dast-nuclei
Fast, template-based vulnerability scanning using ProjectDiscovery's Nuclei with extensive community templates covering CVEs, OWASP Top 10, misconfigurations,…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-25 00:14
Security & auditing
7,434 results
github-actions
Create and configure GitHub Actions. Use when building custom actions, setting up runners, implementing security practices, or publishing to the marketplace.
centrifugo
Centrifugo real-time messaging server expert for WebSocket PUB/SUB, channel management, JWT authentication, event proxying, and horizontal scaling with…
security-audit
Run OpenAlgo's periodic security audit across backend, frontend, database, cache, routes and dependencies, producing a dated xlsx report. Use for the monthly…
verify
Verify a claim before stating it, and verify a test before trusting it. Use before asserting that a security control holds, that a pattern is safe, that a bug…
sota-confidential-computing
State-of-the-art confidential computing and cryptographic PETs (2026) for BUILDING and AUDITING systems that protect workloads and data in use from the…
sota-detection-engineering
State-of-the-art detection engineering, SOC, threat hunting, and incident response (2026). Use when BUILDING detective controls or SOC capability —…
sota-network-security
State-of-the-art network security as a discipline (2026) for BOTH designing/building secure networks AND auditing segmentation and exposure. Use for zero-trust…
clerk
Clerk authentication CLI - set up auth, pull environment variables. Use when user mentions 'clerk', 'clerk auth', or wants to configure Clerk authentication.
mp-security
Mercado Pago security features. Covers 3D Secure standalone, PCI compliance, Supertoken, Vault, and card tokenization. Use when implementing advanced security…
dependency-management
Analyzes, optimizes, and audits project dependencies for cleanup, circular detection, version conflicts, bundle size, and security vulnerabilities. Use when…
entra-app-registration
Guides Microsoft Entra ID app registration, OAuth 2.0 authentication, and MSAL integration. USE FOR: create app registration, register Azure AD app, configure…
vulnerability-scanner
Advanced vulnerability analysis principles. OWASP 2025, Supply Chain Security, attack surface mapping, risk prioritization.
legal-legal-risk
Analyze corporate legal risks and establish intellectual property strategies. Request 'Assess legal risks', 'Analyze patent infringement risk', 'Check personal information breach risk', 'Analyze IP portfolio', 'Analyze the impact of 2026 statutory changes'. Case law and statutory research, IP portfolio, risk…
cn-genai-filing
Use when asked how to do large-model filing (大模型备案), whether a generative AI service needs filing (备案) or registration (登记), the algorithm filing process, how to add AI-generated content labels, whether we still need to file if we use an already-filed large model, or to prepare a generative AI product for launch in mainland China. Produces the…
llm-guardrails-spec
Specify the safety and reliability guardrails for an LLM feature before it ships. Use when asked to define LLM guardrails, add safety controls to an AI…
threat-model
Threat-model a system or feature to find where it could be attacked, before you build it. Use when asked to threat-model, do a security design review, document…
vuln-triage
Triage a vulnerability or scanner finding — assess real severity, exploitability, and how urgently to fix. Use when asked to triage a CVE, prioritize…
git-skills
Git version control skills, mastering core capabilities such as repository management, commit operations, branch collaboration, and remote synchronization, providing safe operation guidance and troubleshooting
hunting-living-off-the-land-binaries
Detects abuse of Living Off The Land Binaries (LOLBAS) such as certutil, wmic, mshta, regsvr32, and rundll32 in Windows event logs and Sysmon telemetry. Builds…
reverse-engineer-anything
Reverse engineer native, managed, Electron/JavaScript, packaged, firmware, and browser targets with REA. Use shipped-artifact or requested runtime evidence to…
audit-code-security
Perform read-only security audits, vulnerability assessments, or threat-focused reviews of diffs, pull requests, code paths, or explicitly scoped repositories…
jira-cli
Use when interacting with Jira through ankitpokhrel/jira-cli (`jira`), including setup, authentication, issue queries, issue creation or edits, transitions,…
from-assistant-double-agent
Security audit and hardening for personalized LLM-based agents against prompt injection, tool poisoning, and memory attacks. Use when: 'audit my agent for…