threat-model
Structured threat modeling producing threat catalog with STRIDE categorization, DREAD risk scores, and prioritized mitigation roadmap
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-19 00:11
Security & auditing
7,224 results
php-config-audit
PHP Web configuration security audit tool. Identifies CORS/error exposure/debug switches/security headers/dangerous runtime switches, etc., and outputs severity ratings, exploitability analysis, PoC, and remediation recommendations (omission prohibited).
php-logging-audit
PHP Web security logging and monitoring audit tool. Identifies missing security events, sensitive information written to logs, log injection/forging risks, and defects in the logging and alerting chain, and outputs exploitability grading, observable PoC, and remediation recommendations (omission is prohibited).
php-open-redirect-audit
PHP web source code open redirect audit tool. Identify user-controllable redirect destinations entering header Location/redirect functions, analyze validation and allowlists, and output severity ratings, PoCs, and remediation recommendations (omission prohibited).
security-auditor
Continuous security vulnerability scanning for OWASP Top 10, common vulnerabilities, and insecure patterns. Use when reviewing code, before deployments, or on…
auth0-dpop
Use when adding DPoP (Demonstrating Proof-of-Possession) token binding to protect API calls with device-bound, sender-constrained access tokens that cannot be…
gathering-security
The drum sounds. Spider, Raccoon, and Turtle gather for complete security work. Use when implementing auth, auditing security, or hardening code end-to-end.
security-scan
Comprehensive security and compliance scanning for AWS CDK projects. Use when running security audits, checking license compliance, scanning container…
results-storage
SQLite-based persistent storage and reporting system for penetration testing results. Use this skill when user needs to store scan results, query…
secrets-with-git-crypt
Manages encryption and decryption of repository secrets (such as .env or *.tfvars) using git-crypt, keeping credentials secure with parallel encrypted files.…
encrypted-maps
Add access-controlled, end-to-end encrypted key-value storage to a canister with the vetKeys EncryptedMaps library (ic-vetkeys for Rust and Motoko backends,…
arch-security-review
[Architecture] Use when reviewing code for security vulnerabilities, implementing authorization, or ensuring data protection.
k8s-security
Use when securing Kubernetes clusters, implementing network policies, configuring RBAC, pod security standards, or asking about "Kubernetes security",…
laravel-auth
Use when implementing user authentication, API tokens, social login, or authorization in Laravel 13.
pentest-secrets-exposure
Discover hardcoded credentials, leaked API keys, exposed configuration files, sensitive data in artifacts, and information disclosure via error handling.
network-security-scanner
Scan network security scanner operations. Auto-activating skill for Security Advanced. Triggers on: network security scanner, network security scanner Part of…
scan-cyber-threats
Retrieve active cyber-threat intelligence — malware IOCs, C2 infrastructure, and CISA known-exploited vulnerabilities — filterable by type, source, and…
configure-security
Security scanning: dependency audits, SAST, secrets detection. Use when setting up Dependabot, CodeQL, or TruffleHog in CI, or creating a SECURITY.md policy.
performing-endpoint-vulnerability-remediation
Performs vulnerability remediation on endpoints by prioritizing CVEs based on risk scoring, deploying patches, applying configuration changes, and validating…
vulnerability-writeup
Turn vulnerability notes, disclosure reports, PoCs, source code, or Codex Security findings into self-contained, sceptically validated, natural-sounding…
wireless-security-wifi-pentest
Wireless security penetration testing with aircrack-ng, WEP/WPA/WPA2/WPA3 attacks, and 802.11 exploitation
managing-vulnerabilities
Implementing multi-layer security scanning (container, SAST, DAST, SCA, secrets), SBOM generation, and risk-based vulnerability prioritization in CI/CD…
secrets-management
Manages API keys, credentials, and sensitive configuration using secrets.json patterns with environment variable fallbacks. Use when working with API keys,…
pentest-web-application-logic-mapper
Web application logic mapper for spidering, crawling, hidden API discovery, workflow mapping, state-machine analysis, route relationships, and handoff targets…