secrets-management
Implement secure secrets management for CI/CD pipelines using Vault, AWS Secrets Manager, or native platform solutions. Use when handling sensitive…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-20 00:13
Security & auditing
7,244 results
mishandling-exceptional-conditions
Detect, analyze, and remediate OWASP A10:2025 — Mishandling of Exceptional Conditions in Python web applications (FastAPI and Flask). Use this skill whenever…
security-misconfiguration
Detect, audit, and remediate Security Misconfiguration vulnerabilities (OWASP A02:2025) in Python web applications — especially FastAPI and Flask. Use this…
ssl-and-security-hardener
Use when planning SSL/TLS, HTTPS redirects, HSTS, security headers, CSP, cookie flags, backups, monitoring, and basic launch hardening. Dry-run first; do not…
web-security-architect
Senior defensive web security architecture for creating, editing, auditing, hardening, and monitoring websites, web apps, APIs, SaaS products, ecommerce,…
breach
Designing red team attack scenarios, threat models, MITRE ATT&CK/OWASP application, Purple Team exercises, and AI/LLM red teaming. Use when adversarial…
procurement-security-review
Design and audit enterprise procurement security review readiness, vendor risk questionnaires, security evidence packets, DPAs, subprocessors, insurance,…
trust-center-readiness-review
Design and audit public trust centers, security pages, privacy/compliance portals, subprocessors, uptime/status links, data protection summaries, policy…
analyzing-go-binaries
Reverse engineer Go binaries by recovering function names and types from pclntab and moduledata using GoReSym, redress, and IDA/Ghidra Go plugins, and by…
analyzing-rust-binaries
Reverse engineer Rust binaries — demangling legacy and v0 symbol schemes, recognizing monomorphized generics, Result and Option control flow, trait object…
twingate-architect
Use when the user asks how Twingate works, wants to design or evaluate a Twingate deployment, needs to understand components (Controller, Client, Connector,…
vgv-static-security
Best practices for Flutter mobile app security. Covers static security concerns — not pen-testing or runtime analysis.
copilot-for-m365-readiness
Guidance for safely deploying Microsoft 365 Copilot — end-to-end readiness covering oversharing remediation, SharePoint Advanced Management (SAM) restricted…
defender-for-iot
Guidance for Microsoft Defender for IoT — agentless OT/ICS network detection and response for industrial environments, plus enterprise IoT (EIoT) protection…
purview-records-management
Guidance for Microsoft Purview Records Management — declaring, managing, and disposing records across SharePoint, OneDrive, Exchange, and Teams. Covers…
decompiler
Decompile a function to C-like pseudocode for human-readable analysis. Use to understand function logic, review control flow, or prepare for code pattern…
variant-analysis
Find similar vulnerabilities and bugs across codebases using pattern-based analysis. Use when hunting bug variants, building CodeQL/Semgrep queries, analyzing…
aliyun-pentesting
Alibaba Cloud penetration testing methodology. Use when the target uses Alibaba Cloud services, oss-*.aliyuncs.com assets are discovered, an Alibaba Cloud AccessKey (starting with LTAI) is obtained, 100.100.100.200 metadata is accessible inside an ECS instance, or a security assessment of Alibaba Cloud RAM/ECS/OSS/RDS/ACK/FC and other services is required. Covers RAM…
aws-iam-privesc
AWS IAM privilege escalation specialized methodology. Use when AWS credentials have been obtained and privileges need to be escalated, when the current IAM user/role is found to have limited permissions and lateral or vertical privilege escalation is needed, or when IAM Policy needs to be analyzed to find privilege escalation paths. Covers privilege escalation techniques for 46 AWS services, including PassRole abuse, AssumeRole chained privilege escalation, Lambda/EC2/ECS…
aws-pentesting
Overall methodology for penetration testing AWS cloud environments. When the target uses AWS cloud services, AWS-related assets are discovered (S3 Bucket/EC2 instance/Lambda function/CloudFront distribution), AWS credentials are obtained (AK/SK/Session Token/IAM Role), or AWS needs to be...
dalfox-xss
Use DalFox for XSS vulnerability scanning. Use when you need to detect reflected/stored/DOM XSS, analyze parameter injection points, or bypass WAF. DalFox supports automatic parameter analysis, DOM mining, Blind XSS callbacks, WAF bypass, and automatic PoC generation. This skill should be used in any scenario involving XSS vulnerability detection, parameter testing, or WAF bypass.
database-lateral-pivot
Database lateral movement and cross-database attacks. Use when a database permission (PostgreSQL/MySQL/MSSQL) has been obtained and lateral movement to other databases or intranet services is needed. Covers PostgreSQL dblink cross-database connections, MSSQL Linked Server lateral movement, MySQL…
fingerprintx-probe
Use fingerprintx for application-layer service fingerprinting. Use when there is a need to identify the specific services and protocols running on open ports. fingerprintx supports identification of 51 protocols (SSH/RDP/MySQL/Redis/HTTP/SMB/FTP, etc.), and its JSON output includes service metadata. This skill should be used in any scenario involving service identification, protocol probing, or port fingerprinting.
hydra-brute
Use Hydra for online password brute force. Use when password brute forcing, password spraying, or credential stuffing is needed against services such as SSH/FTP/HTTP/SMB/RDP/MySQL/MSSQL. Hydra is the most classic online brute-force tool, supporting 50+ protocols. This skill should be used in any scenario involving online password brute forcing, login cracking, or protocol brute-force testing