bx-esapi
Use this skill for OWASP ESAPI encoding, decoding, and HTML sanitization in BoxLang: encodeFor(), encodeForHTML(), encodeForJavaScript(), encodeForSQL(),…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-22 00:14
Security & auditing
7,311 results
llm-jailbreaking
Advanced LLM jailbreaking techniques, safety mechanism bypass strategies, and constraint circumvention methods
security-best-practices
Perform language and framework specific security best-practice reviews and suggest improvements. Trigger only when the user explicitly requests security best…
implement-access-control
Implements roles and permissions at a route so an agent can protect an endpoint. Use when the user wants roles, permissions, or RBAC. It does not write SaaSKit…
manage-saaskit-sessions
Manages SaaSKit sessions so an agent can store, validate, refresh, and revoke a session. Use when the user wants a session, refresh, or revoke. It does not…
migrate-to-saaskit
Migrates existing auth to SaaSKit so an agent can audit and import it. Use when the user wants to migrate to SaaSKit or replace Auth0 or Clerk. It does not…
run-dryrun
Runs dryrun so an agent can test a SaaSKit auth setup before go-live. Use when the user wants to test auth or run dryrun. It does not write login (that's…
content-security-policy
Use when reviewing headers, forms, cookies, or third-party integrations related to Implement a content security policy. Validate the effective browser and HTTP…
twingate-idfw
Use for the Twingate Identity Firewall (IDFW) and the Twingate Gateway — protocol-level identity enforcement for SSH, the Kubernetes API, AND…
secure-code-review
Security code review across input validation, auth, injection, crypto, error handling, dependencies, and concurrency with CWE mapping
x-security
This skill provides comprehensive security assessment and vulnerability management tools through x-cmd CLI, including network reconnaissance with Shodan,…
input-validation
Input validation and sanitization patterns. Use when validating user input, preventing injection attacks, implementing allowlists, or sanitizing…
DDoS Attack Testing
This skill should be used when the user asks to "test for DDoS vulnerabilities", "perform denial of service testing", "simulate traffic floods", "assess…
Phishing Attacks
The assistant guides users through phishing attack simulation tools and techniques for penetration testing and security awareness. Activate when users ask…
PowerShell Scripting for Security
This skill should be used when the user asks to "write PowerShell scripts", "automate security tasks with PowerShell", "create PowerShell functions", "work…
Red Team Tools and Methodology
The assistant provides red team methodologies, bug bounty hunting workflows, and tool configurations from top security researchers. Activate when users ask…
cyberstrike-eino-demo
Fully provisioned example skill package: SKILL.md + optional directories such as scripts/, references/, assets/; validates Eino skill and in-package HTTP paths (authorized security testing and teaching only).
security-best-practices
Implement security best practices for web applications and infrastructure. Use when securing APIs, preventing common vulnerabilities, or implementing security…
alibabacloud-aisc-skill-inspection
Use Alibaba Cloud AISC for Skill security checks: submit scans, query rootTaskId, interpret check-report.json risk reports, and diagnose AISC Skill detection errors. Use when users ask "is this Skill safe", "can I install it with confidence", or "does it have malicious code, sensitive credentials, or prompt injection". Also handles candidate Skills…
security-review
Complete a security review of the pending changes on the current branch
head_pose_estimation
Calcular orientación (yaw/pitch/roll) de la cabeza para el challenge de giro de cabeza
sharp-edges
Identifies error-prone APIs, dangerous configurations, and footgun designs that enable security mistakes. Use when reviewing API designs, configuration…
static-analysis
Static analysis toolkit with CodeQL, Semgrep, and SARIF parsing for security vulnerability detection. Use when running static analysis scans, writing custom…
cicd-posture
Use this agent when the user wants a read-only CI/CD and supply chain posture assessment for an Endor namespace, GitHub organization, repository set, or…