reversing-xamarin-maui
Reverse engineer Xamarin and .NET MAUI mobile apps by extracting assemblies.blob and XALZ-compressed DLLs with pyxamstore, then decompiling with dnSpy or…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-20 00:13
Security & auditing
7,250 results
testing-mobile-ipc
Test mobile inter-process communication and deep link attack surface — exported Android activities, services, receivers and content providers, intent…
skill-safety-verifier
Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope,…
sharp-edges
Identify error-prone APIs, dangerous configuration, and footgun designs that enable security mistakes. Use for API ergonomics, misuse resistance, secure…
dnsx-resolve
Use dnsx for batch DNS record queries and resolution. Use when you need batch DNS resolution, to verify subdomain liveness, query A/AAAA/CNAME/NS/MX/TXT records, or wildcard filtering. dnsx is a high-speed DNS toolkit from ProjectDiscovery, supporting multiple record type queries and automatic wildcard filtering. Anything involving DNS…
ksubdomain-brute
Use ksubdomain for stateless subdomain brute-forcing. Use when extremely high-speed subdomain brute-forcing and validation are needed. ksubdomain directly operates the network card's raw sockets to send packets, is 10 times faster than dnsx, and supports both validation and enumeration modes. Requires root privileges. This skill should be used in any scenario involving high-speed subdomain brute-forcing or large-scale subdomain validation.
nerva-scan
Use nerva for high-performance service fingerprinting. Use when specific services on open ports need to be identified. nerva supports 120+ protocols (databases, remote access, message queues, industrial control, Web, etc.) and is an upgraded version of fingerprintx. This skill should be used in any scenario involving service identification, protocol probing, or port fingerprinting
tlsx-probe
Use tlsx for TLS certificate and configuration analysis. Use when you need to extract SSL/TLS certificate information (SAN/CN), detect TLS versions, cipher suites, JARM/JA3 fingerprints, and certificate misconfigurations. tlsx is a TLS probing tool produced by ProjectDiscovery. Any involving SSL/TLS analysis, certificate information collection, JARM...
django-security
Django security best practices, covering authentication, authorization, CSRF protection, SQL injection prevention, XSS prevention, and secure deployment configuration.
security-scan
Use AgentShield to scan your Claude Code configuration (the .claude/ directory) for security vulnerabilities, misconfigurations, and injection risks. Checks include CLAUDE.md, settings.json, MCP servers, hooks (Hooks), and agent (Agent) definitions.
sca-trivy
Software Composition Analysis (SCA) and container vulnerability scanning using Aqua Trivy for identifying CVE vulnerabilities in dependencies, container…
apify-osint-threat-intel
Use this skill when the user asks to "find CVEs for", "check if my domain is breached", "threat intel on", "OSINT on", "security news about", "attack surface…
ghidra-rpc
Reverse engineering assistant powered by Ghidra. Use for binary analysis, decompilation, vulnerability research, auditing compiled code, renaming symbols,…
custom-builtin-functions
Create a custom builtin function to be used in the Rego policy engine
security-best-practices
Perform language and framework specific security best-practice reviews and suggest improvements. Trigger when the user requests: security review, security…
spring-security
Spring Security JWT authentication for Spring Boot 3. Covers SecurityFilterChain, JWT filter, authentication, authorization, CORS, rate limiting, and security…
security-review
Comprehensive security code review workflow for a target repository, producing a markdown report with findings and recommendations.
entity-compliance
Entity compliance tracker — initialize, report upcoming deadlines, update status, run a health audit, export to CSV. Maintains compliance-tracker.yaml built from an entity list, computes filing deadlines by entity and place of registration, and presents to-dos due within the next 30/60/90 days. When the user says "entity compliance"…
flux-operator-cli
Builds Flux manifests locally, diffs YAML files, patches FluxInstance upgrades, creates authentication secrets, traces GitOps delivery pipelines, and…
better-auth
Build, review, debug, configure, migrate, teach, or plan Better Auth TypeScript auth with current docs and official ecosystem packages. Use for better-auth…
electric-postgres-security
Pre-deploy security checklist for Postgres with Electric. Checks REPLICATION role, SELECT grants, CREATE on database, table ownership, REPLICA IDENTITY FULL on…
explain-changes
Explain recent changes and provide a structured summary with security checks
threat-model-generation
Generate a STRIDE-based security threat model for a repository. Use when setting up security monitoring, after architecture changes, or for security audits.
information-security-strategy
Organization-wide information security strategy aligned with business objectives and ISMS framework