security-audit
Security auditing and vulnerability assessment specialist. Use when conducting security reviews, analyzing code for vulnerabilities, performing OWASP…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-20 00:13
Security & auditing
7,234 results
api-security-testing
Professional skills and methodology for API security testing
blue-team-root
Fundamental blue team skills for detecting threats, responding to incidents, and defending systems in cybersecurity.
web-security-audit
Complete black-box pentest-style web security audit. Runs 70+ tests against any URL (OWASP Top 10, CVEs, CORS, headers, databases, auth, rate…
anti-fraud
Multi-layered anti-fraud and bot detection system for registration flows. Use when implementing: (1) Registration form security, (2) Bot detection and shadow…
re-analyze
The sole entry point for reverse engineering analysis. Workflow: environment probing (probe.sh) → preference inquiry (analysis goal/decompiler/depth/report/platform) → task identification (triage.md) → orchestration and invocation of category gateways. Trigger words: analyze, reverse engineering, reverse, RE, help me look at this file, what does this sample do, unpacking, find keys, crack, firmware analysis, malware analysis, analyze this…
re-imports
Import/export tables and library fingerprints: IAT/EAT, DLL/so fingerprints, FLIRT approach. Trigger words: import table, IAT, library fingerprint, which libraries are linked
security scanner
Scan code and infrastructure for security vulnerabilities and compliance issues
solo-legal
Use when "privacy policy", "terms of service", "legal pages", "GDPR", "CCPA", "app store legal", or project needs compliance documents. Do NOT use for NDA or…
teleport-investigate
Use when investigating identity or resource activity in a Teleport cluster. Covers `tctl investigate` filter semantics, fast facet-only exploration, custom…
stride-analysis-patterns
Apply STRIDE methodology to systematically identify threats. Use when analyzing system security, conducting threat modeling sessions, or creating security…
better-auth
Production-ready authentication framework for TypeScript with first-class Cloudflare D1 support. Use this skill when building auth systems as a self-hosted…
forescout
Forescout integration. Manage data, records, and automate workflows. Use when the user wants to interact with Forescout data.
idnow
IDnow integration. Manage data, records, and automate workflows. Use when the user wants to interact with IDnow data.
sonatype
Sonatype integration. Manage data, records, and automate workflows. Use when the user wants to interact with Sonatype data.
detecting-golden-ticket-forgery
Detect Kerberos Golden Ticket forgery (e.g. Mimikatz-forged tickets) by analyzing Windows Event ID 4769 for RC4 encryption downgrades (0x17), abnormal ticket…
detecting-living-off-the-land-attacks
Detect abuse of legitimate Windows binaries (LOLBins) used for living off the land attacks. Monitors process creation, command-line arguments, and parent-child…
hunting-for-shadow-copy-deletion
Runs a hypothesis-driven threat hunt for Volume Shadow Copy deletion (T1490) by querying SIEM/EDR telemetry for vssadmin, wmic shadowcopy, and PowerShell…
hunting-for-suspicious-scheduled-tasks
Hunts for adversary persistence and execution via Windows scheduled tasks (T1053.005) by analyzing Security Event ID 4698 task-creation events, suspicious task…
implementing-container-network-policies-with-calico
Uses Calico's own policy CRDs beyond the upstream Kubernetes API - GlobalNetworkPolicy, HostEndpoint, NetworkSet, policy tiers, and DNS-based egress rules -…
implementing-digital-signatures-with-ed25519
Implements digital signatures using the Ed25519 algorithm (Curve25519), covering key-pair generation, signing, signature verification, and security tradeoffs…
implementing-google-workspace-admin-security
Hardens a Google Workspace tenant via Admin Console configuration: phishing-resistant MFA enforcement, DLP policies, email authentication (SPF/DKIM/DMARC),…
implementing-hardware-security-key-authentication
Builds a FIDO2/WebAuthn relying party server with the python-fido2 library, covering registration and authentication ceremonies, YubiKey enrollment, resident…
implementing-network-traffic-analysis-with-arkime
Queries Arkime (formerly Moloch) full packet capture via its API to search sessions, download PCAPs, detect C2 beaconing through connection interval/jitter…