Use this skill to audit backend authorization, IDOR, ownership checks, and tenant isolation. Do not use it for smart contracts or legal contract review.
EnglishUse this skill to audit CI/CD workflows, dependencies, build scripts, releases, artifacts, and package publishing. Do not use it for runtime application authz review.
EnglishUse this skill only when the user explicitly selects security finding IDs to fix. Do not use it to fix all findings or perform broad refactors.
EnglishUse this skill to convert a security incident or public vulnerability pattern into reusable audit prompts, checklists, tests, and AGENTS.md rules. Do not use it to generate exploit instructions.
EnglishUse this skill to audit LLM agents, tool calling, MCP integrations, prompt injection, data exfiltration, and tool permissions. Do not use it for ordinary backend authz unless agent/tooling is involved.
EnglishUse this skill to review a PR or diff for security regressions. Do not use it for full-repository audits or legal contract review.
EnglishUse this skill to audit RAG and AI application security, including retrieval boundaries, prompt injection, citations, memory, and data exposure. Do not use it as a scanner or exploit runner.
EnglishUse this skill to audit secrets, PII, logs, traces, metrics, debug endpoints, and error responses. Do not use it for general performance review.
EnglishUse this skill to audit Solidity, Vyper, EVM, DeFi, oracle, accounting, reentrancy, and upgradeability risks. Do not use it for legal contract review.
EnglishUse this skill to audit terminal, PTY, shell session, container exec, and WebSocket terminal backends. Do not use it for unrelated frontend UI review.
English
AGENT SKILLS ATLASIncludes Backend Authz Audit, CI CD Supply Chain Audit, Fix Selected Security Findings, and other workflows.
Claude Code
Codex
Cursor
GitHub Copilot
Gemini CLISupported by the Atlas install prompt. Skill-specific requirements vary.
Pack stats
What’s included
Backend Authz Audit
Use this skill to audit backend authorization, IDOR, ownership checks, and tenant isolation. Do not use it for smart contracts or legal contract review.
CI CD Supply Chain Audit
Use this skill to audit CI/CD workflows, dependencies, build scripts, releases, artifacts, and package publishing. Do not use it for runtime application authz review.
Fix Selected Security Findings
Use this skill only when the user explicitly selects security finding IDs to fix. Do not use it to fix all findings or perform broad refactors.
Incident to Prompt
Use this skill to convert a security incident or public vulnerability pattern into reusable audit prompts, checklists, tests, and AGENTS.md rules. Do not use it to generate exploit instructions.
LLM Agent Tooling Audit
Use this skill to audit LLM agents, tool calling, MCP integrations, prompt injection, data exfiltration, and tool permissions. Do not use it for ordinary backend authz unless agent/tooling is involved.
PR Security Review
Use this skill to review a PR or diff for security regressions. Do not use it for full-repository audits or legal contract review.
RAG AI App Security Audit
Use this skill to audit RAG and AI application security, including retrieval boundaries, prompt injection, citations, memory, and data exposure. Do not use it as a scanner or exploit runner.
Secrets Logging Privacy Audit
Use this skill to audit secrets, PII, logs, traces, metrics, debug endpoints, and error responses. Do not use it for general performance review.
Smart Contract Audit
Use this skill to audit Solidity, Vyper, EVM, DeFi, oracle, accounting, reentrancy, and upgradeability risks. Do not use it for legal contract review.
Terminal Pty Audit
Use this skill to audit terminal, PTY, shell session, container exec, and WebSocket terminal backends. Do not use it for unrelated frontend UI review.
Quick start
- Choose your skills. Select individual skills above, or choose the entire pack.
- Copy the install prompt. Use Copy install prompt above the list.
- Send it to your agent. Paste into your coding agent’s chat. Your agent reviews the source and guides the setup.
Try it with your agent
After installation, start with a request like:
Use the Backend Authz Audit skill to help with my task.
Ask me for the context you need before getting started.Requirements & license
- A coding agent that can access your project files and install skills.
- Your agent checks each skill’s instructions, dependencies, and permissions during setup.
- Reported license for the skills shown: MIT. The author’s terms apply.