SuperAPI AI DirectoryFind an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-22 00:14
7,294 results
Redis unauthorized access and exploitation. Use when the target is found to have port 6379 open, the Redis service has no authentication or a weak password, and sensitive data needs to be obtained from Redis or remote command execution needs to be achieved. Covers unauthorized access, data theft, crontab write RCE, master-slave replication RCE, module loading RCE, webshell writing, SSH public key injection, Lua script injection, Pub/Sub…
XSLT injection testing methodology. Use when the target has user-controllable XSLT/stylesheet input, XML transformation endpoints, report generators, XML→HTML converters. Covers processor fingerprinting (Xalan/Saxon/libxslt/MSXML), XXE via XSLT (DTD external entities), document() SSRF/file read, EXSLT…
Methodology for detecting and exploiting XML External Entity Injection (XXE). Use when the target has XML parsing, SOAP APIs, file uploads (DOCX/XLSX/SVG), or any endpoint that accepts XML input. Includes basic file reading, blind XXE out-of-band exfiltration (parameter entities + external DTD), SVG/DOCX XXE, SOAP Envelope XXE, JSON→XML…
Pre-push safety gate for any git push to a remote (GitHub, GitLab, Bitbucket, self-hosted). Runs gitleaks + regex-layer secret scan, forbidden-file check,…
Use when auditing API routes for schema drift, missing auth, or validation gaps. Scans routes against shared TypeScript types to find mismatches, missing…
Tauri 2.x deny-by-default security model, capabilities, permissions, scopes, ACL
The risk review assistant is suitable for HR, managers, operations, and software when users ask questions such as "what risks are here," need to quickly break down goals, determine priorities, and form executable results, and helps generate summaries, diagnostic conclusions, action recommendations, and reusable deliverables based on input materials.
Scans OpenClaw config directories for plaintext API keys, tokens, and secrets in unencrypted files — flags exposure risks and suggests encryption or…
Reviews vulnerability policy violations for the chainloop project recorded in Chainloop and performs fixes in Dockerfiles or go.mod. Use when asked to fix…
Spring LDAP for LDAP/Active Directory integration and authentication. Covers LdapTemplate, @Entry mapping, LdapRepository, and Spring Security…
Focused authorization assessment for access control, IDOR, BOLA, BFLA, RBAC, object ownership, function authorization, tenant isolation, and horizontal or…
Read-only, offline audit of a repository's security hygiene posture: deterministic checks for unpinned dependencies (requirements/package.json/Dockerfile),…
Adversarial security audit playbook for Plutus V3 Aiken DEX contracts (threat model, invariants, findings, tests, tx repro shapes).
Operator skill: run local Aiken build/test commands and capture evidence for the audit. Manual invoke only.
This skill should be used when the user asks to "integrate goth with echo", "oauth echo framework", "echo authentication", "goth session management", "oauth…
Collect comprehensive debug information for Clerk issues. Use when troubleshooting complex problems, preparing support tickets, or diagnosing intermittent…
Invoke this Skill when the system prompt needs to defend against security threats such as prompt injection, jailbreak attacks, social engineering, and content trust boundary breaches. It applies to system prompts for any system that accepts external input, such as AI Agents, chatbots, and document-processing assistants. It does not apply to purely internal tool-calling scenarios or fully isolated sandbox environments, nor to UI layout or response format design.
Review Langfuse changes for SSRF, tenant isolation, secret handling, unsafe redirects or uploads, RBAC drift, and client telemetry privacy. Use when a design…
Implement OAuth 2.1 + PKCE authentication for remote MCP servers, including dynamic client registration, token refresh, and scope design. Covers the 2025 MCP…
OWASP Security Checklist
Audit SillyTavern rolecard JSON, embedded HTML, regex replacements, Tavern Helper scripts, loaders, and related source for injection, dynamic execution,…
Use when adding deps, rotating secrets, configuring CI/CD, writing IaC, preparing production deploys. Secures supply chain + deploy pipeline via SBOM, secret…
Use when actual or suspected breach is found via alert, user report, CVE disclosure, leaked secrets. Coordinates post-detection incident response and blameless…
Implement RPKI-based BGP route origin validation by creating Route Origin Authorizations (ROAs) at RIRs (ARIN, RIPE, APNIC, AFRINIC, LACNIC), deploying…