iac-scan-kube-linter
Run KubeLinter to lint Kubernetes YAML and Helm charts for security best practices. Checks pod security, resource limits, network policies, and RBAC.
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-23 00:13
Security & auditing
7,326 results
mobile-security-mobsf
Run MobSF (Mobile Security Framework) for automated static and dynamic analysis of Android and iOS apps. Detects insecure storage, weak crypto, hardcoded…
sast-spotbugs
Run SpotBugs with Find Security Bugs plugin on Java code. Detects injection flaws, XXE, insecure crypto, SSRF, deserialization, and other JVM security bugs.
semgrep-sast-scan
Run Semgrep SAST (Static Application Security Testing) scans on source code using the Semgrep AppSec Platform cloud instance. Use this skill whenever the user…
vmware-nsx-security
Use this skill whenever the user needs to manage VMware NSX security (rebranded VMware vDefend in VCF 9) — distributed firewall (DFW) policies, security…
dataflow-analysis
Track data flow between function parameters, calls, and arguments using taint analysis. Use when detecting vulnerabilities like command injection, buffer…
constant-time-analysis
Detect timing side-channel vulnerabilities in cryptographic code caused by secret-dependent branching and memory access patterns
differential-review
Security-focused git diff analysis to detect regressions, new vulnerabilities, and unsafe changes in code reviews
encoding-toolkit
Encode/decode strings (Base64, URL, Hex, HTML, ROT13, JWT) for payload transformation, WAF bypass, and encoded data analysis
hash-identify
Identify hash algorithm type from a hash string and optionally verify against a known plaintext
ioc-extract
Extract Indicators of Compromise (IOC) from text, logs, or files
isms-checklist
Interactive gap analysis against Korea's ISMS-P 102-control certification framework (management, protection, personal information)
llm-ai-security
LLM/AI application security testing for prompt injection, system prompt leakage, tool abuse, and output handling per OWASP AI Security Top 10
log-analysis
Security log analysis and anomaly detection for access, auth, and syslog files
malware-analysis
Analyze suspicious files through triage/static/dynamic/code phases to produce IOCs, YARA/Sigma rules, and MITRE ATT&CK mappings
malware-hash
File hash reputation lookup via VirusTotal API v3 for MD5/SHA1/SHA256 detection ratio, threat classification, and vendor results
security-headers
Analyze HTTP security headers of a target URL and provide remediation advice
ssl-check
Inspect SSL/TLS certificate validity, protocol versions, and cipher suites for a target host
subdomain-enum
Subdomain enumeration using subfinder and amass to discover attack surface
waf-detect
Detect the presence and type of a Web Application Firewall using wafw00f or manual fingerprinting
web-vuln-graphql
GraphQL API security testing including introspection, batching, and authorization bypass
web-vuln-oauth
OAuth 2.0 and OIDC vulnerability detection with redirect_uri bypass techniques
web-vuln-race-conditions
Web endpoint race condition testing (TOCTOU, coupon reuse, double-spend, limit overrun) using concurrent HTTP request bursts
web3-smart-contract
Smart contract security audit covering 10 DeFi vulnerability classes with Foundry PoC templates