gitleaks
Use for repository and filesystem secret discovery during authorized pentests. Trigger on code review, repository hygiene assessment, and validating whether…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-27 00:15
Security & auditing
7,492 results
kubectl
Use for Kubernetes control-plane and workload validation during authorized pentests. Trigger on cluster inventory, RBAC checks, namespace review, pod exposure…
netcat
Use for basic TCP or UDP connectivity, banner grabbing, listener setup, and controlled data-path validation during authorized pentests. Trigger on socket…
nmap
Use for network discovery, service enumeration, exposure verification, and narrow retesting during authorized pentests. Trigger on identifying live hosts, open…
snmpwalk
Use for SNMP enumeration during authorized pentests. Trigger on network device discovery, management plane review, community string validation, and…
socat
Use for tightly scoped socket relays, port forwarding, and protocol bridging during authorized pentests. Trigger on approved path testing, local-to-remote…
trivy
Use for container, filesystem, and IaC review during authorized pentests. Trigger on image assessment, dependency and configuration review, Kubernetes manifest…
wireshark
Use for packet-level protocol review, detection visibility checks, and troubleshooting during authorized pentests. Trigger on validating network observations,…
hydra
Use for tightly scoped credential validation during authorized pentests. Trigger on approved login checks, low-rate credential hypothesis testing, and…
whatweb
Use for web technology fingerprinting during authorized pentests. Trigger on identifying frameworks, middleware, CMS signatures, version hints, and…
eng-security-safety
Apply proactive threat modeling, least-privilege design, and safety guardrails before delivering any code or infrastructure change.
brotli-checker
Check whether an app or project needs a Brotli security update for CVE-2026-111497, explain the result in plain language, and give practical next steps. Find…
report
Generate professional compliance reports (Markdown, HTML, PDF) from the latest scan data.
truefoundry-secrets
Manages TrueFoundry secret groups and secrets. Handles listing, creating, updating, and deleting secret groups and individual key-value secrets.
passwords
Set up unattended 1Password access on a Mac or sign in to websites and apps without repeated human approvals. Use for new-device setup, passwords,…
recon-cafes
Sector-specific recon for coffee shop, cafe, and tea house websites — typically WordPress on shared hosting with online ordering for pickup/delivery,…
recon-carwashes
Sector-specific recon for car wash and auto detailing company websites — typically WordPress on shared hosting with membership plans, pricing menus,…
recon-landscaping
Sector-specific recon for landscaping company websites — lawn care, tree service, irrigation, hardscaping, snow removal. Typically WordPress on shared hosting…
recon-mattress-stores
Sector-specific recon for mattress retailer and bedding store websites — common e-commerce platforms (Shopify, WooCommerce, BigCommerce), financing integration…
recon-moving-companies
Sector-specific recon for moving company, relocation service, and logistics websites — typically WordPress on shared hosting with online booking, quote request…
recon-pools
Sector-specific recon for pool service and pool construction company websites — pool cleaning, repair, installation, hot tubs. Typically WordPress on shared…
worker
Worker cluster reference — tool inventory, SSH access patterns, and execution environment for recon, binary analysis, and anonymous operations
security-and-hardening
OWASP Top 10 prevention, auth patterns, secrets management, dependency auditing, boundary validation. Use when handling user input, auth, or external…
skill-01-wallet-management
Manages Web3 wallets including HD derivation, ERC-4337 account abstraction, multi-sig (Safe), and social recovery. Use when creating wallets, signing…