generate-asset-actions
Generate asset-actions.yaml from ASSETS.yaml by classifying assets into priority tiers. Use when the user asks to regenerate, update, or refresh the asset…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-25 00:14
Security & auditing
7,424 results
security-audit-eval
Audit a third-party Inspect AI evaluation for security risks before running it locally. Decide whether the eval is safe by checking for malicious host-side…
recon-automotive-dealers
Sector-specific recon for car dealership and automotive retail websites — typically WordPress or custom PHP on shared hosting with inventory listings,…
security
Guide Claude on securing Vaadin 25 applications with Spring Security. This skill should be used when the user asks to "add security", "add login", "create a…
dast-nuclei
Run Nuclei template-based vulnerability scanner. Uses 8000+ community templates to detect CVEs, misconfigurations, exposures, and default credentials on web…
network-scan-nmap
Run Nmap for network discovery and security auditing. Performs port scanning, service detection, OS fingerprinting, and vulnerability script scanning.
sbom-syft
Run Syft to generate Software Bill of Materials (SBOM) from container images and filesystems. Outputs CycloneDX or SPDX formats for supply chain compliance.
secret-scan-gitleaks
Run Gitleaks to detect hardcoded secrets in git repositories. Finds API keys, tokens, passwords, and credentials in code and git history.
wendy-security-baselines
Security invariants every Wendy interop change must respect, distilled from the AAA contract. Use when: (1) reviewing or writing any code touching pki-core,…
wendy-self-hosted
The Wendy dual-path rule: the wendy stack must always run without the SaaS stack. MANDATORY when: (1) any feature integrates wendyos/wendy-agent with pki-core,…
eol-resistor-calculator
Calculates and validates end-of-line (EOL, SEOL, DEOL, TEOL) resistor loops for intrusion alarm panels (Honeywell, DSC, Paradox, Bosch) with wire gauge drop…
hash
Calculate and verify cryptographic hashes (MD5, SHA256, etc.) for files or piped input. Core Scenario: When the user needs to verify file integrity, generate…
hashdir
Calculate directory-level cryptographic hashes by traversing all internal files and folders. Core Scenario: When the user needs to verify directory integrity…
kev
Retrieve and list Known Exploited Vulnerabilities (KEV) from official security catalogs. Core Scenario: When the user needs to audit system safety against…
osv
CLI for Google's Open Source Vulnerabilities (OSV) project, providing vulnerability scanning and dependency analysis. Core Scenario: When the user needs to…
scorecard
Automated security tool for assessing open-source project risks and best practices adherence. Core Scenario: When the user needs to evaluate the security…
shodan
Search the Shodan network database for connected devices, vulnerabilities, and real-time network intelligence. Core Scenario: When the user needs to perform…
x-cmd-security
This skill provides comprehensive security assessment and vulnerability management tools through x-cmd CLI, including network reconnaissance with Shodan,…
x-osv
CLI for Google OSV database. Query vulnerabilities for packages, scan local projects for vulnerable dependencies. **Dependency**: This is an x-cmd module.…
vulnerability-scanner
Advanced vulnerability analysis principles. OWASP 2025, Supply Chain Security, attack surface mapping, risk prioritization.
hunt-api-misconfig
Hunt API security misconfiguration — mass assignment, JWT attacks, prototype pollution, CORS, HTTP verb tampering. Mass assignment: send {is_admin:true,…
hunt-race-condition
Hunting skill for race condition vulnerabilities. Built from 3 public bug bounty reports. Use when hunting race condition on any target.
hunt-sqli
Hunting skill for sqli vulnerabilities. Built from 8 public bug bounty reports. Use when hunting sqli on any target.
security-arsenal
Security payloads, bypass tables, wordlists, gf pattern names, always-rejected bug list, and conditionally-valid-with-chain table. Use when you need specific…