SuperAPI AI DirectoryFind an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-20 00:13
7,231 results
Internal network information gathering and topology mapping. Use when you have breached the boundary and obtained an internal network foothold. Covers live host discovery, port scanning, service identification, and locating critical infrastructure (domain controllers/databases/mail/file servers). The first step of internal network penetration—see the map clearly before acting
Linux post-exploitation full workflow: information gathering → privilege escalation → credential collection → lateral movement preparation. Use when a Linux shell is obtained via RCE/webshell/SSH. Privilege escalation covers sudo abuse, SUID/SGID, Capabilities, Cron hijacking, PATH hijacking, Docker/LXD groups, NFS no_root_squash, writable…
Professional skills and methodology for SSRF server-side request forgery testing
Audit an Agent Skill (or a repo/plugin of skills) for safety before installing or trusting it. Use whenever the user wants to vet, review, audit, or check…
Firmware extraction and IoT security analysis (RE Level 5) for routers and embedded systems. Use when analyzing IoT firmware, extracting embedded filesystems…
Use when auditing a Rails app for XSS, CSRF, SQLi, IDOR, secrets, or auth bypass. Never print secrets. Trigger words: security, audit, XSS, CSRF, SQL…
Audit code for vulnerabilities: auth flaws, exposed secrets, OWASP risks, and dependency/supply-chain threats.
Validate jwt token validator operations. Auto-activating skill for Security Fundamentals. Triggers on: jwt token validator, jwt token validator Part of the…
Application security principles and OWASP Top 10 for building secure web applications. Use when the user asks to review code for security vulnerabilities,…
Security vulnerability detection and remediation for Python codebases. Identifies SQL injection, hardcoded secrets, weak cryptography, and other OWASP…
LoginID integration. Manage data, records, and automate workflows. Use when the user wants to interact with LoginID data.
Deploys canary files (honeytokens) across file systems to detect ransomware encryption activity in real time. Uses strategically placed decoy documents…
Detects and analyzes Bluetooth Low Energy (BLE) security attacks including sniffing, replay attacks, GATT enumeration abuse, and Man-in-the-Middle…
Implement MITRE ATT&CK coverage mapping to identify detection gaps, prioritize rule development, and measure SOC detection maturity against adversary…
Deploy FIDO2/WebAuthn passwordless authentication using security keys and platform authenticators, covering WebAuthn API integration, FIDO2 server…
Conduct cybersecurity assessments of power grid infrastructure spanning generation, transmission substations, distribution, and EMS control centers, covering…
Develops comprehensive threat actor profiles for APT groups, criminal organizations, and hacktivist collectives by aggregating TTP documentation, historical…
Code review for the current change, before it is pushed. One command runs the security, secret, dependency and lint scanners that fit the changed files, a…
Senior Information Security Manager specializing in ISO 27001 and ISO 27002 implementation for HealthTech and MedTech companies. Provides ISMS implementation,…
Meta's 7-8B specialized moderation model for LLM input/output filtering. 6 safety categories - violence/hate, sexual content, weapons, substances, self-harm,…
Comprehensive SecOps skill for application security, vulnerability management, compliance, and secure development practices. Includes security scanning,…
Picoclaw runtime traffic monitoring baseline for lightweight AI gateway proxy inspection, egress detection, and posture integration.
Implements ASP.NET Core rate limiting middleware for API protection. Covers fixed window, sliding window, token bucket, and concurrency limiters with custom…
CloudBase auth provider configuration and login-readiness guide. This skill should be used when users need to inspect, enable, disable, or configure auth…