trivy
Expert Trivy security scanner assistance covering container image scanning, filesystem CVEs, git repositories, and IaC misconfigs. Use when scanning Docker…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-24 00:15
Security & auditing
7,367 results
gcs-security-assessment
Assesses the security posture of Google Cloud Storage (GCS) buckets and projects. Grounds every finding in gathered telemetry, evaluates buckets against Google…
hello-security
Use when involving security-sensitive operations such as authentication, passwords, tokens, JWT, OAuth, session, cookies, encryption, keys, API keys, permissions, roles, user input validation, file uploads, etc.
audit-security
Use when a known code or configuration surface needs a scoped, read-only security audit within evidenced trust boundaries; exclude repository-wide, exhaustive,…
ray-cleanup
Project archiving and disk slimming. Scan the last-commit time and disk usage of each repo under ~/projects, find dormant projects untouched for 3+ months and big hogs like node_modules/.next, give "archive/deletable/keep" recommendations by category, and execute according to the established archiving discipline. The core is safety—any rm/mv…
indykite-authzen-list-policies
List the ACTIVE KBAC authorization policies of the calling application agent's project at runtime via the IndyKite AuthZEN REST API (`GET /access/v1/policies`)…
indykite-ciq-whoami
Resolve an end-user access token to the IndyKite Knowledge Graph (IKG) subject it acts as, via the ContX IQ REST API (`GET /contx-iq/v1/whoami`) - returns only…
audit-security
Perform a security audit when the user asks to check for vulnerabilities, audit security, review OWASP compliance, scan for secrets, or assess application…
create-threat-model
Perform STRIDE threat modeling for a system or component when the user asks to threat model, analyze security risks, or identify attack vectors
aws penetration testing
This skill should be used when the user asks to "pentest AWS", "test AWS security", "enumerate IAM", "exploit cloud infrastructure", "AWS privilege…
broken authentication testing
This skill should be used when the user asks to "test for broken authentication vulnerabilities", "assess session management security", "perform credential…
cloud penetration testing
This skill should be used when the user asks to "perform cloud penetration testing", "assess Azure or AWS or GCP security", "enumerate cloud resources",…
ethical hacking methodology
This skill should be used when the user asks to "learn ethical hacking", "understand penetration testing lifecycle", "perform reconnaissance", "conduct…
file path traversal testing
This skill should be used when the user asks to "test for directory traversal", "exploit path traversal vulnerabilities", "read arbitrary files through web…
html injection testing
This skill should be used when the user asks to "test for HTML injection", "inject HTML into web pages", "perform HTML injection attacks", "deface web…
idor vulnerability testing
This skill should be used when the user asks to "test for insecure direct object references," "find IDOR vulnerabilities," "exploit broken access control,"…
linux privilege escalation
This skill should be used when the user asks to "escalate privileges on Linux", "find privesc vectors on Linux systems", "exploit sudo misconfigurations",…
metasploit framework
This skill should be used when the user asks to "use Metasploit for penetration testing", "exploit vulnerabilities with msfconsole", "create payloads with…
pentest commands
This skill should be used when the user asks to "run pentest commands", "scan with nmap", "use metasploit exploits", "crack passwords with hydra or john",…
security scanning tools
This skill should be used when the user asks to "perform vulnerability scanning", "scan networks for open ports", "assess web application security", "scan…
windows privilege escalation
This skill should be used when the user asks to "escalate privileges on Windows," "find Windows privesc vectors," "enumerate Windows for privilege escalation,"…
zk-vs-fhe-vs-mpc
Compare zero-knowledge proofs (ZK), fully homomorphic encryption (FHE), and secure multi-party computation (MPC) for privacy-focused DApps. Use when the user…
blockchain-black-team
Execute real-world blockchain attack scenarios against smart contracts and off-chain infrastructure. Use when performing security audits, penetration testing,…
nis2
EU NIS2 Directive (Directive (EU) 2022/2555) compliance advisor for essential and important entities: entity classification, Art. 21 risk management measures,…