hunt-metrics-exposure
Hunt public /metrics, /health, and actuator endpoints leaking AI usage, DB pools, and operational intelligence.
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-21 00:11
Security & auditing
7,269 results
hunt-misc
Hunting skill for misc vulnerabilities. Built from 225 public bug bounty reports. Use when hunting misc on any target.
iot-camera-recon
Attack cameras via RTSP, ONVIF, Axis config when 554 open.
jwt-attack
Decode, forge, brute JWTs when Bearer auth header is seen.
llm-prompt-injection
Use when testing an authorized LLM application for prompt injection, system-prompt exposure, unsafe tool use, or RAG data-boundary failures.
okta-attack
Okta-as-IdP red-team attack chain — tenant discovery, user enumeration (multiple vectors), authentication flow analysis (factors enumeration, push-notification…
port-mass-scan
Port scan /8-/24 with Masscan+RustScan and nmap banners.
security-arsenal
Security payloads, bypass tables, wordlists, gf pattern names, always-rejected bug list, and conditionally-valid-with-chain table. Use when you need specific…
unauth-api-flow-hijack
Exploit unauthenticated multi-step API flows without credentials.
docker-pentesting
Docker security testing and container penetration methodology. Use when you need to assess Docker containers, Docker Daemon, Docker Registry, image layers, build artifacts, or container escape risks. Covers container environment identification, privileged container escape, docker.sock/Remote API exploitation, procfs/cgroup/capabilities…
phase-7-seo-security
Enhance SEO (meta tags, semantic HTML) and security (vulnerability checks, hardening). Triggers: SEO, security, meta tags, vulnerability, search optimization, security.
secret-management
Manage secrets correctly in this environment: use the machine-local canonical secret store, generate repo-local `.env`, machine-local `~/.secrets`, and native…
show-password-setup
Retired AIPodcasting show-password workflow. Human access is now one whole-app Cloudflare Access exact-email allowlist; do not provision or rotate application…
container-grype
Container vulnerability scanning and dependency risk assessment using Grype with CVSS severity ratings, EPSS exploit probability, and CISA KEV indicators. Use…
iac-checkov
Infrastructure as Code (IaC) security scanning using Checkov with 750+ built-in policies for Terraform, CloudFormation, Kubernetes, Dockerfile, and ARM…
ir-velociraptor
Endpoint visibility, digital forensics, and incident response using Velociraptor Query Language (VQL) for evidence collection and threat hunting at scale. Use…
reviewdog
Automated code review and security linting integration for CI/CD pipelines using reviewdog. Aggregates findings from multiple security and quality tools (SAST,…
sbom-syft
Software Bill of Materials (SBOM) generation using Syft for container images, filesystems, and archives. Detects packages across 28+ ecosystems with…
port-scanner
Scan network ports to check availability and detect running services.
alibabacloud-sas-malware-detection
Alibaba Cloud Security Center (SAS) malicious file detection skill. Use when the user asks to check whether a file is malicious, scan a file for…
red-teaming
Apply red teaming whenever the user wants to stress-test a system, plan, architecture, security model, or decision against adversarial conditions — or when…
aspnet-identity
ASP.NET Core Identity for authentication, roles, claims, and external providers. Covers Identity setup, customization, and token-based auth. USE WHEN: user…
secure-mobile-dev-guide
Provide secure mobile development guidance based on the NowSecure Secure Mobile Development guide, MASVS, and MASTG. Use when developers ask how to implement a…
nvm-mirror-and-auth
Configure Node.js binary mirrors and authentication headers for restricted or 10、Company Manger network environments.