What are Claude Code Skills?

Claude Code Skills are reusable prompt templates stored as markdown files in your project's .claude/skills/ directory. They let you codify best practices and common workflows into slash commands that Claude follows consistently.

How do I create a Claude Code Skill?

Create a markdown file in .claude/skills/ with instructions for Claude. The filename becomes the command name — for example, .claude/skills/code-review.md can be invoked with /code-review during a Claude Code session.

Can I share skills with my team?

Yes. Skills stored in .claude/skills/ can be committed to version control so every team member has access to the same standardized workflows. You can also organize skills into subdirectories by category.

What is the difference between project and global skills?

Project skills (.claude/skills/) are specific to the current project and are committed to git. Global skills (~/.claude/skills/) are personal skills available across all your projects.

devsecops-skills

44Community RegistryGeneralby Sir AppSec

DevSecOps and CI/CD security automation skills for secrets detection, IaC scanning, and pipeline security

Community PluginView Source

Overview

An assortment of security operations skills for AI coding agents. A collaborative approach to shift-left security using Claude Code skills.

Overview

SecOpsAgentKit provides specialized Claude Code skills for security operations, covering:

•Application Security (AppSec): SAST/DAST, vulnerability analysis, secure code review
•DevSecOps: CI/CD security, infrastructure as code security, container scanning
•Secure SDLC: Threat modeling, security requirements, secure design patterns
•Compliance: Security auditing, policy enforcement, compliance frameworks
•Incident Response: Security event analysis, forensics, remediation workflows

Quick Start

code

/plugin marketplace add https://github.com/AgentSecOps/SecOpsAgentKit.git

Available Skills

Application Security (appsec/)

•[api-mitmproxy](skills/appsec/api-mitmproxy/SKILL.md) - Interactive HTTPS proxy for API security testing with mitmproxy traffic interception and modification
•[api-spectral](skills/appsec/api-spectral/SKILL.md) - API specification linting and security validation using Spectral for OpenAPI and AsyncAPI
•[dast-ffuf](skills/appsec/dast-ffuf/SKILL.md) - Fast web fuzzer using ffuf for directory enumeration and parameter fuzzing
•[dast-nuclei](skills/appsec/dast-nuclei/SKILL.md) - Fast, template-based vulnerability scanning using ProjectDiscovery's Nuclei
•[dast-zap](skills/appsec/dast-zap/SKILL.md) - Dynamic application security testing using OWASP ZAP (Zed Attack Proxy)
•[sast-bandit](skills/appsec/sast-bandit/SKILL.md) - Python security vulnerability detection using Bandit SAST with CWE and OWASP mappings
•[sast-semgrep](skills/appsec/sast-semgrep/SKILL.md) - Static application security testing using Semgrep for vulnerability detection
•[sca-blackduck](skills/appsec/sca-blackduck/SKILL.md) - Software Composition Analysis using Synopsys Black Duck for dependency vulnerabilities and license compliance

DevSecOps (devsecops/)

•[container-grype](skills/devsecops/container-grype/SKILL.md) - Container vulnerability scanning and dependency risk assessment using Grype with CVSS, EPSS, and CISA KEV prioritization
•[container-hadolint](skills/devsecops/container-hadolint/SKILL.md) - Dockerfile security linting and best practice validation using Hadolint
•[iac-checkov](skills/devsecops/iac-checkov/SKILL.md) - Infrastructure as Code security scanning using Checkov with 750+ built-in policies
•[sca-trivy](skills/devsecops/sca-trivy/SKILL.md) - Software Composition Analysis and container vulnerability scanning using Trivy for CVE detection
•[secrets-gitleaks](skills/devsecops/secrets-gitleaks/SKILL.md) - Hardcoded secret detection and prevention in git repositories using Gitleaks
•[vuln-defectdojo](skills/devsecops/vuln-defectdojo/SKILL.md) - Vulnerability management and findings aggregation using DefectDojo for deduplication, SLA tracking, and compliance reporting

Secure SDLC (secsdlc/)

•[reviewdog](skills/secsdlc/reviewdog/SKILL.md) - Automated code review and security linting integration for CI/CD pipelines using reviewdog
•[sast-horusec](skills/secsdlc/sast-horusec/SKILL.md) - Multi-language static application security testing using Horusec (18+ languages, 20+ tools)
•[sbom-syft](skills/secsdlc/sbom-syft/SKILL.md) - Software Bill of Materials (SBOM) generation using Syft for container images and filesystems

Compliance (compliance/)

•[policy-opa](skills/compliance/policy-opa/SKILL.md) - Policy-as-code enforcement and compliance validation using Open Policy Agent (OPA)

Threat Modeling (threatmodel/)

•[pytm](skills/threatmodel/pytm/SKILL.md) - Python-based threat modeling using pytm for STRIDE analysis and data flow diagrams

Incident Response (incident-response/)

•[detection-sigma](skills/incident-response/detection-sigma/SKILL.md) - Generic detection rule creation and management using Sigma (universal SIEM rule format)
•[forensics-osquery](skills/incident-response/forensics-osquery/SKILL.md) - SQL-powered forensic investigation and system interrogation using osquery for endpoint analysis
•[ir-velociraptor](skills/incident-response/ir-velociraptor/SKILL.md) - Endpoint visibility and digital forensics using Velociraptor for incident response at scale

