SuperAPI AI DirectoryFind an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-20 00:13
7,242 results
Metasploit Framework invocation methodology (one-liner + interactive). When you need to exploit operating system-level vulnerabilities (such as EternalBlue/MS17-010), database remote vulnerabilities (such as PostgreSQL/MySQL RCE), network service vulnerabilities (SMB/RDP/FTP), need to generate a payload, start a reverse shell…
AI/LLM indirect prompt injection attacks. Use when the target AI system processes external data sources (web pages, documents, emails, databases, API returns). Covers indirect injection, toolchain hijacking, RAG poisoning, data exfiltration, and other techniques. OWASP LLM Top 10 #1 vulnerability category
AI/LLM system prompt leakage techniques. Use when the target is an LLM-based application and you want to obtain its system prompt, configuration information, tool list, and knowledge base contents. The critical first step for AI Bug Bounty, red team assessments, and competitive analysis
Implementation of sandbox evasion and anti-analysis techniques. Use when malicious payloads need to bypass automated sandbox analysis (AnyRun/Cuckoo/CAPE/Joe/Windows Defender Sandbox). Covers implementation methods for mainstream evasion techniques such as environment detection, timing deception, user interaction detection, and virtualization detection.
Guides the agent to apply defensive programming practices — validating inputs, handling failures safely, and preventing common vulnerability classes in every…
Authentication patterns: session vs JWT vs OAuth comparison, provider selection (NextAuth, Clerk, Supabase Auth), security checklist, and common mistakes. Use…
This skill should be used when the user asks to "automate SQL injection testing," "enumerate database structure," "extract database credentials using sqlmap,"…
Security test: DAST OWASP ZAP/Nuclei, SAST Semgrep/Bandit, Snyk/Trivy, detect-secrets/TruffleHog
GitHub Actions workflow review, scaffolding, and security hardening. Use when user says 'review my workflow', 'check my actions', 'scaffold a workflow', 'is my…
Use when reviewing permission prompt frequency, optimizing the allow-list, or resetting the audit log. Triggers on "audit permissions", "permission report",…
Track IP portfolios — registrations, renewals, maintenance fees, and trademark use declarations. Use to check upcoming renewals, add or update assets, record maintenance fee payments, or audit the register for gaps, lapses, and commercial use issues.
Android crypto audit: AndroidKeyStore key system analysis (alias/algorithm/purpose/hardware backing), Cipher/KeyInfo auditing, crypto call-site hooking (Frida intercepts key aliases and purposes).…
Firmware emulation: QEMU user-mode/full-system. Trigger words: emulation, QEMU, firmadyne, run firmware
Hardware interfaces: JTAG/UART/flash readout. Trigger words: JTAG, UART, serial port, flash chip, hardware extraction, logic analyzer
Virtualization reverse engineering: VT-x/SVM, hypervisor detection, VMCS/EPT analysis, and the partitioning and vdev semantics of Xen / QNX Hypervisor / Jailhouse / ACRN / Bao / Hyper-V·VMBus / XtratuM / LynxSecure / Quest-V.…
Ransomware analysis: encryption identification, ransom notes, decryption and recovery approaches. Trigger words: ransomware, ransom, encrypted files, ransom note, decryption recovery
Use when verifying or configuring HTTP security headers (CSP, HSTS, CORS, X-Frame-Options) for a web application (Next.js, Laravel, Express, Django).
After pushing a PR and requesting re-review, keep following up on the review bot and CI; if the same subsystem still has issues requiring fixes for three consecutive rounds, first conduct a direction audit, and consult the user if there is disagreement on direction.
Security guidance and vulnerability review for codebases, APIs, services, CLI tools, libraries, and daemons. Use for security questions, focused reviews,…
(forwward) Implements authentication, authorization, encryption, HIPAA compliance, SOC 2 controls, and security hardening with defense-in-depth defaults.…
Perform a meticulous deep code audit covering Security, Logic, Completeness, and Quality. Includes vibe-coding-specific guardrails for supply chain attacks,…
Validate https certificate checker operations. Auto-activating skill for Security Fundamentals. Triggers on: https certificate checker, https certificate…
Generate security policy generator operations. Auto-activating skill for Security Advanced. Triggers on: security policy generator, security policy…
Validate soc2 compliance checker operations. Auto-activating skill for Security Advanced. Triggers on: soc2 compliance checker, soc2 compliance checker Part of…