burp-suite
Use for manual web and API testing, authenticated workflow review, request replay, and controlled validation during authorized pentests. Trigger on session…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-29 00:09
Security & auditing
7,617 results
dirsearch
Use for web path and file enumeration during authorized pentests. Trigger on hidden endpoint discovery, lightweight content enumeration, and repeatable route…
dnsrecon
Use for DNS enumeration during authorized pentests. Trigger on zone review, host discovery, record correlation, and building a more complete DNS-backed…
feroxbuster
Use for recursive web content discovery during authorized pentests. Trigger on hidden directory discovery, route enumeration, controlled recursion, and fast…
gcloud
Use for GCP control-plane validation during authorized pentests. Trigger on credentialed Google Cloud review, project and IAM scope checks, storage exposure…
gowitness
Use for visual triage of web assets, login portals, and exposed interfaces during authorized pentests. Trigger on screenshot capture, human review of web…
httpx
Use for HTTP service probing, web asset confirmation, technology hints, and endpoint inventory during authorized pentests. Trigger on checking which hosts…
kube-bench
Use for Kubernetes CIS benchmark review during authorized pentests. Trigger on cluster hardening assessment, node and control-plane configuration review, and…
kube-hunter
Use for Kubernetes exposure and attack-surface review during authorized pentests. Trigger on cluster endpoint discovery, Kubernetes service exposure analysis,…
nessus
Use for credentialed or non-credentialed vulnerability scanning during authorized pentests. Trigger on baseline exposure review, broad host hygiene assessment,…
openvas
Use for vulnerability scanning and baseline exposure review during authorized pentests. Trigger on broad host hygiene assessment, scanner-led coverage of…
owasp-zap
Use for OWASP-focused web and API testing during authorized pentests. Trigger on proxy-based web review, automated or manual scan support, baseline OWASP Top…
sqlmap
Use for controlled SQL injection validation during authorized web and API assessments. Trigger on manually triaged injection candidates, request replay…
theharvester
Use for passive OSINT collection during authorized pentests. Trigger on email, domain, subdomain, and public-source metadata gathering to seed recon without…
trufflehog
Use for repository, filesystem, and remote source secret discovery during authorized pentests. Trigger on secret hunting, token exposure review, and validating…
pentest-attack-patterns
Reference document containing common attack patterns, payloads, and exploitation techniques for penetration testing including exploit research methodology, web…
certipy
Use for Active Directory Certificate Services review during authorized pentests. Trigger on AD CS enumeration, certificate template analysis, enrollment path…
gobuster
Use for directory, DNS, and virtual host enumeration during authorized pentests. Trigger on hidden content discovery, vhost review, DNS brute-force within…
proxychains
Use for routing approved tools through a bounded proxy path during authorized pentests. Trigger on approved pivot-path testing, segmented service validation,…
testssl-sh
Use for TLS and certificate posture review during authorized pentests. Trigger on checking protocol support, cipher posture, certificate hygiene, and…
wpscan
Use for WordPress-specific assessment during authorized pentests. Trigger on confirmed WordPress installations, plugin and theme exposure review, version…
skill-security-audit
This skill should be used when evaluating the security of a ClawHub skill before installation. It performs comprehensive security risk assessment on skill…
openaudit
Run a smart contract source code through several agent skill-based auditing pipelines
discover-ai
Scan cloud accounts and GitHub repos to discover AI/ML services and build an AI system inventory.