude Cowork desktop app.
# Step 1: Add our marketplace
/plugin marketplace add latestaiagents/agent-skills
# Step 2: Install plugins you need
/plugin install devops-sre@latestaiagents-agent-skills
/plugin install qa-testing@latestaiagents-agent-skills
/plugin install hr-people-ops@latestaiagents-agent-skills
| You Are | Skills CLI | Claude Plugin |
|---|---|---|
| Everyone | npx skills add latestaiagents/agent-skills/skills/safety --all | /plugin install safety@latestaiagents-agent-skills |
| Developer | npx skills add latestaiagents/agent-skills/skills/developer --all | /plugin install developer-toolkit@latestaiagents-agent-skills |
| DevOps/SRE | npx skills add latestaiagents/agent-skills/skills/mlops --all | /plugin install devops-sre@latestaiagents-agent-skills |
| RAG Engineer | npx skills add latestaiagents/agent-skills/skills/rag-architect --all | /plugin install rag-plugin@latestaiagents-agent-skills |
| Security Engineer | npx skills add latestaiagents/agent-skills/skills/security --all | /plugin install security-guardian@latestaiagents-agent-skills |
| QA/Testing | — | /plugin install qa-testing@latestaiagents-agent-skills |
| HR/People Ops | — | /plugin install hr-people-ops@latestaiagents-agent-skills |
Skills are instructions that teach AI agents how to handle specific tasks. After installation, your AI assistant automatically knows:
No special commands needed — skills activate automatically based on what you're doing.
Safety skills that prevent accidental data loss. Recommended for all users.
npx skills add latestaiagents/agent-skills/skills/safety --all
| Skill | What It Does |
|---|---|
destructive-operation-guard | Core safety protocols for all destructive operations |
migration-safety | Safe database migrations with backup requirements |
database-safety | Prevent accidental DELETE, DROP, TRUNCATE |
file-operation-safety | Protection against rm -rf and bulk deletions |
git-safety | Guard against force push, reset --hard, history loss |
Git workflows, code intelligence, and debugging tools — 19 skills total.
npx skills add latestaiagents/agent-skills/skills/developer --all
| Skill | What It Does |
|---|---|
merge-conflict-surgeon | Step-by-step conflict resolution with context analysis |
commit-message-crafter | Conventional commits that tell a story |
branch-strategy-advisor | GitFlow vs trunk-based — choose what fits |
git-history-detective | Find exactly when and where bugs were introduced |
rebase-safely | Interactive rebase without losing work |
git-undo-wizard | Recover from reset, rebase, and force push disasters |
| Skill | What It Does |
|---|---|
codebase-context-builder | Create CLAUDE.md and optimal context for AI |
ai-code-reviewer | Systematic review of AI-generated code |
refactor-with-ai | Safe, incremental refactoring workflows |
test-generation-patterns | AI-driven test creation that actually works |
debug-with-ai | Structured debugging: hypothesize → verify → fix |
doc-sync-automation | Keep docs updated when code changes |
code-explanation-generator | Clear explanations for complex code |
npx claudepluginhub latestaiagents/agent-skills --plugin security-guardian39 professional skills + 10 slash commands for AI coding agents — Git workflows, debugging, multi-agent architecture, LLMOps, and safety guardrails.
Complete RAG (Retrieval-Augmented Generation) toolkit: chunking strategies, hybrid retrieval, GraphRAG, Agentic RAG, Corrective RAG, evaluation, and production deployment patterns.
Complete HR and People Operations toolkit: job descriptions, recruiting, performance reviews, onboarding, policy management, and employee engagement for modern workplaces.
Complete DevOps/SRE toolkit: incident response, observability, reliability engineering, on-call management, and automation. The most comprehensive open-source DevOps plugin available.
Complete multi-agent systems toolkit: LangGraph workflows, agent orchestration patterns, supervisor hierarchies, human-in-the-loop, A2A protocols, memory systems, and production deployment.
Specialized security review subagent
Security best practices advisor with vulnerability detection and fixes
Secure coding, OWASP guidance, input validation, cryptography, authentication, and secrets management for secure application development.
Security vulnerability detection and remediation: OWASP Top 10, SAST scanning, CVE research, dependency audit, secrets detection
Automated OWASP security checks — Web Top 10:2025, LLM Top 10:2025, API Security Top 10:2023
Agentic-Security is a powerful Claude Code plugin that automatically performs Application Security Testing (SAST, SCA, secrets detection, and more). Think of it as the easy button for making your Claude-generated code safe and secure.