competition-kernel-container-escape
Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for kernel attack surface, namespace and cgroup boundaries, container isolation…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-27 00:15
Security & auditing
7,567 results
competition-lsass-ticket-material
Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for LSASS-resident secrets, Windows logon sessions, Kerberos ticket caches,…
competition-oauth-oidc-chain
Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for OAuth, OIDC, redirect flows, state or nonce handling, PKCE, token exchange,…
competition-prompt-injection
Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for prompt-injection, retrieval poisoning, memory contamination, planner drift,…
competition-relay-coercion-chain
Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for forced-auth coercion, relay chains, target selection, NTLM or related…
competition-stego-media
Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for image, audio, video, document, and container steganography. Use when the user…
competition-supply-chain
Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for CI/CD, registry, dependency drift, artifact provenance, image build, release…
dependency-audit
Use during dependency security audits. Covers npm audit / Snyk / Trivy / secret scanning / container scanning.
reverse-engineering
Provides reverse engineering techniques. Use when the main job is to understand how a compiled, obfuscated, packed, or virtualized target works before…
security-report
Used when outputting security reports. Suitable for security review reports / vulnerability summaries / risk levels / remediation tracking. Integrates CVSS scoring + remediation recommendations + verification confirmation.
supply-chain-security
Used for supply chain security. Applicable to dependency vulnerability scanning / image security / CI poisoning protection / SBOM. Integrates SLSA + Sigstore + Snyk + Trivy.
threat-modeling
Used during threat modeling. Suitable for security design reviews of new features / new systems. Integrates STRIDE + Attack Tree + Microsoft SDL.
web-vulnerability
Used during Web vulnerability detection. Applicable to OWASP Top 10 detection / XSS / SQLi / SSRF / CSRF. Integrates OWASP Testing Guide + Burp Suite + ZAP.
binary-re
This skill should be used when analyzing binaries, executables, or bytecode to understand what they do or how they work. Triggers on "binary", "executable",…
governance
Identify sensitive data, extract ETL lineage, and generate least-privilege IAM and RBAC policies for data lakes.
lakehouse-governance
Identify sensitive data, extract ETL lineage, and generate least-privilege IAM and RBAC policies for data lakes.
order-risk-report
Read-only: lists orders by fraud risk level with indicator details for building a manual review queue.
memory-publication-auditor
Audit private skills, memories, notes, or operational logs before turning them into public skills, templates, docs, or reusable patterns. Use when scanning…
prompt-injection-detector
Prompt injection detection and prevention for secure LLM applications
Safety System Skill
Robot safety system design and validation for industrial and collaborative robots
skill-security-auditor
Security audit and vulnerability scanner for AI agent skills before installation. Use when: (1) evaluating a skill from an untrusted source, (2) auditing a…
skill-vetter
Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope,…
abel-auth
Use when Abel auth is missing, expired, invalid, or needs initialization.
secure-my-app
Find what a stranger can take from your app. Then close it and prove it closed. Every finding carries the command that shows the hole and the output it…