WordPress Penetration Testing
This skill should be used when the user asks to "pentest WordPress sites", "scan WordPress for vulnerabilities", "enumerate WordPress users, themes, or…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-24 00:15
Security & auditing
7,387 results
threat-modeling-ics
Performs end-to-end threat modeling for OT/ICS systems from Microsoft Threat Modeling Tool (TMT) threat-list exports (`*.csv`) and model files (`*.tm7`). Uses…
privacy-mask
Mask, redact, anonymize and censor sensitive information (PII) in screenshots and images — phone numbers, emails, IDs, API keys, crypto wallets, credit cards,…
protect-mcp-governance
Agent governance skill for MCP tool calls — Cedar policy authoring, shadow-to-enforce rollout, and Ed25519 receipt verification.
snyk-findings-export
Use when the user wants Snyk findings collected or exported as structured records with their supporting evidence, for example "export Snyk findings for this…
skill-scanner
Scan Clawdbot and MCP skills for malware, spyware, crypto-miners, and malicious code patterns before you install them. Security audit tool that detects data…
model-product-abuse-risk
Model product abuse and a least-harm control ladder. Use when attackers, fraud, or policy evasion can take money, access, or other users' work. Do not publish…
syncfusion-aspnetmvc-security
**CONTENT SECURITY POLICY (CSP) GUIDE** — Assist with configuring Syncfusion ASP.NET MVC EJ2 components to work with strict Content Security Policy (CSP)…
ffuf
Discover hidden content, directories, subdomains, and API endpoints with ffuf — the fastest web fuzzer. Use when someone asks to "find hidden directories",…
nmap-recon
Perform network reconnaissance with Nmap. Use when a user asks to scan networks, discover hosts and services, detect OS versions, find open ports, enumerate…
subfinder
Discover subdomains of a target domain using passive and active enumeration techniques. Use when tasks involve subdomain enumeration, attack surface mapping,…
cursor-thermo-nuclear-review
Comprehensive security and correctness audit of a branch's changes. Use for thermo nuclear, thermonuclear, or deep review requests, or branch/PR diff audits…
cross-origin-isolation
Use when reviewing security-sensitive web apps, SharedArrayBuffer usage, worker-heavy apps, editors, or measurement features that require cross-origin…
cross-origin-security
Use when reviewing scripts, client components, bundles, or runtime behavior related to Handle cross-origin requests securely. Inspect both source code and the…
token-storage-security
Use when reviewing authentication implementation, setting up a new auth system, or evaluating whether the current token storage approach exposes the…
enterprise-security
Enterprise-grade security patterns for Claude Code — audit logging, compliance frameworks, secrets management, permission hardening, network security, and…
sigma-backends
Retired. This skill is archived and must not be used to convert Sigma rules or run rsigma. For Sigma YAML authoring (detection, correlation, filters,…
auth-configs
Configure Supabase authentication providers (OAuth, JWT, email). Use when setting up authentication, configuring OAuth providers (Google/GitHub/Discord),…
rls-test-patterns
RLS policy testing patterns for Supabase - automated test cases for Row Level Security enforcement, user isolation verification, multi-tenant security, and…
foundations-safety-engineering
Analyzes hazards in systems or AI agents: STPA, guardrails, safety cases, incident analysis. Use when an agent can take actions or send payments.
sast-eslint-security
Run ESLint with security plugins on JavaScript/TypeScript code. Detects eval usage, non-literal RegExp, prototype pollution, and other JS/TS security…
auth-store-debug
Auth and store debugging for vercel-openclaw: admin-secret mode, Sign in with Vercel, session cookies, CSRF, LOCAL_READ_ONLY, Redis vs memory store, keyspace…
control-testing
Control Testing — Perform testing on designed internal controls to verify whether the controls operate effectively as designed, and document the test results. Applicable circumstances: during SOX audits (annual/interim), or when verifying control effectiveness after significant business process changes. Core: sampling testing + deviation analysis + effectiveness conclusion.
doc-sectest-autopilot
Automated SECTEST generation and review orchestration for security threat and control validation