SuperAPI AI DirectoryFind an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-22 00:14
7,293 results
OT/ICS industrial control system attack methodology. Use when the target involves SCADA/DCS/PLC systems, when industrial control protocols such as Modbus/DNP3/OPC UA/EtherNet-IP are discovered, or when critical infrastructure security needs to be assessed. Covers industrial control protocol exploitation, PLC attacks, HMI penetration, IT/OT boundary crossing
PHP audit vulnerability chain assembly methodology. Triggered when classified vulnerability audits have been completed and the feasibility of exploiting combinations of multiple vulnerabilities needs to be assessed. Coverage: file write→file inclusion→RCE chain, deserialization→sensitive operation chain, SQL injection→file write chain, SSRF→internal service chain, information disclosure→privilege escalation chain. Also includes Composer dependency CVE scanning methods.
JavaScript prototype chain pollution exploit methodology. Use when the target is a Node.js application, uses lodash/jQuery/deep copy functions, and accepts JSON input. Covers both Server-side (RCE/privilege bypass) and Client-side (XSS/DOM manipulation) scenarios
Subdomain takeover detection and exploitation methodology. Use when a target has dangling CNAME/NS/MX records pointing to decommissioned cloud resources, expired third-party services, or unclaimed SaaS tenants. Covers CNAME takeover (S3/GitHub Pages/Heroku/Azure/Shopify/Fastly and 14+ other providers), NS takeover (full zone control), MX…
VoIP/SIP service penetration testing methodology. Covers SIP service discovery and enumeration, SIP authentication attacks, call hijacking and eavesdropping, SRTP downgrade attacks, SIP registration hijacking, DoS attacks, SRTP/ZRTP security analysis. When an Agent scan discovers open SIP ports (5060/5061), needs to test VoIP infrastructure security, enumerate SIP...
Run a comprehensive security review on code
Automated security scanning for dependencies and code. Use when running npm audit, pip-audit, Semgrep, secret detection, or integrating security checks into…
Amazon Bedrock Automated Reasoning for mathematical verification of AI responses against formal policy rules with up to 99% accuracy. Use when validating…
Comprehensive Amazon Bedrock Guardrails implementation for AI safety with 6 safeguard policies (content filters, PII redaction, topic denial, word filters,…
The Business Diagnostic Assistant is suitable for technical staff, managers, software professionals, and vulnerability advisories when users raise questions such as "how should this be done," requiring rapid decomposition of goals, identification of priorities, and formation of executable results. It helps generate summaries, diagnostic conclusions, action recommendations, and reusable deliverables based on input materials.
AI-powered tools for Web3 bug bounty automation. Use when you want to automate recon, run autonomous audits, or use AI agents for vulnerability discovery.
Complete Foundry PoC writing guide + all cheatcodes + DeFiHackLabs reproduction patterns. Use this when building a proof of concept exploit, setting up a fork…
Hardens designs and implementations with structured security reviews.
Use when the user mentions security review, App Store submission prep, Privacy Manifest requirements, hardcoded credentials, or sensitive data storage.
Obtain and refresh JWT access tokens, and manage API keys for the Spuree V1 API
Spring Authorization Server for building OAuth 2.1 and OpenID Connect providers. USE WHEN: user mentions "OAuth2 server", "authorization server", "OIDC…
A read-only skill that reads Kuroco site security settings via Admin MCP and diagnoses and reports risks against a checklist. It does not change any settings whatsoever. API security methods, CORS, IP address restrictions, login/password policies, two-factor authentication (one-time passwords), permission groups and superuser lists...
Use when configuring Content Security Policy (CSP) in Astro 7 — security headers, script/style hashes, nonces, or adapter staticHeaders.
Multi-stage pipeline for validating that vulnerability findings are real, reachable, and exploitable, preventing wasted effort on hallucinated findings, dead…
Cloud-native network protection, zero-trust architecture, and AWS VPC security
GDPR-compliant privacy framework, privacy by design, and data subject rights
Use when bypassing EDR/AV to run a payload — hook unhooking, direct/indirect syscalls, PPID spoofing, process injection, AMSI bypass, ETW patching,…
Before you ship, run this. Catches the obvious: secrets in code, unsafe SQL, missing auth, OWASP top 10.
Implement security best practices for Documenso document signing integrations. Use when securing API keys, configuring webhooks securely, or implementing…