awesome-claude-skills-security

Name: awesome-claude-skills-security
Author: Eyadkelleh

Provides wordlists, payloads, and expert workflows for authorized security testing.

Stars

★ 291

Source

GitHub

Updated

2026-07-09

// securityLow risk

Prompt only, no code
Open source
Community-trusted· 291

Running security audit…

Credentials
Network egress
Code execution
Data access
Supply chain

// install

Copy the install command and let the AI configure it · recommended for beginners

No copy-paste install info for "awesome-claude-skills-security" yet — see the docs or source repo.

// examples

Create a directory brute-force plan

Prompt

I am testing a web application in an authorized lab. Based on common SecLists practices, create a plan for directory and file enumeration, including recommended wordlist categories, scan order, false-positive filtering, and steps suitable for collaboration with Claude Code.

Expected

A structured directory enumeration plan showing which wordlists to use, how to scan in phases, and how to organize results.

Organize injection testing payloads

Prompt

For an authorized API security assessment, organize injection testing payloads by SQL injection, command injection, template injection, and XSS. Explain the objective of each group, precautions, and a format for recording results.

Expected

A categorized payload list by vulnerability type, with usage notes, risk warnings, and a result logging template.

Build a bug bounty testing workflow

Prompt

I want to design a Claude Code security testing workflow for an authorized bug bounty target. Provide a step-by-step process from scoping and reconnaissance to validation, evidence collection, and report generation, and note which security skills or agents fit each step.

Expected

A reusable security testing workflow covering reconnaissance through final reporting for bug bounty scenarios.