mid-engagement-ir-detection
Methodology for detecting client SOC patches, attacker activity, and security-state changes that occur DURING a red-team engagement — and converting those…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-27 00:15
Security & auditing
7,566 results
report-writing
Bug bounty report writing for H1/Bugcrowd/Intigriti/Immunefi — report templates, human tone guidelines, impact-first writing, CVSS 3.1 scoring, title formula,…
triage-validation
Finding validation before writing any report — 7-Question Gate (all 7 questions), 4 pre-submission gates, always-rejected list, conditionally valid with chain…
web2-recon
Web2 recon pipeline — subdomain enumeration (subfinder, Chaos API, assetfinder), live host discovery (dnsx, httpx), URL crawling (katana, waybackurls, gau),…
web3-audit
Smart contract security audit — 10 DeFi bug classes (accounting desync, access control, incomplete path, off-by-one, oracle, ERC4626, reentrancy, flash loan,…
security-audit
Defensive web and web-application security auditing for local projects, localhost, staging, and authorized public/private websites. Use when the user asks to…
build-cloudflare-access-sso
Use if protecting a subdomain with Cloudflare Access + Google SSO, or locking an origin against Access bypass.
verify-quality-security
Security hardening — assume every external input is hostile. When user input, authentication, data storage, pre-launch review are involved, or "XSS" "SQL injection" "CSRF" "OWASP" are mentioned
apk-reverse
Used when doing Android APK reverse engineering in a CLI environment. Suitable for APK unpacking, Java decompilation, smali modification, repackaging, Frida dynamic Hook, and switching to so/native analysis as needed. Prefer the locally installed jadx, apktool, frida, adb, ida-reverse, and radare2.
auth-e2e
Used when implementing end-to-end authentication. Suitable for the full-stack closed loop of registration → login → Token → permissions → frontend guards. Covers NextAuth / Lucia / Supabase Auth / custom JWT.
auth-permission
Used when designing API authentication, authorization, and permission matrices. Suitable for multi-role systems, tenant isolation, and field-level permissions. Prefer OAuth 2.0 / JWT + RBAC + resource ownership checks.
auth-security-audit
Used during authentication and authorization security audits. Suitable for authorization bypass detection / IDOR / Token security / session management auditing. Combines OWASP Testing Guide + permission matrix verification.
code-security-review
Used during code security review. Suitable for PR review / SAST scanning / manual code audit. Combines the OWASP Code Review Guide + Semgrep + SonarQube.
competition-ad-certificate-abuse
Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for AD CS, certificate templates, enrollment rights, EKUs, SAN controls, PKINIT,…
competition-android-hooking
Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for Android APK hooking, Frida tracing, request-signing recovery, SSL pinning…
competition-browser-persistence
Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for browser cookies, localStorage, sessionStorage, IndexedDB, Cache Storage,…
competition-container-runtime
Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for live container runtime analysis, mounted secrets, sidecars, namespaces, init…
competition-custom-protocol-replay
Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for custom binary or text protocol recovery, handshake reconstruction, framing,…
competition-dpapi-credential-chain
Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for DPAPI masterkeys, vault blobs, browser credential stores, protected secrets,…
competition-file-parser-chain
Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for file uploads, imports, previews, archive extraction, format conversion, parser…
competition-firmware-layout
Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for firmware images, partition tables, boot chains, update packages, extracted…
competition-ios-runtime
Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for IPA runtime analysis, Frida hooks, Objective-C or Swift method tracing,…
competition-jwt-claim-confusion
Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for JWT, JWS, and JWE validation paths, header parsing, key selection, claim…
competition-k8s-control-plane
Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for Kubernetes API analysis, service-account trust, RBAC edges, admission and…