---
title: "6 agent skills for security"
canonical_url: https://cookiesforai.app/skills/category/security
last_updated: 2026-10-02T03:01:13+02:00
type: skill-category
summary: "6 agent skills for security, each with license, install command and check date."
---

# Agent skills for security

6 agent skills for security, each with license, install command and check date.

- [Differential review](https://cookiesforai.app/skills/trailofbits/differential-review): differential-review is Trail of Bits' agent skill for security review of a pull request, commit or diff, using git history, blast radius counts and test coverage, and ending in a written markdown report.
- [Firebase security rules auditor](https://cookiesforai.app/skills/firebase/firebase-security-rules-auditor): firebase-security-rules-auditor is the Firebase team's agent skill for auditing Firestore and Cloud Storage security rules for privilege escalation, update bypasses and missing limits, returning a 1 to 5 score in JSON.
- [GitHub Actions security review](https://cookiesforai.app/skills/getsentry/gha-security-review): gha-security-review is Sentry's agent skill for auditing GitHub Actions workflows for attacks an outsider can run, such as pwn requests, expression injection and credential theft, with a concrete exploit for each finding.
- [Security review](https://cookiesforai.app/skills/getsentry/security-review): security-review is Sentry's agent skill for reviewing code for exploitable vulnerabilities, such as injection, XSS, broken access control and weak crypto, reporting only findings it has confirmed with high confidence.
- [Semgrep rule creator](https://cookiesforai.app/skills/trailofbits/semgrep-rule-creator): semgrep-rule-creator is Trail of Bits' agent skill for writing custom Semgrep rules that detect vulnerabilities and bug patterns, test-first, with taint mode preferred and every test required to pass.
- [Supply chain risk auditor](https://cookiesforai.app/skills/trailofbits/supply-chain-risk-auditor): supply-chain-risk-auditor is Trail of Bits' agent skill for auditing a project's npm, PyPI and Go dependencies for known advisories, abandoned upstreams, publisher concentration and install scripts, measured by bundled scripts.