pentest-exploit-validation
Proof-driven exploitation with 4-level evidence system, bypass exhaustion protocol, mandatory evidence checklists, and strict…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-19 00:11
Security & auditing
7,217 results
hipaa-audit-helper
Assist with hipaa audit helper operations. Auto-activating skill for Security Advanced. Triggers on: hipaa audit helper, hipaa audit helper Part of the…
vulnerability-chaining
Use when you have multiple findings and need to combine them into realistic end-to-end attack paths — turning several low/medium issues into a single…
coercing-authentication-with-coercer-petitpotam
Trigger machine account authentication with PetitPotam (MS-EFSR) and Coercer (MS-RPRN, MS-DFSNM, MS-FSRVP, MS-EVEN) via Coercer's scan/coerce/fuzz modes,…
performing-agentless-vulnerability-scanning
Configure and execute agentless vulnerability scanning using network protocols, cloud snapshot analysis, and API-based discovery to assess systems without…
performing-privacy-impact-assessment
Automates the Privacy Impact Assessment (PIA) workflow including data flow mapping, privacy risk scoring matrices, GDPR Article 35 DPIA and CCPA/CPRA alignment…
performing-privileged-account-discovery
Discovers and inventories privileged accounts across enterprise infrastructure, including domain admins, local admins, service accounts, database admins, cloud…
pp-1password
Printing Press CLI for 1Password. Agent-safe command layer over the official 1Password CLI and SDK service-account workflows.
strk20-privacy
Router and mental model for STRK20, the Starknet privacy pool. Use when choosing an integration route, answering questions about how STRK20 works (notes,…
propose-security-hardening
Develop evidence-backed structural and architectural security hardening proposals from vulnerability disclosures, supplied findings, incident or assessment…
aig-agent-redteam
When a user requests AI/Agent security assessment, red team exercises, AI security review, prompt injection testing, MCP/Skill/plugin/code package auditing, Agent toolchain abuse testing, or needs to generate a penetration-test-report-like Markdown/HTML, this skill must be used. This skill enables the Agent, from an authorized red team perspective, to become an AI security expert, targeting AI...
iac-security
Performs a security review of Infrastructure as Code templates against the OWASP IaC Security Cheat Sheet, SLSA v1.0, and CIS Benchmarks. Auto-invoked when…
m365-govern-manage
Guidance for governing and managing Microsoft 365 collaboration sprawl — Teams/group lifecycle, sharing and guest access governance, and SharePoint Advanced…
broken authentication testing
This skill should be used when the user asks to "test for broken authentication vulnerabilities", "assess session management security", "perform credential…
php-laravel-audit
Laravel framework feature security audit tool. Performs white-box static auditing of common Laravel framework features such as authentication/CSRF/Session/model filling/Blade rendering, and maps risks to your existing general vulnerability type system (AUTH/CSRF/LOGIC/XSS/CFG, etc.).
shared-security-auth-security
Secrets management, XSS prevention, CSRF protection, dependency scanning, DOMPurify sanitization, CSP headers, CODEOWNERS, HttpOnly cookies
perform-security-review
Performs a security-focused code review by launching multiple specialized agents and a verification agent to ensure comprehensive coverage and accurate…
config-analyzer
Analyze configuration files for validation and best practices
swain-security-check
Run all security scanners against the project and produce a unified, severity-bucketed report. Orchestrates gitleaks (secrets), osv-scanner/trivy (dependency…
security-review
Use when performing security audits, vulnerability assessments, penetration testing, or when asked to find security issues. Use when encountering code that…
dojo-review
Review Dojo code for best practices, common mistakes, security issues, and optimization opportunities. Use when auditing models, systems, tests, or preparing…
code-injection-detector
Detect code injection detector operations. Auto-activating skill for Security Fundamentals. Triggers on: code injection detector, code injection detector Part…
hunting-advanced-persistent-threats
Proactively hunts for Advanced Persistent Threat (APT) activity within enterprise environments using hypothesis-driven searches across endpoint telemetry,…
orderly-api-authentication
Complete authentication guide for Orderly Network - EIP-712 wallet signatures for EVM accounts, Ed25519 message signing for Solana accounts, and Ed25519…