apptrust evidence policies
Create JFrog project lifecycle policies that check for evidence existence on promotion or release events for applications with specific labels. Use when the…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-23 00:13
Security & auditing
7,330 results
jfrog curation
Use when working with JFrog Curation -- managing package curation policies, auditing blocked packages, configuring curated repositories, or managing waivers.…
active directory attacks
This skill should be used when the user asks to "attack Active Directory", "exploit AD", "Kerberoasting", "DCSync", "pass-the-hash", "BloodHound enumeration",…
smtp penetration testing
This skill should be used when the user asks to "perform SMTP penetration testing", "enumerate email users", "test for open mail relays", "grab SMTP banners",…
sqlmap database penetration testing
This skill should be used when the user asks to "automate SQL injection testing," "enumerate database structure," "extract database credentials using sqlmap,"…
top 100 web vulnerabilities reference
This skill should be used when the user asks to "identify web application vulnerabilities", "explain common security flaws", "understand vulnerability…
staging-token
Retrieve staging credentials/JWT token for the Aircall dashboard
crypto-analysis
Breaks cryptographic systems and decrypts ciphertext. Use when working with RSA, AES, XOR, classical ciphers, hash functions, or when challenge involves…
publish-guard
Perform platform compliance checks for Chinese content on Xiaohongshu and WeChat Official Accounts. Scan for issues such as prohibited words, gray-area vocabulary, superlative expressions, foreign proper noun formatting, title safety, qualifications for finance/current affairs content, and AI-generated content labeling, and output a violation report and revision suggestions. When the user requests platform compliance checks, sensitive word scanning, pre-publication review, throttling checks, prohibited word scanning, finance content compliance, or mentions "Xiaohongshu compliance," "Official Account rules," "platform compl…
socialite-development
Manages OAuth social authentication with Laravel Socialite. Activate when adding social login providers; configuring OAuth redirect/callback flows; retrieving…
eu-ai-act-classification-oliver-schmidt-prietz
Determines whether a technology qualifies as an AI system under Art. 3(1) of the EU AI Act and classifies its risk tier (prohibited, high-risk, GPAI with…
eu-ai-act-fria
Assess whether a Fundamental Rights Impact Assessment (FRIA) is required under Article 27 EU AI Act, and structure or draft that assessment for a specific…
eu-ai-act-report-oliver-schmidt-prietz
Generates a formal, structured AI Act compliance assessment report suitable for legal files, audit trails, and regulatory inquiries. This skill should be used…
eu-cra
Expert EU Cyber Resilience Act (CRA) advisor for Regulation (EU) 2024/2847 — mandatory cybersecurity and vulnerability handling requirements for all products…
Icelandic Privacy Review
Use this skill when asked to review data protection or privacy compliance under Icelandic law and GDPR. Triggers on requests involving personal data…
screening-alert-adjudication-amir-fadavi
Adjudicates whether a hit generated by sanctions, PEP, or adverse-media screening is a true positive, false positive, or requires human escalation. Use…
ln-94-authentication-engineer
Implements or repairs identity verification and session or credential lifecycle; not operation permissions, resource access policy or a new identity provider…
ln-95-resource-authorization-engineer
Implements permissions and tenant or owner scoped resource access while preserving approved grants; not authentication or role redesign.
ip-check
Detect the quality of an IP or residential/datacenter proxy node—registration database, geolocation database consistency, ASN/org, risk-control reputation, blacklists, residential authenticity, BGP announcements, target service (Grok/Claude/ChatGPT) unlockability, and latency triangulation. Determine whether the IP can be safely used for AI services (avoiding misclassification by geolocation databases into another country that causes region locks). When the user says "check this…
better-auth
Implement authentication and authorization with Better Auth - a framework-agnostic TypeScript authentication framework. Features include email/password…
dotnet-codeql
Use the open-source CodeQL ecosystem for .NET security analysis. Use when a repo needs CodeQL query packs, CLI-based analysis on open source codebases, or…
oracle-security
Security architecture and threat modeling knowledge. Auto-invokes when designing features that handle untrusted data, authentication, authorization, external…
sota-security-compliance
State-of-the-art security & compliance engineering (2026) for the cybersecurity control frameworks and product-security regulations that drive architecture,…
policy-engine-builder
Guide for creating Gemini CLI policy engine TOML rules. Covers rule syntax, priority tiers, conditions, and MCP wildcards. Use when restricting Gemini tools,…