AI Blocks · All skills by job · Minds · Mini tools · How it works · From a source · Apps

Keep your code secure

83 free AI skills and workflows for this job.

Advisory exposure checker: Name a breach or package advisory. Get a read-only check of your machine and projects, saved as a report.
AI agent attack tester: Give it your AI agent. Get a safe, authorized test plan and a report of where it can be tricked.
AI app injection defender: Point it at your AI app. Get the weak spots found and layered defences added against hijacked instructions.
AI management audit planner: Describe how you run AI. Get gaps against ISO 42001 and a plan to close them.
AI spend limit checker: Point it at code that calls paid AI services. Get spending caps and loop limits added before a surprise bill.
AI system attack tester: Point it at an AI app. Get prompt injection, jailbreak and tool abuse risks found, ranked and mapped to known attacks.
AI workflow security checker: Point it at a repo. Get a report on where outside text could reach an AI agent in your GitHub workflows.
API rate limit adder: Point it at your API. Get rate limiting added with Upstash, using the right window type for each route.
API security checker: Point it at your API routes. Get a check of sign-in, access rules and input, with fixes for each gap.
AWS access policy reviewer: Give it your IAM policies. Get risky permissions found and tighter versions that grant only what is needed.
AWS security checker: Point it at your AWS account. Get a ranked list of security gaps with fixes.
Cloud misconfiguration finder: Point it at your cloud setup files. Get open buckets, loose access rules and gaps ranked with fixes.
Code and documentation consistency review: Share code and documentation. Find behavior that contradicts your stated rules, with recommended fixes.
Code change security review: Paste a code change. Get the security risks in only what changed, ranked, with the line and a fix.
Code deep reader: Point it at code you need to understand. Get a line-by-line map of how it works before you hunt bugs.
Code ownership analyst: Point it at a git repo. Get who owns the sensitive code and where one person is the only owner.
Code scan rule writer: Describe a bug pattern. Get a tested Semgrep rule that finds it across your code.
Code security reviewer: Point it at your Python, JavaScript, TypeScript or Go code. Get a ranked list of security gaps, each with a fix.
Code security scanner: Point it at your source code. Get security flaws found with static tools and rules you can add to CI.
Code vulnerability auditor: Point it at code you own. Get proven, exploitable bugs with steps to reproduce and fixes.
CodeQL scan setup helper: Share your repo and languages. Get CodeQL scanning set up in Actions or the command line.
Compliance readiness checklist builder: Name the framework, such as SOC 2 or GDPR. Get an evidence checklist with gaps ranked by priority.
Connected product security checker: Describe your product with software. Get its EU risk class, security duties, parts list needs and reporting steps.
Cybersecurity profile builder: Describe your security today and your goals. Get a NIST CSF profile, gaps and a step by step plan.
Dependency risk auditor: Point it at your project. Get risky packages, licence clashes and a safe order to upgrade.
Dependency risk scanner: Point it at your project. Get known weak spots in packages found, plus a parts list and license check.
Django access control auditor: Point it at a Django project. Get a review of who can see or change what, with fixes for each gap.
EU AI Act readiness checker: Describe your AI systems. Get a first read of your risk level, duties and gaps under the EU AI Act.
EU AI Act risk classifier: Describe your AI system. Get its risk tier under the EU AI Act and the duties that follow.
Exposed secrets finder: Give it a site you own. Get a report of keys and private files visitors can read, with fixes.
Federal security controls planner: Describe your system. Get the right control baseline, tailoring choices and draft control write-ups.
Fix API security gaps with tests and a pull request: Give it your API code. Get gaps fixed, tests for each fix and a reviewed pull request.
Fraud review queue builder: Get orders listed by fraud risk level with the warning signs, as a queue for manual review.
GDPR audit prep coach: Name your scope. Answer six article-based questions and get gaps to fix before a review or regulator visit.
GDPR privacy checker: Point it at your code and data use. Get privacy risks, an impact assessment and a tracker for data requests.
GitHub Actions attack finder: Point it at your workflows. Get only the holes an outsider could use, each with the exact attack.
GitHub Actions permission reviewer: Share your build workflows. Get risky permissions, unsafe inputs and dependency trust problems with fixes.
GitHub secret protection setter: Share your repo setup. Get secret scanning and push protection configured, with an alert response plan.
Harden an AI app against hijacked prompts and runaway bills: Give it your AI app. Get layered defences, tests, spending caps and a fresh attack test.
Insecure code catcher: Turn it on. Get a warning when your AI writes risky code, like injection, XSS or unsafe commands.
