reverse-engineering
Safely analyze, disassemble, decompile, or debug unknown binaries, executables, DLLs, malware, firmware, and packed or obfuscated code. Use for reverse…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-20 00:13
Security & auditing
7,242 results
ark-vulnerability-fixer
CVE research and security patch workflow for Ark. Provides CVE API integration, mitigation strategies, and security-focused PR templates. Works with research,…
pangea
Pangea integration. Manage data, records, and automate workflows. Use when the user wants to interact with Pangea data.
dep-lib-review
Periodic dependency review for Node.js/pnpm projects — outdated package triage, security audit, update batching strategy (patch/minor/major), validation…
skill-auditor
Audit a skill directory for security risks and provide an install verdict. Use when reviewing third-party skills before installation. Don't use for application…
hunting-for-dcom-lateral-movement
Hunt for DCOM-based lateral movement (MITRE ATT&CK T1021.003) by detecting abuse of MMC20.Application, ShellBrowserWindow, and ShellWindows COM objects via…
performing-bluetooth-security-assessment
Assess Bluetooth Low Energy (BLE) device security using Python's bleak asyncio library to discover nearby devices, enumerate GATT services and characteristics,…
age-verification-methods
Evaluates and implements age estimation and verification technologies for online services. Covers facial age estimation, digital ID verification,…
audit-evidence-collect
Guides privacy audit evidence collection processes including evidence planning, sampling strategies, documentation standards, chain of custody, interview…
workflow-security-audit
Comprehensive security assessment and remediation. Use for security reviews, compliance checks, vulnerability assessments.
gravit-designer-security-analysis
Analyze and understand software licensing mechanisms, ethical distribution, and security implications of design tool modifications
mobile-security-coder
Expert in secure mobile coding practices specializing in input validation, WebView security, and mobile-specific security patterns. Use PROACTIVELY for mobile…
mcp-sentinel
Security monitoring agent for Claude Skills and MCP servers. Real-time protection layer (PreToolUse hook, zero LLM cost by default): hard-blocks…
penetration-testing
Comprehensive penetration testing workflow using Kali Linux tools via MCP. Guides agents through reconnaissance, vulnerability assessment, exploitation,…
analyzing-shellcode
Analyze raw shellcode and position-independent code — extracting the bytes, guessing architecture, disassembling at the right base, decoding self-decoder…
attacking-oauth-oidc
Attack OAuth 2.0 and OpenID Connect flows — enumerate endpoints from the OIDC discovery document, break redirect_uri validation with path traversal,…
hunting-threats
Run hypothesis-driven threat hunts across endpoint, network, cloud, and identity telemetry using stack counting, outlier analysis, and ATT&CK-based hypotheses,…
orchestrating-vulnerability-research
Run a sustained, multi-agent vulnerability-discovery campaign against a target — split its attack surface into slices, hunt each slice with a builder agent,…
producing-threat-intelligence
Produce cyber threat intelligence by pivoting on indicators to find related infrastructure, tracking actors and campaigns, enriching and contextualizing IOCs,…
responding-to-incidents
Run digital forensics and incident response — triage, evidence acquisition with chain of custody, host and cloud artifact analysis, timeline reconstruction,…
defender-tvm
Guidance for Microsoft Defender Threat Intelligence (Defender TI) and Microsoft Defender Vulnerability Management (MDVM) — the threat-and-vulnerability layer…
entra-workload-identity
Guidance for Microsoft Entra workload identities — managed identities, service principals, and workload identity federation. Covers system-assigned vs…
gcp-exploit
GCP cloud environment attack methodology. Use when the target uses Google Cloud Platform and GCP Service Account/Metadata/Storage Bucket is discovered. Covers Metadata service exploitation, Service Account key theft, IAM privilege escalation, GKE escape, Storage Bucket…
githacker-git-leak
Use GitHacker to exploit the .git directory disclosure vulnerability and recover the target source code. GitHacker is a multithreaded .git disclosure exploitation tool that, compared with git-dumper/GitHack, can recover more complete content—including stash, all branches, tags, and reflog. Even if the target has directory listing disabled (403), it can still recover branches and tags through brute-force enumeration. When the target…