instantly-enterprise-rbac
Govern Instantly workspace members, API-key scopes, audit logs, and workspace-group delegation. Use when reviewing access or preparing an owner-approved…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-22 00:14
Security & auditing
7,291 results
juicebox-security-basics
Apply Juicebox security best practices. Trigger: "juicebox security", "juicebox api key security".
osint
Gathers intelligence from public sources. Use when searching for usernames, geolocating images, investigating social media, analyzing domains, or solving…
detecting-model-extraction-attacks
Detect MITRE ATLAS AML.T0024 attacks (model stealing, inversion, membership inference) performed via inference-API abuse, by monitoring per-principal query…
implementing-soar-automation-with-phantom
Implements Security Orchestration, Automation, and Response (SOAR) workflows using Splunk SOAR (formerly Phantom) to automate alert triage, IOC enrichment,…
inspect-content-provenance
Inspect local files or text for observable provenance metadata, possible C2PA markers, hashes, and text control characters. Use when a user asks whether an…
verify-content-credentials
Verify C2PA Content Credentials in a local asset with the official c2patool, separating manifest presence, cryptographic integrity, and signer trust. Use when…
auth-specialist
Authentication and authorization expert for OAuth, sessions, JWT, MFA, and identity securityUse when "authentication flow, login system, oauth integration, jwt…
vulnerability-writeup
Turn vulnerability notes, disclosure reports, PoCs, source code, or Codex Security findings into self-contained, sceptically validated, natural-sounding…
OpenSSL
Expert guidance for OpenSSL operations including certificate generation, key management, CSR creation, certificate verification, encryption, and PKI…
license-compliance-scan
Check dependency licenses against your project's license and flag conflicts, copyleft obligations, and unknown/unlicensed packages. Reads manifests directly.…
malware-detection-warning
WARNING - This repository appears to be a malicious software distribution attempt disguised as legitimate security software
security-review
Security review via Codex exec. Use when: OWASP Top 10:2025 audit, dependency vulnerability check, security-sensitive changes. Not for: code review (use…
malware-forensics
Analyze malware samples for forensic investigation. Use when investigating malware infections, determining malware capabilities, extracting IOCs, or…
production-audit
Audit a shipped repo for production-readiness gaps across RLS, webhooks, secrets, grants, Stripe idempotency, mobile UX, and deployment health.
soc2-audit
Execute a comprehensive, framework-agnostic SOC 2 readiness audit of an entire repository or application. Detects project type and stack at runtime and adapts…
telnyx-oauth-python
Implement OAuth 2.0 authentication flows for Telnyx API access. This skill provides Python SDK examples.
dep-security
Check every dependency in a package.json against live CVE databases and security advisories in real time — specifically targeting vulnerabilities disclosed in…
meta-compliance-audit-bundle
Auditable compliance bundle: deep-research with citations → signable .docx report → read-only PDF archive → memory note of audit findings.
cookie-analysis
Session cookie analysis and forgery methodology. Use when a web application is found to use cookies for authentication and the cookie type needs to be determined and a forgery method selected. Covers direct forgery of unsigned base64 cookies, Flask signed cookies (flask-unsign key brute-forcing), encrypted/binary cookies…
java-file-audit
Java source code file operation class vulnerability audit. Triggered when file-related vulnerabilities need to be detected in Java white-box auditing. Covers 5 types of file risks: arbitrary file upload (MultipartFile/Servlet Part/type bypass), arbitrary file read (NIO/IO stream/path traversal), arbitrary file write (overwriting configuration/WebShell landing), archive extraction vulnerabilities (ZipInputSt…
java-framework-audit
Java framework-specific vulnerability source code auditing. Triggered when framework-level known vulnerability patterns need to be detected during Java white-box auditing. Covers 5 major frameworks/components: Spring full stack (SpEL/Actuator/parameter binding/Spring Cloud Gateway), Struts2 (OGNL/ActionMapping/Content-Type...
java-frontend-audit
Java source code front-end security vulnerability audit. Triggered when front-end security vulnerabilities need to be detected in Java white-box auditing. Covers 5 categories of risk: XSS (JSP/Thymeleaf/FreeMarker output escaping), CSRF (Spring Security/custom Token), open redirect (sendRedirect/forward), CRLF...
ot-ics-attack
OT/ICS industrial control system attack methodology. Use when the target involves SCADA/DCS/PLC systems, when industrial control protocols such as Modbus/DNP3/OPC UA/EtherNet-IP are discovered, or when critical infrastructure security needs to be assessed. Covers industrial control protocol exploitation, PLC attacks, HMI penetration, IT/OT boundary crossing