ISO 27001 audit planner: Describe your security setup. Get an audit plan, control checks and a list of findings to fix.
ISO 27001 audit prep coach: Name your scope. Answer six questions and get gaps to fix before an internal or outside ISO 27001 audit.
Live app readiness review: Share a deployed app's code. Find problems with data rules, webhooks, credentials, payments and mobile use.
Live app security tester: Give it a running web app or API you own. Get weaknesses found by safe probing.
Login and access builder: Describe your app's users. Get a login and permissions plan, or a review of the one you have.
Marketplace access auditor: Point it at a marketplace app's code. Get a report of who can see or change what.
MATLAB secret keeper: Give it code with passwords or API keys. Get them moved into the MATLAB Vault, not left in the file.
MCP attack defence reviewer: Point it at an MCP server. Get a ranked list of attack risks, each with a fix.
MCP config version checker: Give it your MCP config files. Get a list of server packages that can change under you, before you approve them.
MCP server hardener: Point it at an MCP server you run. Get a checklist of fixes for transport, auth, access and logging.
Microsoft threat model file builder: Describe your system and data paths. Get a threat model file for Microsoft's modeling tool.
Open-source license checker: Give it your project dependencies. Get license clashes, duties and risks flagged.
Privacy engineering practice reviewer: Share the way your app handles personal data. Get engineering gaps and changes to support privacy requirements.
Privacy-first app designer: Describe the data your app collects. Get privacy controls designed in: less data kept, clear consent, safe storage.
Prompt injection defender: Describe your AI app. Get a threat map and fixes against hidden instructions in text it reads.
Quarterly compliance readiness review: Name your framework each quarter. Get gaps found, last quarter's fixes checked and what to close first.
Review an agent before launch: Share your agent code and design. Get risks in tool access, plugin trust and behavior ranked before launch.
Risky design reviewer: Give it an API or config design. Get the easy-to-misuse parts that lead to security mistakes.
Safe secrets manager: Get API keys and env variables checked and loaded without ever showing the values in logs or chat.
Secrets setup helper: Name your pipeline and secret store. Get a safe plan for storing, reading and rotating secrets.
Secure development checker: Give it your project. Get a scan for code flaws, weak packages and exposed secrets, with fixes ranked.
Security audit evidence reviewer: Share a security audit. Get claims without proof, missing facts and failed checks called out.
Security incident triager: Give it a security alert. Get severity, who to tell, what to preserve and the next steps.
Security posture auditor: Describe your system. Get a scoped review of code, servers, sign-in and daily operations.
Security safeguards planner: Describe your setup and size. Get which CIS safeguards you need first, your gaps and a fix order.
Security-focused change reviewer: Give it a pull request or commit. Get a security review of only what changed, with risks ranked.
Sensitive data exposure mapper: Share your system design or code. Get sensitive data paths, likely exposure and fixes ranked by impact.
Serial returner spotter: Get customers with unusual return habits listed for you to review. It never blocks anyone on its own.
Skill safety auditor: Give it a skill before you install it. Get risky code and hidden commands flagged.
Skill safety reviewer: Point it at a skill, MCP server or add-on. Get a read-only safety review before you install it.
SOC 2 readiness checker: Name your scope. Answer six questions and get gaps to fix before the SOC 2 Type II watch period.
SOC 2 readiness planner: Describe your systems. Get your controls mapped, gaps found and the evidence an auditor will ask for.
Staff access reviewer: Get staff accounts with old logins, inactive status or too much access, so your store stays safe.
STRIDE system threat analyst: Share your system or change. Get threats, trust boundaries and safeguards, with a record of new risks.
Threat list maker: Paste how your app or service works. Get the likeliest attacks ranked, each with one way to reduce the risk.
Threat model writer: Point it at your code. Get a short threat model of what attackers could reach, how, and how to stop them.
Threat modeler: Describe your system. Get threats found with STRIDE, rated by risk, each with a way to reduce it.
Timing leak checker: Point it at crypto code. Get a list of spots where run time could leak secret keys, with fixes.
UK Cyber Essentials checker: Describe your devices and cloud services. Get gaps against Cyber Essentials and what to fix before you apply.
Untrusted input checker: Point it at code. Get every place outside data enters found and checked before it reaches your logic.
Verify an MCP server release: Share your MCP server and settings. Get code risks, access risks and a real protocol test report.
Vulnerability scan planner: Point it at your own app. Get a check for common web flaws and a ranked list of fixes.
Website security baseline checker: Point it at your site. Get a checklist covering HTTPS, security headers, secrets and content policy, with fixes ranked.