implementing-conduit-security-for-ot-remote-access
Implements secure conduit architecture for OT remote access under the IEC 62443 zones-and-conduits model, deploying jump servers, MFA gateways, session…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-21 00:11
Security & auditing
7,279 results
implementing-nerc-cip-compliance-controls
Implements NERC CIP controls for Bulk Electric System (BES) cyber systems: asset categorization (CIP-002), electronic security perimeters (CIP-005), system…
implementing-purdue-model-network-segmentation
Implement network segmentation based on the Purdue Enterprise Reference Architecture (PERA) model, separating ICS networks into hierarchical security zones…
session-security-testing
Use this skill when you need evidence-bounded session-security-testing analysis and validation preparation; triggers include 会话安全测试 and…
cookie-privacy-scan
Audit a site's cookies and trackers — inventory every cookie, flag missing Secure/HttpOnly/SameSite, list third-party trackers, and detect tracking that fires…
secrets
Guide to secret management with 1Password Environments and service accounts. Securely retrieve, register, and verify API keys, credentials, tokens, environment variables, and GitHub Secrets.
timeline-forensics
Create comprehensive forensic timelines from multiple data sources. Use when reconstructing event sequences, correlating activities across sources,…
security-audit
Security auditing for Rust/WebAssembly applications. Identifies vulnerabilities, reviews unsafe code, validates input handling, and ensures secure…
ton-proof
Generate TonConnect TonProof signatures for third-party authentication. Use when the user wants to log in with a TON wallet, prove wallet ownership,…
cors-misconfiguration
CORS cross-origin misconfiguration detection and exploitation. Use when the target API returns an Access-Control-Allow-Origin response header, cross-origin access to sensitive data is needed, or the Origin header is found reflected back in the response. Can lead to theft of users' sensitive data
lfi-rfi-methodology
Local File Inclusion (LFI)/Remote File Inclusion (RFI)/Arbitrary File Read detection and exploitation. Use when the target has file inclusion parameters (page/file/include/lang), is a PHP application, and log files are writable. Includes file_exists() traps, PHP include() syntax error diagnosis, correct log poisoning payloads, pearcmd.php exploitation, PHP...
websocket-attack
WebSocket security testing. Use when the target uses the ws:// or wss:// protocol, there is a new WebSocket() call in the page JS, or a 101 Switching Protocols response is found. Covers WS hijacking (CSWSH), message injection, authentication bypass, information disclosure
solidity-security-best-practices
Smart contract security best practices for Solidity development. Use when writing, reviewing, or auditing Solidity code. Covers reentrancy prevention, access…
security-auth
Comprehensive security and authentication workflow that orchestrates security architecture, identity management, access control, and compliance implementation.…
gdpr-audit-prep
/cs:gdpr-audit-prep <scope> — GDPR audit 6-question Article-cited forcing interrogation. Use before annual internal GDPR review, post-breach internal audit,…
litestar-security
Build secure Litestar APIs using authentication middleware, built-in security backends, guards, endpoint inclusion and exclusion controls, JWT validation,…
installed-skill-auditor
Weekly audit of all installed third-party and community skills for malicious patterns, stale credentials, and drift from last-known-good state.
aws-security-audit
AWS security auditing — IAM users/roles/policies, CloudTrail API events, security posture analysis. Use when auditing IAM permissions, investigating security…
go-security
Go security patterns for web applications. Covers dependency auditing, secure coding practices, crypto, and OWASP for Go ecosystem. USE WHEN: user works with…
owasp-audit
Audit application source code against the OWASP Top 10 vulnerability categories. Use when the user mentions 'OWASP,' 'security audit,' 'code security review,'…
apk-teardown-research
Analyzes Android APKs through the Crawlora API — submit an APK or public URL, inspect static-analysis results, compare versions, build timelines, and compare…
git-expert
Git expert with deep knowledge of merge conflicts, branching strategies, repository recovery, performance optimization, and security patterns. Use PROACTIVELY…
aiprise-webhooks
Receive and verify AiPrise webhooks (callbacks). Use when setting up AiPrise identity/KYC/KYB callback handlers, debugging X-HMAC-SIGNATURE verification, or…
upollo-webhooks
Receive and verify Upollo webhooks. Use when setting up Upollo webhook handlers, debugging Upollo-Signature verification (HMAC-SHA512), or reacting to…