health-compliance-review
Audit, validate, and enforce regulatory and security controls in healthcare codebases and delivery systems. Selects `us`, `eu`, or `us+eu` jurisdiction…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-22 00:14
Security & auditing
7,294 results
acidrain-security-testing-scripts
Use AcidRain's XSS analysis resources, JavaScript utilities, and PHP injection testing samples for authorized web security research and hands-on learning.
acidrain-xss-security-testing
AcidRain web security toolbox for XSS analysis, JavaScript utilities, and PHP injection testing in authorized environments
paystack-verification
Paystack Verification API — KYC verification tools for resolving bank accounts, validating account ownership, and looking up card BIN information. Use this…
security-compliance-compliance-check
You are a compliance expert specializing in regulatory requirements for software systems including GDPR, HIPAA, SOC2, PCI-DSS, and other industry standards.…
network-forensics
Analyze network traffic captures and artifacts for forensic investigation. Use when investigating data exfiltration, command and control communications,…
variant-analysis
Find similar vulnerabilities and bugs across codebases using pattern-based analysis. Use when hunting bug variants, building CodeQL/Semgrep queries, analyzing…
telnyx-oauth-go
Implement OAuth 2.0 authentication flows for Telnyx API access. This skill provides Go SDK examples.
supply-chain-security
This skill should be used when triaging dependency advisories, code-scanning alerts, or committed secrets — reachability analysis, revoke-first remediation,…
clawdbot-self-security-audit
Perform a comprehensive read-only security audit of Clawdbot's own configuration. This is a knowledge-based skill that teaches Clawdbot to identify hardening…
meta-security-review-bundle
Compose three independent security gates over a candidate operation — policy/governance review, secret/credential scan, and audit-log emit — then arbitrate the…
production-security
Production security hardening — secrets management, CORS policy, authentication patterns, authorization models, rate limiting, security headers, dependency…
argocd-tactics
ArgoCD post-exploitation methodology: Redis cache poisoning cluster takeover, SSO authentication bypass, unauthenticated API enumeration, malicious Application deployment, Webhook SSRF, default credential exploitation. When users mention ArgoCD vulnerabilities, ArgoCD exploitation, ArgoCD RCE, ArgoCD…
binary-exploitation-methodology
Basic methodology for binary exploitation. Covers vulnerability identification (stack overflow/heap overflow/format string/UAF), protection mechanism analysis (ASLR/NX/Stack Canary/PIE/RELRO), exploitation strategy selection (ret2win/ret2shellcode/ROP/ret2libc), and the debugging and exploit development workflow. When the Agent...
binary-exploitation-tools
Binary exploitation toolkit reference. Covers debugging tools (GDB/GEF/pwndbg/r2), exploit development frameworks (pwntools/ROPgadget/one_gadget), decompilers (Ghidra/IDA/Binary Ninja), dynamic analysis tools (ltrace/strace/valgrind). When Agent…
http-smuggling-advanced
Advanced HTTP request smuggling exploitation methodology. Extends the smuggling section of cache-poisoning-smuggling. Use when CL.TE/TE.CL/TE.TE/H2.CL smuggling has been confirmed. Covers chained exploitation (stealing credentials, bypassing ACLs, poisoning web caches, XSS against other users) and HTTP/2 downgrade smuggling
kafka-attack
Apache Kafka unauthorized access and exploitation. Use when discovering a target with port 9092 open, a Kafka Broker without authentication, exposed Schema Registry or Kafka Connect, or when needing to steal message data from Kafka. Covers unauthorized access, topic enumeration and bulk message export, Consumer Group operations, Broker...
kerberos-pentesting
Kerberos authentication service (port 88) penetration testing methodology. Covers Kerberos service discovery, username enumeration, AS-REP Roasting, Kerberoasting, ticket forgery (Golden/Silver Ticket), delegation attacks, Pass-the-Ticket. When an Agent scan finds port 88 open and needs to attack...
memcache-pentesting
Memcached service (port 11211) penetration testing methodology. Covers Memcached service discovery, unauthorized access, cache data extraction, DDoS amplification attacks, and known vulnerability exploitation. Trigger this Skill when an Agent scan discovers port 11211 open, needs to test Memcached unauthorized access, extract cache data, or assess DDoS amplification risk.
mysql-pentesting
MySQL database service (port 3306) penetration testing methodology. Covers MySQL service discovery and version identification, default credentials and anonymous access testing, database enumeration, privilege escalation (UDF/file read-write/command execution), MySQL injection exploitation, known vulnerability exploitation. When the Agent scans and finds port 3306 open, needs to test MySQL authentication strength, enumerate database contents, or through...
php-auth-config-audit
PHP source code audit for authentication, configuration, and logic vulnerabilities. Triggered when PHP white-box auditing requires detecting authentication bypass, access control, security configuration, cryptographic misuse, or business logic vulnerabilities. Covers 5 risk categories: authentication bypass (hardcoded credentials/weak comparison/JWT...
php-bypass
PHP security feature bypass: disable_functions and open_basedir restriction bypass. Used when a webshell has been obtained but command execution functions are disabled or file operations are restricted by open_basedir
php-frontend-audit
PHP source code front-end interaction vulnerability audit. Triggered when front-end security-related vulnerabilities need to be detected during PHP white-box auditing. Covers 5 categories of front-end risks: XSS (reflected/stored/DOM), CSRF (missing Token validation), open redirect (controllable header Location), CRLF injection (HTTP response splitting), session and Cookie...
php-type-juggling
PHP Type Juggling and Magic Hash attack methodology. Use when the target is a PHP application and there is password comparison, hash verification, or authentication logic. When you see PHP `==` loose comparison, MD5/SHA1 hash verification, strcmp comparison, JSON input handling, or is_numeric checks, you must use it. When a failed login leaks the input's...