Top 100 Web Vulnerabilities Reference
This skill should be used when the user asks to "identify web application vulnerabilities", "explain common security flaws", "understand vulnerability…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-23 00:13
Security & auditing
7,319 results
Wi-Fi Penetration Testing
This skill should be used when the user asks to "perform wireless network penetration testing", "crack WEP or WPA passwords", "capture Wi-Fi handshakes",…
audit-logging-workers
Add structured audit logging with immutable R2 storage to Cloudflare Workers. Creates a typed audit utility, instruments all API routes, deploys a tail worker…
security-headers
Add security headers (CSP, HSTS, X-Frame-Options, Permissions-Policy) to prevent clickjacking, XSS, and data leaks. Provides copy-paste middleware for Express,…
pentest-output-standards
Output specification: Chinese analysis, chain of thought, vulnerability report template, negative results, blackboard status overview, change ledger, deadlock breakthrough. Use when reporting findings, maintaining change ledger, or formatting pentest output.
alipay-payment-feedback
Alipay skill issue feedback. Use only when users encounter unsolvable problems while using the alipay-authenticate-wallet, alipay-pay-for-service, or alipay-pay-for-402-service skills. Trigger conditions: 1) The payment process repeatedly fails and cannot be fixed on its own; 2) The payment feature activation/authorization process is abnormal and retries are ineffective; 3...
eks-security
Use whenever someone needs security or compliance guidance for Amazon EKS — phrased as "CIS Benchmark for EKS", "HIPAA / PCI-DSS / FedRAMP / SOC 2 / GDPR on…
1claw
HSM-backed secret management for AI agents. Store API keys (including Bankr `bk_` keys), passwords, and credentials in an encrypted vault; retrieve them at…
multi-search-engine
Multi search engine integration with 16 engines (7 CN + 9 Global). Supports advanced search operators, time filters, site search, privacy engines, and…
security-auditor
Use when reviewing code for security vulnerabilities, implementing authentication flows, auditing OWASP Top 10, configuring CORS/CSP headers, handling secrets,…
audit
Analyze npm audit results, identify actionable fixes vs noise, and recommend specific actions
competitive-analysis
Help users understand and respond to competition. Use when someone is positioning against competitors, evaluating market threats, running competitive war…
roth-detection-engineering
Apply Florian Roth's detection engineering methodology with YARA and Sigma rules. Emphasizes portable detection logic, community sharing, and signature…
cors_policy
Control de orígenes permitidos para peticiones cross-origin desde el frontend
encryption_tls
The English introduction is being prepared.
font_consistency_analyzer
Detectar inconsistencias tipográficas que delaten edición del texto del documento
human_review_queue
Cola de casos ambiguos para revisión humana con SLA de respuesta
isolation_forest
Detectar patrones de sesión inusuales (outliers) indicativos de fraude con Isolation Forest
vpn_proxy_tor_detection
The English introduction is being prepared.
threat-modeling-expert
Expert in threat modeling methodologies, security architecture review, and risk assessment. Masters STRIDE, PASTA, attack trees, and security requirement…
sops-age-secrets
SOPS and age encryption for secrets management in git repositories. Use when: (1) Setting up encrypted secrets in a project (initial .sops.yaml…
security-environment-standards
Security and environment configuration standards for web applications, including environment variable management, secure coding practices, and production…
access-control
This skill should be used when the user asks to "check for access control issues", "analyze authorization", "find IDOR vulnerabilities", "audit CORS…
api
This skill should be used when the user asks to "check API security", "audit REST API", "find BOLA vulnerabilities", "check for mass assignment", "analyze API…