Danielle Morrill's setup for giving Claude Code agents real credentials: 1Password as the source, a read-only service account per Mac, and the macOS keychain as the cache.

Google's open-source toolkit of agent skills that find, reproduce and patch security vulnerabilities in a codebase, from threat model to verified fix and report.

Cloudflare's open-source skill that turns a coding agent into a security auditor: 6 phases, independent verification, and machine-readable findings.