The offensive & defensive skills registry
Security Skills
Security work is procedural.
So ship the procedures.
Recon, exploitation, hardening, response and audit — written as reviewable SKILL.md procedures your agent loads on demand.
- skills
- 21
- skills
- domains
- 13
- domains
- phases
- 5
- phases
- agents
- 77
- agents
Install any skill
no repo to clonenpx skills add securityskills/skills— the whole catalog, or one skill by URL from its page
Verified with
- claude code
- codex
- cursor
- opencode
- windsurf
- gemini cli
- amp
- cline
- zed
Every procedure documents authorized testing only. Know your scope.
Engagement chain
tagged by where a skill lands, not just its domain
Review a development pipeline where AI coding agents write, commit and deploy — permission boundaries, approval gates on irreversible actions, credential scope, and what must never be delegated.
Agentic Security2 installs
Turn changes authored by AI coding agents into evidence an auditor accepts — provenance, authorization, and mapping to change-management controls.
Agentic Security2 installs
Coverage map
14 of 65 cells mapped — claim a gap →
Where the registry is deep and where it is open. Hollow cells are the roadmap, not padding.
How it works
Pick a skill
Every entry is a plain SKILL.md — frontmatter plus a markdown procedure. Read it before you install it.
Install it
The skills CLI writes it into your agent's skills directory. One command, no repo to clone.
Use it
Your agent loads the skill when a task matches its description, and follows the procedure step by step.