bug-bounty
Complete bug bounty workflow
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-25 00:14
Security & auditing
7,424 results
dependency-scanning
Scan package dependencies for known vulnerabilities using Snyk, Dependabot, and OWASP Dependency-Check.
docs-generator
Generate technical deliverables from completed analysis: reverse-engineering reports, penetration-test reports, CTF write-ups, and signature-analysis…
fact-check-x-unified
Fact-Check-X process orchestration capability, which sequentially organizes the summary of answers from all parties, aggregation of answers from all parties (unverified), the final answer after authoritative verification, and evaluation of answers from all parties, generating stage artifacts and a complete report package that can be opened, audited, and transferred.
golang-security-auditor
Golang Security Auditor
ida-reverse
Reverse engineer binaries with IDA Pro: decompilation, disassembly, data-flow tracking, cross-references, and IDA MCP automation for deep static analysis of…
reverse-engineer-anything
Use REA to investigate shipped apps, binaries, packages, and runtimes; trace features with evidence, compare versions, or guide reconstruction. Skip ordinary…
security-skill-creator
Security Skill Creator
game-based-security-proof
Use when proving security of encryption schemes, MACs, signatures, PRFs, hash constructions, or other cryptographic primitives, constructing reduction proofs…
simulation-security-proofs
Use when proving security of MPC protocols, zero-knowledge proofs, oblivious transfer, commitment schemes, garbled circuits, or any protocol whose security is…
secure-dependency-health-check
Helps choose secure, healthy open-source packages by evaluating vulnerability status, maintenance health, popularity, community, and security posture. Use…
auth-checker
Audit authentication flows for security vulnerabilities
clawdbot-self-security-audit
Perform a comprehensive read-only security audit of Clawdbot's own configuration. This is a knowledge-based skill that teaches Clawdbot to identify hardening…
amass
OWASP Amass for in-depth DNS enumeration, subdomain discovery, and network mapping with active and passive modes. Use when: comprehensive subdomain…
hashicorp-vault
Assists with managing secrets, encryption keys, and dynamic credentials using HashiCorp Vault. Use when configuring secret engines, setting up dynamic database…
letsencrypt
Let's Encrypt is a free, automated certificate authority, and Certbot is its official ACME client for getting and renewing TLS certificates. Use this skill…
ssrf-detection
Detect, exploit, and prevent Server-Side Request Forgery (SSRF) vulnerabilities. Use when tasks involve testing for SSRF in web applications, accessing…
data-minimisation
Use when reviewing form components, API payloads, or client-side storage to identify fields that are collected but not consumed by a stated feature.
mixed-content
Use when reviewing an HTTPS page for resources (scripts, images, stylesheets, iframes) that are loaded over plain HTTP.
session-cookie-flags
Use when reviewing server-side session management, setting up authentication middleware, or auditing cookie configuration in HTTP response headers.
third-party-cookies
Use when reviewing a website for privacy compliance, third-party resource loading, or cookie consent implementation.
x-frame-options
Use when reviewing HTTP response headers for clickjacking protection on any web application with authenticated user actions.
taskingbot-skill-validator
Scans skills for tool poisoning, policy violations, and risk before registration or exposure. Detects hidden instructions, cross-tool shadowing, data…
security-vuln-gauntlet
Apply the Gauntlet Loop to security vulnerability hunting — a hunter (builder) proposes candidate vulnerabilities and a blind validator (critic) inspects the…