privacy-retention-and-right-to-delete
Guides agents through privacy, retention, and deletion workflows in data systems. Use when handling personal data, retention limits, deletion requests, legal…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-23 00:13
Security & auditing
7,324 results
tls-scan-testssl
Run testssl.sh to analyze TLS/SSL configurations. Checks cipher suites, protocols, certificate validity, known vulnerabilities (Heartbleed, POODLE, ROBOT), and…
llm-secrets
List available LLM-accessible credentials. Use when you need API keys, passwords, or other secrets that have been made available to you.
Security Scanner
Security analysis and vulnerability scanning for code and configuration files. Detects secrets, misconfigurations, and potential security issues.
owasp-check
OWASP Top 10 (2021) checklist-based inspection and compliance matrix generation
subdomain-takeover
Subdomain takeover detection and verification for dangling DNS records
symfony-yoandev-security
Authentication and authorisation on a Symfony project: the User entity and user providers, the firewall, native access_token authentication for a JSON API with…
mcp-api-key-auth
This skill should be used when the user needs to set up, manage, or troubleshoot MCP API Key authentication and tool usage tracking for this stock data…
security-hardening
Security hardening, secure coding practices, and infrastructure defense. Use when the user asks about hardening security, secure coding, OWASP vulnerabilities,…
iam-identity-management
Use when writing IAM policies, troubleshooting 403/404 permission errors, setting up dynamic groups, or debugging IDCS federation. Covers OCI-specific policy…
secrets-management
Use when storing secrets in OCI Vault, debugging 401/403 secret retrieval errors, implementing secret rotation, configuring instance principal auth, or caching…
investigation-report
One-shot Base-token investigation - runs any subset of six onchain-security checks (rug-scan, contract-audit, deployer-trace, holder-concentration, honeypot,…
vuln-scanner
Audit trending repos for real security vulnerabilities and disclose responsibly - scan and route findings (PVR / dependency PR), re-submit queued advisories,…
vuln-tracker
One lifecycle poll over everything vuln-scanner produces - PR and advisory status, PVR triage transitions, and pending-disclosure aging, with a stars-secured…
ci-security-gates
Add CodeQL SAST, Gitleaks secret scanning, and dependency audit to any CI/CD pipeline. Blocks deployment if vulnerabilities or secrets are detected. Covers…
error-handling-security
Prevent information leakage through error messages. Covers sanitized error responses, structured error handling, no stack traces in production, and safe…
input-validation
Validate and sanitize all user input to prevent XSS, path traversal, command injection, and malformed data. Covers Zod, Joi, class-validator, Laravel…
pdpa-security-audit
Full PDPA 2024 + OWASP Top 10 security audit for any codebase. Checks all 8 forensic findings from Malaysian court cases plus enterprise controls for access…
sql-injection-prevention
Detect and fix SQL injection vulnerabilities in any framework. Covers Laravel (DB::raw, whereRaw), Node.js (template literals in queries), Python (f-strings in…
auth-and-authorization-patterns
Use this skill when implementing authentication (login, token issuance) or authorization (access control, permissions). Apply whenever the task involves login…
active-directory-attack
Internal Domain Attacks: BloodHound, Kerberoast, ADCS ESC1/ESC8, NTLM Relay, Coerce, DACL, DCSync, Zerologon/NoPac/PrintNightmare, mitm6, LLMNR, Linux internal network. Use when attacking Active…
binary-mobile-reversing
APK/EXE/Binary: UniApp/DCloud/Flutter reverse engineering, certificate pinning bypass, exported components, memory corruption exploit chain, IoT firmware. Use when reversing APK/EXE, UniApp/Flutter, native .so, or memory-corruption exploits.
pentest-verification
Verification iron rule: search ≠ vulnerability, confirmed Fact requires evidence, tentative indicates a lead, vague speculation is prohibited, negative results are also recorded, imagination maxed out + single-step verification zero tolerance. Use when writing project facts, validating findings, or avoiding hallucination.
wireless-hardware-attack
Wireless/Hardware: WiFi PMKID/WPS/Evil Twin, BLE, Zigbee, NFC, SDR, UART/JTAG/SPI, side-channel, fault injection. Use when attacking WiFi, BLE, RFID, SDR, or hardware interfaces.