"15 AI Agent Skills for Security Engineers"
2026-06-24 · security review penetration testing audit
Security engineers need AI that understands attack surfaces, vulnerabilities, and compliance. These 15 skills give your AI security expertise.
Why Security Engineers Need Specialized Skills
A general AI agent can write code, but it doesn't know: - OWASP Top 10 specifics - Your project's attack surface - How to do proper threat modeling - Standard penetration testing workflows
Security skills teach your AI this domain knowledge.
Vulnerability Scanning (5 skills)
1. security-and-hardening ⭐ 25K
System hardening guide covering Linux/Windows/Docker/K8s. Ask AI to "check this server's security config" and it will audit SSH, firewall, file permissions, Docker security options, and more.
2. Anthropic-Cybersecurity-Skills ⭐ 19K
Official Anthropic security review skill focused on code-level vulnerability detection: SQL injection, XSS, CSRF, insecure deserialization, hardcoded secrets.
3. Claude-Red ⭐ 2.3K
Red team exercise simulation — AI plays the attacker role to help find defensive blind spots.
4. Claude-BugHunter ⭐ 2.6K
Systematic bug bounty workflow: information gathering → subdomain enumeration → port scanning → vulnerability validation → report generation.
5. Claude-OSINT ⭐ 1.8K
OSINT (Open Source Intelligence) toolkit for information gathering: WHOIS, DNS records, social media, code repository leak detection.
Penetration Testing (4 skills)
6. ffuf_claude_skill ⭐ 192
Teaches AI to use ffuf for web directory and parameter fuzzing.
7. ECC ⭐ 220K
The most comprehensive security control framework — covers 20+ security domains including access control, encryption, logging, incident response.
8. solidstate-security ⭐ 5.8K
Security architecture and design review: least privilege, defense in depth, zero trust, security boundaries.
9. trailofbits-skills ⭐ 5.8K
Trail of Bits (top security firm) audit methodology.
Security Documentation (3 skills)
10. security-audit-report ⭐ 2K
Auto-generate standardized security audit reports: executive summary, findings, risk ratings, remediation recommendations.
11. threat-modeling ⭐ 1.5K
STRIDE/DREAD threat modeling framework implementation.
12. compliance-checker ⭐ 1K
SOC2/ISO27001/PCI-DSS compliance checking.
Secure Coding (3 skills)
13. secure-coding-standards ⭐ 3K
Security best practices for Python/JavaScript/Java/Go/Rust.
14. dependency-scanner ⭐ 1.2K
Check project dependencies for known vulnerabilities.
15. secrets-detection ⭐ 800
Detect hardcoded keys, tokens, and passwords in code.
How to Choose
| Your Role | Recommended Skills |
|---|---|
| Security Engineer (daily) | ECC + Anthropic-Cybersecurity + secure-coding |
| Penetration Tester | Claude-Red + ffuf + Claude-BugHunter |
| Security Architect | threat-modeling + solidstate + trailofbits |
| Compliance Officer | compliance-checker + security-audit-report |
| Developer (hardening) | security-and-hardening + dependency-scanner + secrets-detection |
Install Example
# ECC (most comprehensive)
git clone --depth 1 https://github.com/affaan-m/ECC.git && cp ECC/skills/accessibility ~/.claude/skills/accessibility
Check SkillsNav Security category for the latest security skills.