circleci-cli
Day-to-day CircleCI from the terminal with the circleci CLI — authenticate, validate config before you commit, watch the run your push triggered, review…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-19 00:11
Security & auditing
7,224 results
exploit-file-download
Arbitrary file download and Local File Inclusion (LFI) vulnerability detection and exploitation tool. Use tools such as curl, ffuf, wget to test file download vulnerabilities, supporting path traversal, wrapper exploitation, and sensitive file reading. Use this skill when users need to test file download functionality, detect LFI vulnerabilities, or read sensitive server files.
exploit-lfi
Local File Inclusion (LFI) vulnerability detection and exploitation tool. Use tools such as curl and ffuf to test LFI vulnerabilities, supporting path traversal, PHP wrapper exploitation, log poisoning RCE, and sensitive file reading. Use this skill when users need to detect LFI vulnerabilities or exploit file inclusion vulnerabilities to read server files.
regulatory-review-checklist
Step-by-step checklist for routing healthcare marketing assets through legal, medical, and privacy approvals.
db-security-access
Audit access control and data protection — Row-Level Security state, PII handling, encryption at-rest and in-transit (TLS / sslmode), and SQL-injection…
mitm-find-insecure
Find insecure configurations in HTTP traffic. Use when user asks about security headers, cookie security, CORS issues, or transport security.
pentest-ctf-binary
Binary exploitation (Pwn) and reverse engineering tools for CTF challenges and software analysis.
exabeam
Exabeam integration. Manage data, records, and automate workflows. Use when the user wants to interact with Exabeam data.
keycloak
Keycloak integration. Manage data, records, and automate workflows. Use when the user wants to interact with Keycloak data.
implementing-network-segmentation-with-firewall-zones
Designs and implements network segmentation using firewall security zones, VLANs, inter-zone ACLs, and workload-level microsegmentation to restrict east-west…
performing-authenticated-scan-with-openvas
Configure and execute authenticated (credentialed) vulnerability scans using OpenVAS/Greenbone Vulnerability Management (GVM) with SSH, SMB, or ESXi…
performing-binary-exploitation-analysis
Analyze ELF binaries for memory-corruption vulnerabilities and build proof-of-concept exploits using pwntools, checksec, and ROPgadget for buffer overflows and…
nuke-on-rails
Full health and security audit for Rails apps, the review a principal engineer would do. Runs rubycritic, Brakeman, bundler-audit and ruby_audit, triages every…
threat-modeling-expert
Expert in threat modeling methodologies, security architecture review, and risk assessment. Masters STRIDE, PASTA, attack trees, and security requirement…
azure-ai-contentsafety-py
Azure AI Content Safety SDK for Python. Use for detecting harmful content in text and images with multi-severity classification.
php-audit-pipeline
PHP Web full-chain white-box code security audit pipeline (multi-file orchestration version). As the master orchestration reference, call each sub-audit skill by Sink type (`php-route-mapper/php-auth-audit/php-route-tracer/php-*-audit`), and reuse the unified output and grading standards.
php-crypto-audit
PHP Web source code encryption and key security audit tool. Identifies weak hashing/weak encryption/hardcoded keys/signature verification flaws, and outputs severity ratings, PoCs, and remediation recommendations (omission prohibited).
php-file-read-audit
PHP Web source code arbitrary file read/path traversal audit tool. Identifies file read Sinks, traces path sources and validation logic, and outputs exploitability grading, PoC, and remediation recommendations (omission prohibited).
php-file-write-audit
PHP Web source code arbitrary file write audit tool. Identifies chains where user-controllable data reaches a write Sink, traces arbitrary destination writes/path traversal to write, and evaluates post-write executability (omission prohibited).
php-nosql-audit
PHP Web source code NoSQL injection audit tool. Identifies user input entering MongoDB/DocumentDB query construction, analyzes whether operator injection exists ($gt/$ne/$where, etc.), and outputs severity rating, PoC, and remediation recommendations (omission prohibited).
php-session-cookie-audit
PHP Web source code session and Cookie security audit tool. Identifies session fixation, insecure Cookie flags, JWT validation flaws, and remember-login risks, and outputs severity ratings, PoCs, and remediation recommendations (omission prohibited).
php-xxe-audit
PHP Web source code XXE audit tool. Identifies XML parsing points and entity handling configurations, traces XML input sources and echo, and outputs exploitability grading, PoC, and remediation recommendations (omission prohibited).
iso27001-controls
ISO 27001 Expert. Use for ISMS, security controls and compliance implementation.
server-security
Server security audit and hardening. Scan for security issues such as SSH, firewalls, port exposure, file permissions, and brute-force attacks, generate reports, and provide one-click remediation. Use when the user says server security, security audit, security check, or security hardening.