dym-cti-expert-reports-and-iocs
Handoff: HTML reports, IOC/STIX bundles, DOCX, and redacted copies. Turn a case into material people can read and tools can ingest, without extra installation for the default…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-28 00:17
Security & auditing
7,605 results
dym-cti-expert-safety-gates
Safety rails: what gets BLOCKED, what gets ASKED, what stays silent. so you are not surprised mid-case, and more importantly — so you do not disable the wrong rail.
dym-scientific-agent-skills-tham-dinh-truoc-khi-cai
Vet a skill BEFORE installing. Agent Skill is instructions that your agent will follow — it can tell the agent to run arbitrary code, install packages, call the network, modify files.…
gpt55-critical-auditor
Conducts a full-system adversarial audit of agent plugins, skills, and orchestration against enforced runtime contracts using deep reasoning (GPT5.5-equivalent…
audit-plugin-l5
Triggers the L5 Red Team Sub-Agent to rigorously audit a plugin against the 39-point L4 pattern matrix.
daily-operations
Use for daily chores in dotnet-inspect; establish release-candidate readiness, then inspect main CI, staging, performance, runtime-pin, security, dependency,…
baby-compliance-privacy
Designs compliance management and data privacy transparency frameworks for baby and maternity product stores (e.g. baby skincare, car seats). Use when the user…
twilio-security-hardening
Secure Twilio applications against common attacks. Covers credential management (API keys vs auth tokens), request validation (webhook signature verification),…
sast-semgrep
Static application security testing (SAST) using Semgrep for vulnerability detection, security code review, and secure coding guidance with OWASP and CWE…
sca-trivy
Software Composition Analysis (SCA) and container vulnerability scanning using Aqua Trivy for identifying CVE vulnerabilities in dependencies, container…
ddd-decide
Use when a decision is architecturally consequential, security-sensitive, expensive to reverse, supported by multiple plausible methodologies, or based on…
ddd-refute
Use when T3 claims exist in a change (Assurance profile), when the Assurance Review gate fires, or when a high-impact decision needs adversarial validation.
Custom Workers
Create and run custom background analysis workers with composable phases. Use when you need automated code analysis, security scanning, pattern learning, or…
V3 Security Overhaul
Complete security architecture overhaul for claude-flow v3. Addresses critical CVEs (CVE-1, CVE-2, CVE-3) and implements secure-by-default patterns. Use for…
agent-abuse-pentest
Authorized testing of AI-agent + tool misuse paths for an MCP system. Covers direct and indirect prompt injection (via docs/issues/PRs/READMEs/tool…
connected-mcp-pentest
Authorized security testing of an MCP server ALREADY CONNECTED to your agent via mcp.json / settings (Claude Code, Cursor, Codex) — remote or local, any…
security-report-writer
Turns raw pentest notes for a remote OAuth MCP system into a professional, internal security report with severity ratings, remediation, and regression tests.…
binary-audit
Comprehensive binary security assessment including hardening, attack surface, and vulnerability analysis. Use when analyzing an ELF or PE binary.
security-review
Run a multi-pass security review over the current diff using parallel specialist subagents focused on injection, authn/authz, secrets, supply-chain, and…
authentication-xsuaa
Invoke this skill to set up XSUAA authentication and Application Router. Detects <auth-method>FORM</auth-method> in web.xml, security-constraint definitions,…
modular-sso
Implements complete SSO and authentication flows using Scalekit. Handles modular SSO, IdP-initiated login, user session management, and enterprise customer…
add-api-auth
Adds API key or client-credentials auth so an agent can protect an API. Use when the user wants an API key or client credentials. It does not put OAuth 2.1 on…
implement-access-control
Implements roles and permissions at a route so an agent can protect an endpoint. Use when the user wants roles, permissions, or RBAC. It does not write SaaSKit…
implement-saaskit
Implements SaaSKit login so an agent can add a login route, a callback, session cookies, and logout. Use when the user wants to add SaaSKit login, a callback,…