web-cache-deception
Web cache deception and poisoning playbook. Use when CDN, reverse proxy, or application caching may serve sensitive authenticated content to other users due to…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-28 00:17
Security & auditing
7,578 results
websocket-security
WebSocket handshake, CSWSH, tooling (wsrepl, ws-harness, Burp), and common flaws. Use when apps use real-time channels, chat, notifications, or WS-backed APIs.
windows-av-evasion
AV/EDR evasion playbook for Windows. Use when bypassing AMSI, ETW, .NET assembly detection, shellcode execution, process injection, API hooking, and…
xslt-injection
XSLT injection testing: processor fingerprinting, XXE and document() SSRF, EXSLT write primitives, PHP/Java/.NET extension RCE surfaces. Use when…
secops-hunt
Expert guidance for proactive threat hunting. Use this when the user asks to "hunt" for threads, IOCs, or specific TTPs.
secops-setup-gemini
Helps the user configure the Google SecOps Remote MCP Server for Gemini CLI. Use this when the user asks to "set up" or "configure" the security tools for…
secops-triage
Expert guidance for security alert triage. Use this when the user asks to "triage" an alert or case.
token-risk-scanner
Detects honeypot tokens and malicious trading behaviors using GoPlus MCP. Use when analyzing token contracts for investment risks, checking if a token is safe…
hack23-information-security-policy
Hack23 Information Security Policy integration for SDLC — developer-facing mapping of ISP requirements to daily engineering activities, tooling, and evidence
mcp-gateway-security
MCP gateway security patterns, token management, request validation, and audit logging for parliamentary data access
god-harden
Security pass on the current code, an OWASP Top 10 walkthrough scaled to the product plus dependency and secret checks, with findings fixed or tracked by…
audit-mac-app
This skill should be used when the user asks to audit a Mac app, check if an app is safe, or scan for malware. Focuses on apps requesting sensitive permissions.
permission-system
Design and implement a complete authorization system: RBAC roles, menu/page/button-level function permissions, and row-level and column-level data permissions,…
security-headers-check
Grade a site's HTTP security headers with curl against the OWASP Secure Headers Project: CSP, HSTS, frame protection, nosniff, Referrer-Policy,…
iron-shield
Use Iron Shield when a public-facing surface, endpoint, or interface needs durable, ongoing protection against repeated attacks on the same vector. Unlike a…
killer-eye
Use Killer Eye for tripwires, passive monitors, and sightline-based alerts that should fire only when the trigger is real.
cyber-threat-hunting
Conducts hypothesis-driven, evidence-preserving threat hunts with bounded negative conclusions and telemetry-gap handling. Use for hunt hypotheses, scoped…
security-review
Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features.…
anti-fable
Transform dense technical, scientific, cybersecurity, computing, network, or life-science research questions into clear source-domain-neutral fables for…
doctor
Check whether local SEO Skills CLI authentication and defaults are usable; use it before reports when login, scopes, or saved configuration may be incomplete.
cordon-install
Install Cordon, a deterministic layer between untrusted content and agent actions, and verify that the harness actually calls it. Cordon strips the hidden…
security-audit
Security guidance and vulnerability review for codebases, APIs, services, CLI tools, libraries, and daemons. Use for security questions, focused reviews,…
autobahn
Carve guardrail-adjacent items out of scope with safe alternatives before risk-adjacent work starts, then run the safe remainder at full strength in a fresh…
security-audit
Security guidance and vulnerability review for codebases, APIs, services, CLI tools, libraries, and daemons. Use for security questions, focused reviews,…