server-security-scan
Use when given an IP address (and optionally SSH credentials) to run a non-destructive security audit — external attack-surface analysis from IP alone, or…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-24 00:15
Security & auditing
7,388 results
Suspicious PowerShell hunt (cross-platform ideas)
Hypothesis-driven hunt plan for suspicious PowerShell, plus query snippets for common telemetry.
Windows intrusion timeline (targeted)
Create a targeted intrusion timeline for a Windows incident using whatever artifacts are available (event logs, EDR, SIEM exports, triage notes).
senior-secops
Security operations workflow for vulnerability triage, incident response, detection/alerting improvements, and post-incident hardening. Use when responding to…
cloud-auth
Flow Nexus authentication and user management. Use for login, registration, session management, password reset, and user account operations.
risk-assessment
Risk Assessment Skill
aws-cognito-authentication-patterns
Implement Amazon Cognito user pools and identity flows for secure authentication, token issuance, and federation. Use for AWS-native identity architecture in…
nginx-edge-routing-and-security
Configure NGINX for reverse proxy routing, TLS termination, security headers, rate controls, and resilient upstream handling. Use for internet-facing edge and…
okta-identity-integration-patterns
Integrate Okta for enterprise identity workflows including OIDC login, group claims, and policy-based access controls. Use when implementing workforce or B2B…
api-security-schemathesis
Run Schemathesis for property-based API security testing. Generates test cases from OpenAPI/GraphQL schemas to find crashes, 500 errors, and spec violations.
renef
Use when operating renef / renef.io to instrument Android ARM64 apps: hooking native and Java functions, scanning/reading/writing/patching process memory,…
privesc-check
Linux/Windows quick privilege escalation vector check. Use when a shell has just been obtained and a quick judgment is needed on whether privilege escalation is possible. Lighter than post-exploit-linux/windows—only checks without full post-exploitation. Suitable for time-pressured scenarios or when only privilege escalation is needed (no credential collection/lateral movement required).
ssrf-xxe-methodology
Detection and exploitation of Server-Side Request Forgery (SSRF) and XML External Entity injection (XXE). Use when the target has URL fetch/preview/import functionality, XML parsing, PDF generation, or Webhooks. Includes a comprehensive IP filter bypass list, protocol exploitation (file/gopher/dict), and blind XXE out-of-band techniques
wechat-miniprogram-pentesting
WeChat Mini Program penetration testing methodology. Covers .wxapkg unpacking and source code restoration, front-end code auditing (hardcoded keys/interface inventory/encryption logic), interface privilege escalation (client-controllable state bits/ID enumeration/horizontal privilege escalation), payment and business logic, local storage and WebView, cloud development and open data interfaces. When you have Mini Program decompilation artifacts, .wxapkg packages, AppID, or #小程序://…
dependency-scanner
Scan for outdated dependencies in package.json. Check security vulnerabilities and version compatibility.
hash-tools
Calculate file and string hashes. MD5, SHA-1, SHA-256, SHA-512, BLAKE2. Verify integrity, compare files, generate checksums. No API key required.
port-scanner
Scan for open ports on hosts. Quick TCP port scanning for network diagnostics and service discovery.
workos-api-events
WorkOS Events/Webhooks API endpoints — list events, manage webhook endpoints.
workos-audit-logs
Implement audit logging for compliance and security.
workos-directory-sync
Sync user directories from identity providers like Okta, Azure AD, and Google.
workos-email
Configure email delivery for WorkOS authentication flows.
workos-fga
Implement fine-grained authorization with WorkOS FGA.
workos-magic-link
Implement passwordless authentication via Magic Link.
workos-mfa
Add multi-factor authentication to your application.