SuperAPI AI DirectoryFind an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-22 00:14
7,284 results
Middleware exploitation methodology. Use when Web middleware such as Tomcat/WebLogic/JBoss/WildFly/IIS/Nginx/Apache is discovered. Covers admin console weak passwords, deploying WAR/JSP webshells, parsing vulnerabilities, misconfiguration exploitation, AJP protocol exploitation. This skill should be used in any scenario involving middleware, application servers, or parsing vulnerabilities
Use when auditing an authorized website, SaaS, API, AI app, local code path, GitHub repo, staging URL, or owned runtime for security risks, vulnerability…
This skill should be used when the user asks to "test JWT security", "hack JWT tokens", "bypass JWT authentication", "crack JWT secrets", or "exploit JWT…
Security patterns and OWASP guidelines. Triggers on: security review, OWASP, XSS, SQL injection, CSRF, authentication, authorization, secrets management, input…
Setup and manage Supabase authentication including project connection, tokens, login methods, and user management. Use when configuring Supabase access,…
Android security patterns for secure storage, network security, input validation, and authentication.
Query the protection coverage of four Alibaba Cloud security products (Cloud Security Center / WAF / Cloud Firewall / RASP) for a specified vulnerability. Enter a CVE ID or AVD ID to return whether each product already covers it. When a customer or pre-sales SA asks "Can our products defend against CVE-XXXX?", "Does WAF cover this vulnerability?", "Is the newly disclosed XX vulnerability covered?", "High-risk vulnerability YY…
The risk review assistant is suitable for operations, marketing, healthcare, and education and training when users raise questions such as "what risks are here," need to quickly break down goals, determine priorities, and form executable results, and helps generate summaries, diagnostic conclusions, action recommendations, and reusable deliverables based on input materials.
Use when reviewing pending changes, branch diffs, or new features for concrete security risks, injection, auth, permissions, or attack paths.
Spring Session for distributed session management with Redis, JDBC, or Hazelcast. Covers session configuration, security integration, and session events. USE…
Conducts comprehensive security code reviews including vulnerability detection (OWASP Top 10, CWE), authentication/authorization flaws, injection attacks,…
Comprehensive security auditing workflow covering web application testing, API security, penetration testing, vulnerability scanning, and security hardening.
Ultimate Offensive Security Master Skill.
Review mode for code review, security audit, and best practices check. Use when user asks for code review or quality assessment. Evaluates code quality,…
Use when the user wants to scrape any URL or web page as Markdown/text through the local Frevana Chrome Extension-backed browser tool, including authenticated…
Use this skill for security reviews, threat modeling, compliance work, or incident response. Activates on mentions of security audit, vulnerability, OWASP,…
Troubleshoot common Clerk errors and issues. Use when encountering authentication errors, SDK issues, or configuration problems with Clerk. Trigger with…
Manage incident response for Clerk authentication issues. Use when handling auth outages, security incidents, or production authentication problems. Trigger…
Avoid common Cursor IDE pitfalls: AI feature mistakes, security gotchas, configuration errors, and team workflow issues. Triggers on "cursor pitfalls", "cursor…
Handle document data, signatures, and PII in Documenso integrations. Use when managing document lifecycle, handling signed PDFs, or implementing data retention…
Implement enterprise RBAC for Evernote integrations. Use when building multi-tenant systems, implementing role-based access, or handling business…
Contain Exa credential, data, cost, capacity, or correctness incidents while preserving safe evidence and vendor request IDs. Use when operating or reviewing…
Configure an Exa client without leaking credentials or mixing API-key, MCP OAuth, enterprise managed authorization, and payment-protocol trust models. Use when…
Harden Fireflies bearer authentication, GraphQL selections, webhook signatures, logs, and privileged mutations against secret and meeting-data exposure. Use…