pentest-input-protocol-manipulation
Input validation and protocol manipulation assessment for injection, parser differential testing, request smuggling, method tampering, header confusion,…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-19 00:11
Security & auditing
7,227 results
endor-setup
Use when user asks to setup endorctl, install endorctl, run endorctl scan, scan for vulnerabilities, run endor scan or run Endor Labs scan or when any endorctl…
constraints-extractor
Extract explicit and implicit constraints (compliance, security, hosting, tooling, stakeholder, scope, and external-dependency boundaries) from a project's…
secret-scanner
Scan secret scanner operations. Auto-activating skill for Security Fundamentals. Triggers on: secret scanner, secret scanner Part of the Security Fundamentals…
kafka-security-audit
Audit Kafka security configuration across the codebase and live cluster using the Lenses MCP server. Checks authentication (SASL), encryption (SSL/TLS),…
security-threat-model
Repository-grounded threat modeling that enumerates trust boundaries, assets, attacker capabilities, abuse paths, and mitigations, and writes a concise…
twingate
Twingate integration. Manage data, records, and automate workflows. Use when the user wants to interact with Twingate data.
wallarm
Wallarm integration. Manage data, records, and automate workflows. Use when the user wants to interact with Wallarm data.
clerk-setup
Add Clerk authentication to any project by following the official quickstart guides.
clerk-swift
Implement Clerk authentication for native Swift and iOS apps using ClerkKit and ClerkKitUI source-guided patterns. Use for prebuilt AuthView or custom native…
rails-security-review
Performs security audits and vulnerability assessments on Ruby on Rails application code. Use when reviewing Rails code for security risks, assessing…
authentication-testing
Use when testing login, sessions, password reset, OAuth/OIDC/SAML/SSO, MFA, and JWTs for weaknesses that lead to account takeover — credential attacks, session…
security
Security auditing for code vulnerabilities (OWASP Top 10, XSS, SQL injection) and dependency scanning (pnpm audit, Snyk). Use when handling user input, adding…
detecting-golden-ticket-attacks-in-kerberos-logs
Detect Golden Ticket attacks in Active Directory using Splunk and KQL queries against domain controller event logs, looking for Kerberos TGT anomalies such as…
detecting-kerberoasting-attacks
Detect Kerberoasting attacks by monitoring for anomalous Kerberos TGS requests (Event ID 4769) targeting service accounts with SPNs, which attackers request…
performing-asset-criticality-scoring-for-vulns
Build a multi-factor asset criticality scoring model—incorporating data sensitivity, business function dependency, regulatory scope, network exposure, and…
performing-yara-rule-development-for-detection
Develops precise YARA and YARA-X rules for malware detection by identifying unique strings, byte sequences, PE header traits, and behavioral indicators in…
java-xxe-audit
Java Web source code XXE (XML External Entity) vulnerability audit tool. Identify all XML parsing operations from the source code and detect external entity injection vulnerabilities. Suitable for: (1) identifying XML parser types and implementation methods, (2) discovering XXE injection vulnerabilities, (3) checking the configuration status of external entity protection, (4) auditing XML input sources and echo logic. Supports...
instance-security
Harden a ServiceNow instance — password complexity, session timeout, MFA enforcement, input sanitization for XSS/injection, security properties, syslog events,…
security-operations
Build ServiceNow Security Operations — sn_si_incident with NIST-aligned state transitions, sn_vul_vulnerable_item with CVSS/risk scoring, sn_ti_indicator IOC…
dast-nuclei
Run Nuclei template-based vulnerability scanner. Uses 8000+ community templates to detect CVEs, misconfigurations, exposures, and default credentials on web…
security-ux
Design security-conscious interfaces that protect users without frustrating them. Use when the user asks about MFA, password UX, breach notifications, trust…
owasp
OWASP security guidelines and Top 10 vulnerabilities USE WHEN: user mentions "OWASP", "security audit", "vulnerability scan", asks about "injection", "XSS",…
firewall-appliance
Deprecated name. Use opnsense-pfsense; load this notice only when firewall-appliance is explicitly requested.