Offensive Security (offsec/)

•[pentest-metasploit](skills/offsec/pentest-metasploit/SKILL.md) - Penetration testing framework using Metasploit for exploit development and vulnerability validation
•[recon-nmap](skills/offsec/recon-nmap/SKILL.md) - Network reconnaissance and security auditing using Nmap for port scanning and service detection
•[network-netcat](skills/offsec/network-netcat/SKILL.md) - Network utility using Netcat for reading/writing data across TCP/UDP connections and port scanning
•[ot-security-assessment](skills/offsec/ot-security-assessment/SKILL.md) - Operational Technology security assessment using Nmap and Metasploit for OT/ICS device discovery and vulnerability assessment
•[analysis-tshark](skills/offsec/analysis-tshark/SKILL.md) - Network protocol analyzer and packet capture tool using tshark for traffic analysis
•[webapp-sqlmap](skills/offsec/webapp-sqlmap/SKILL.md) - Automated SQL injection detection and exploitation using SQLMap for web application security testing
•[webapp-nikto](skills/offsec/webapp-nikto/SKILL.md) - Web server vulnerability scanner using Nikto for identifying security issues and misconfigurations
•[crack-hashcat](skills/offsec/crack-hashcat/SKILL.md) - Advanced password recovery and hash cracking using Hashcat supporting multiple algorithms
•[privesc-linpeas](skills/offsec/privesc-linpeas/SKILL.md) - Linux privilege escalation enumeration and attack surface analysis using LinPEAS for post-exploitation privesc vector discovery

Security Frameworks

Skills in this repository reference industry-standard security frameworks:

•OWASP - Open Web Application Security Project
•CWE - Common Weakness Enumeration
•MITRE ATT&CK - Adversarial Tactics, Techniques & Common Knowledge
•NIST - National Institute of Standards and Technology
•SOC2 - Service Organization Control 2
•PCI-DSS - Payment Card Industry Data Security Standard
•GDPR - General Data Protection Regulation

Contributing

We welcome contributions! Please read CONTRIBUTE.md for:

•Skill creation guidelines
•Frontmatter standards
•Quality requirements
•Submission process

Contributing a New Skill

To kickstart a new skill for this repo:

Initialize: Create a new skill from the template

``bash ./scripts/init_skill.sh my-skill-name appsec ``

Develop: Fill in SKILL.md and add bundled resources

- scripts/ - Executable security tools - references/ - Security framework documentation - assets/ - Templates and configurations

Validate: Run the validation script

``bash ./scripts/validate_skill.py skills/appsec/my-skill-name ``

Update Documentation:

- Add your skill to the README.md (this file) under the appropriate category - Update .claude-plugin/marketplace.json with your skill path

Submit: Open a PR with the [skill] tag

See CONTRIBUTE.md for detailed guidelines including the exact format for README.md entries.

Skill Standards

All skills follow these requirements:

yaml

---
name: skill-name                 # kebab-case identifier
description: >                   # Comprehensive description with use cases
  What the skill does and when to use it...
version: 0.1.0                   # Semantic versioning
maintainer: github-username      # Your GitHub username
category: appsec                 # Primary security domain
tags: [sast, owasp, security]   # Searchable tags
frameworks: [OWASP, CWE]        # Security frameworks referenced
---

•Concise: Keep SKILL.md under 500 lines
•Tested: All scripts must be tested and working
•Secure: Include security considerations and safe defaults
•Documented: Clear instructions using imperative form
•Versioned: Follow semantic versioning (MAJOR.MINOR.PATCH)

Tools & Scripts

•scripts/init_skill.sh - Initialize a new skill from template
•scripts/validate_skill.py - Validate skill structure and frontmatter
•skills/_template/ - Base template for all new skills

Resources

License

This project uses dual licensing:

•Documentation (skills - markdown files): Creative Commons Attribution-ShareAlike 4.0 International (CC-BY-SA 4.0)
•Code (scripts, configurations): Dual-licensed under CC-BY-SA 4.0 and Mozilla Public License 2.0 (MPL 2.0)

This means:

•You can freely use, share, and adapt all content with attribution
•Skills must be shared under the same CC-BY-SA 4.0 license
•Code should be used under MPL 2.0

See LICENSE.md for full license texts and details.

Install & Usage

Create the skills directory

mkdir -p .claude/skills

Download the skill file

mkdir -p .claude/skills && curl -o .claude/skills/devsecops-skills.md https://raw.githubusercontent.com/AgentSecOps/SecOpsAgentKit/main/SKILL.md

Invoke in Claude Code

/devsecops-skills

View source on GitHub

security

Frequently Asked Questions

What is devsecops-skills?

DevSecOps and CI/CD security automation skills for secrets detection, IaC scanning, and pipeline security

How to install devsecops-skills?

To install devsecops-skills, create the .claude/skills directory in your project, then run the curl command to download the skill file. Once installed, invoke it in Claude Code with /devsecops-skills.

What is devsecops-skills best for?

devsecops-skills is a community categorized under General. It is designed for: security. Created by Sir AppSec.