skill-security-layer
Audits security and configuration of fullstack web applications from code the user pastes in chat. Generates a technical checklist with status ✅/❌/⚠️…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-28 00:17
Security & auditing
7,582 results
financial-audit-trail-guardian
Garda Penjamin Akuntabilitas & Jejak Audit Forensik Keuangan yang mengotomatiskan pencatatan log audit trail 18 kolom granular (baca file/sheet/cell apa, input…
skill-scanner
Scan Clawdbot and MCP skills for malware, spyware, crypto-miners, and malicious code patterns before you install them. Security audit tool that detects data…
skill-vetter
Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope,…
1password
Set up and use 1Password CLI (op). Use when installing the CLI, enabling desktop app integration, signing in (single or multi-account), or…
amazon-inventory-management
FBA inventory planning — replenishment timing, safety stock, IPI score optimization, stranded inventory recovery
amazon-listing-optimization
Amazon seller listing builder and optimizer. Two modes: (A) Create — build a keyword-optimized listing from scratch using a keyword list + product features + AI copywriting, (B) Optimize — audit an existing listing, find keyword gaps, score across 8 dimensions, and rewrite using missing keywords. Integrates with amazon-keyword-research for keyword input. Suitable for…
chatml-injection
prompt injection via ChatML role tokens and "forget above"
download-source
download-then-source RCE pattern
env-wrap
curl piped through env/sudo/exec wrapper to interpreter
eval-var-cmdsub
obfuscated RCE via command-substitution base64 decode into var, eval var
home-cred
credential exfil via $HOME/ and ${HOME}/ forms
home-default
${HOME:-/tmp} default-expansion bypass for rm and cred exfil
interp-path
curl piped to /bin/bash with absolute path
line-cont
line-continuation bypass of curl|bash detection
py-subprocess
python reads API key and exfils via subprocess.run(curl)
r07-components
split-component path assembly defeating taint propagation
r07-indirect
variable-indirection persistence target write
readme-trick
skill that tells agent to see README — README contains prompt injection
reverse-shell
reverse shell via sh/zsh and hostname (non-IP) target
rm-home
rm on home-dir forms with trailing slash / quotes / braces
rm-variants
skill that deletes user data via various rm flag spellings
tee-xargs
RCE via tee >(bash) and xargs bash -c and bash -c $(curl)
xxd
xxd hex decode piped to bash (non-base64 decode-and-exec)