# secskills

**Security skills for Claude Code that encode the judgment professionals bring, not another wrapper around a scanner.** Offense, defense, and the reverse-engineering and code-audit core both sides share. Every skill is fact-checked against primary sources.

- Tier: Indexed (plain plugin)
- Category: Security
- Page: https://www.flowy.sh/listings/trilwu-secskills
- Source: https://github.com/trilwu/secskills
- Price: free and open source

## Summary
secskills is a Claude Code plugin with 94 hand-picked skills, indexed on Flowy in the Security category. Install it with the command on its page. It includes authoring-security-skills, verifying-skill-accuracy, analyzing-binaries. Its skills do not fire on their own yet. Request auto-invocation to have Flowy route them as you prompt. Free and open source.

## Install (Claude Code)
```
/plugin marketplace add trilwu/secskills
```

## Skills
- authoring-security-skills
- verifying-skill-accuracy
- analyzing-binaries
- analyzing-dotnet-assemblies
- analyzing-firmware-images
- analyzing-go-binaries
- analyzing-ios-binaries
- analyzing-macos-binaries
- analyzing-rust-binaries
- auditing-code-for-vulnerabilities
- auditing-mcp-servers
- auditing-php-applications
- auditing-supply-chain
- devirtualizing-vm-protected-code
- diffing-binary-patches
- hunting-web-backdoors
- maintaining-engagement-state
- mapping-attack-techniques
- orchestrating-vulnerability-research
- reporting-security-findings
- reversing-browser-extensions
- reversing-flutter-apps
- reversing-network-protocols
- reversing-obfuscated-javascript
- reversing-react-native-apps
- reversing-unity-il2cpp
- reversing-xamarin-maui
- reviewing-code-changes
- reviewing-cryptography
- securing-ai-systems
- unpacking-protected-binaries
- vetting-agent-extensions
- analyzing-disk-images
- analyzing-linux-persistence
- analyzing-malware
- analyzing-memory-images
- analyzing-network-traffic
- analyzing-phishing-emails
- analyzing-shellcode
- defending-kubernetes
- engineering-detections
- hardening-cloud-posture
- hunting-threats
- investigating-aws-incidents
- investigating-azure-incidents
- investigating-gcp-incidents
- investigating-m365-entra
- investigating-windows-endpoints
- managing-vulnerabilities
- producing-threat-intelligence
- responding-to-incidents
- triaging-security-alerts
- writing-sigma-rules
- writing-yara-rules
- abusing-adcs
- abusing-ci-cd-oidc
- attacking-active-directory
- attacking-bluetooth-nfc
- attacking-eks-gke-aks
- attacking-entra-id
- attacking-graphql
- attacking-grpc-protobuf
- attacking-hardware-interfaces
- attacking-jwt
- attacking-kerberos-delegation
- attacking-oauth-oidc
- attacking-saml
- attacking-serverless
- attacking-wireless-networks
- bypassing-mobile-pinning
- bypassing-root-jailbreak-detection
- cracking-passwords
- enumerating-network-services
- escalating-linux-privileges
- escalating-windows-privileges
- escaping-hardened-containers
- establishing-persistence
- exploiting-cloud-platforms
- exploiting-containers
- exploiting-deserialization
- exploiting-memory-corruption
- exploiting-ssrf
- exploiting-web3-smart-contracts
- exploiting-xxe
- performing-reconnaissance
- performing-social-engineering
- recognizing-deception
- testing-apis
- testing-ics-ot-protocols
- testing-mobile-applications
- testing-mobile-ipc
- testing-thick-clients
- testing-web-applications
- transferring-files

## FAQ

### What is secskills?
Security skills for Claude Code that encode the judgment professionals bring, not another wrapper around a scanner. Offense, defense, and the reverse-engineering and code-audit core both sides share. Every skill is fact-checked against primary sources.

### How do I install secskills?
Run these in Claude Code: /plugin marketplace add trilwu/secskills. Then prompt normally.

### Does secskills auto-invoke its skills?
Not yet. It is indexed on Flowy as a plain plugin. Request auto-invocation on its page and Flowy will route its skills for you as you prompt.

### Is secskills free?
Yes. Flowy is free and open source, with nothing gated. You can read every skill in full before you install.