upgrade-and-security-readiness-router
Classify Splunk upgrade, advisory, vulnerability, compliance, and post-change incident requests; preserve the minimum applicability and ownership context; ask…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-19 00:11
Security & auditing
7,224 results
recon-security
Guide authorized external penetration testing from recon through validation and scoped exploitation using free and open-source tools. Use for domain/IP attack…
glab-security
Configure GitLab project security scan profiles with glab. Use when enabling, disabling, or checking GitLab security scan profiles such as SAST, dependency…
security-audit
Use for code security audits or checks before commits/deployments. Trace data flows to find injection, auth, secrets, dependency, cryptography and business…
php-crlf-audit
PHP Web source code CRLF/response splitting audit tool. Identifies user input entering HTTP response headers, analyzes newline/control character filtering and encoding, and outputs severity ratings, PoCs, and remediation recommendations (omission prohibited).
php-expr-audit
PHP Web source code expression injection (non-template) audit tool. Identifies user-controllable expression strings entering the expression engine for evaluation/compilation and ultimately leading to sensitive semantic execution, and outputs exploitability grading, PoC, and remediation recommendations (omission prohibited).
php-filesystem-audit
PHP filesystem operation audit tool. Focuses on the security risks of operations such as mkdir/chmod/chown/unlink/rmdir/link/symlink/readlink/touch/permissions and TOCTOU, providing "exploitability enhancement evidence" for path validation bypass and write chain exploitation (does not replace sink sub-audits such as FILE/UPLOAD/WRITE).
php-ldap-audit
PHP web source code LDAP injection audit tool. Identifies user-controllable data entering LDAP filter/DN construction and being executed by ldap_search/ldap_read, outputs exploitability grading, PoC, and remediation recommendations (omission prohibited).
php-route-mapper
PHP web source code route and parameter mapping analysis tool. Extracts all entry routes and parameter structures from source code, outputs complete request templates and parameter lists (omission prohibited).
php-tpl-audit
PHP Web source code template injection/SSTI audit tool. Identifies template engine rendering points and controllability of template names/expressions, traces to the eval/execution chain, and outputs exploitability grading, PoC, and remediation recommendations (omission prohibited).
pentest
Security scanning via clearwing — source code vulnerability hunting and network pentesting.
raccoon-audit
Rummage through code with curious precision, inspecting every corner for security risks and cleaning up what doesn't belong. Use when auditing security,…
better-auth
This skill should be used when implementing or reviewing Better Auth authorization boundaries in template-ts apps, especially when selecting TRPC protected…
controller-signers
Configure authentication methods for Cartridge Controller including passkeys, social login, and external wallets. Use when implementing user authentication,…
security-ownership-map
Analyze git repositories to build a security ownership topology (people-to-file), compute bus factor and sensitive-code ownership, and export CSV/JSON for…
resemble-detect
Deepfake detection and media safety — detect AI-generated audio, images, video, and text, trace synthesis sources, apply watermarks, verify speaker identity,…
aws-cloudformation-security
Provides AWS CloudFormation patterns for security infrastructure including KMS encryption, Secrets Manager, IAM security, VPC security, ACM certificates,…
asset-access-control
Share or revoke access on ImageKit files, folders, and media collections via DAM MCP. Use when the user asks who can see an asset, to grant…
supabase-security-basics
Apply Supabase security best practices: anon vs service_role key separation, RLS enforcement, policy patterns, JWT verification, and API hardening. Use when…
detecting-process-injection-techniques
Detects and analyzes process injection techniques used by malware including classic DLL injection, process hollowing, APC injection, thread hijacking, and…
performing-nist-csf-maturity-assessment
Conduct a NIST Cybersecurity Framework (CSF) 2.0 maturity assessment across the six core Functions (Govern, Identify, Protect, Detect, Respond, Recover),…
performing-thick-client-application-penetration-test
Conduct a thick client application penetration test to identify insecure local storage, hardcoded credentials, DLL hijacking, memory manipulation, and insecure…
performing-threat-emulation-with-atomic-red-team
Executes Atomic Red Team tests for MITRE ATT&CK technique validation using the atomic-operator Python framework. Loads test definitions from YAML atomics, runs…
prowler-mcp
Creates MCP tools for Prowler MCP Server. Covers BaseTool pattern, model design, and API client usage. Trigger: When working in mcp_server/ on tools…