Skills

Find an Agent Skill for your task. Read the guide and copy the install command.

Updated 10-20 00:13

Security & auditing

7,235 results

src-hunter

A practical SRC / crowdtesting / Bug bounty vulnerability hunting workflow skill. Includes: a 5-phase methodology (intake → recon → enum → hunt → report), 19 attack-class playbooks (SQLi/XSS/RCE/SSRF/IDOR/CSRF/Path Traversal/File Upload/SSTI/XXE/Race/HTTP Smuggling/OAuth/JWT/SAML/GraphQL/Mobile/LLM/DoS), 305 structured payloads, 263 WAF/EDR bypass variants, 2,887 real disclosed HackerOne High/Critical cases, 88,636 WooYun case statistics, a domestic OA / middleware fingerprint library, and banking / telecom industry vertical playbooks. Triggered when the user mentions "src 挖洞 / src 漏洞挖掘 / bug bounty / 众测 / hackerone / 漏洞赏金 / SRC / 任意 X 漏洞 / 渗透测试" or asks "如何挖某个目标 / 怎么测某个 API / 如何绕过 WAF".

Security & auditing47 installs

sigil-scan

Automated security auditing for AI agent code. Scans repos, packages, MCP servers, and installed skills for malicious patterns using eight-phase analysis:…

Security & auditing47 installs

claude-code-security-review-action

AI-powered security review GitHub Action using Claude to analyze code changes for vulnerabilities in pull requests

Security & auditing47 installs

cti-domain-research

Search for threat intelligence, CVEs, malware analysis, breach reports, and security research across 300+ curated security domains (BleepingComputer, Hacker…

Security & auditing47 installs

enterprise-readiness-review

Audit and design enterprise readiness across security review, SSO, SCIM, RBAC, audit logs, admin controls, procurement, legal, privacy, compliance evidence,…

Security & auditing47 installs

moderation-trust-review

Design and audit moderation, trust, safety, policy, review queues, creator or user submissions, appeals, enforcement ladders, transparency, and…

Security & auditing47 installs

security-questionnaire-response-review

Prepare and review security questionnaire responses, trust center answers, vendor risk evidence, enterprise buyer security packets, control mappings, gaps,…

Security & auditing47 installs

flutter-security

Threat-model, audit, or harden Flutter and Dart applications against concrete security and privacy risks involving authorization, secrets, sensitive storage,…

Security & auditing47 installs

supply-chain-risk-auditor

Identifies dependencies at heightened risk of exploitation or takeover. Use when assessing supply chain attack surface, evaluating dependency health, or…

Security & auditing47 installs

adcs-certipy-attack

Active Directory Certificate Services (ADCS) certificate attacks. Use when a CA server, ADCS Web Enrollment, or misconfigured certificate templates are found in the domain. Covers all certificate abuse paths from ESC1-ESC11, the Certipy toolchain, certificate forgery, NTLM relay to ADCS. Discovered…

Security & auditing47 installs

ctf-malware

CTF malware analysis techniques. Use when encountering CTF malware analysis challenges such as obfuscated script analysis, C2 traffic reconstruction, PE/.NET malware sample reverse engineering, custom encryption protocol parsing, YARA rule writing, Shellcode analysis, etc. Covers static analysis (IDA/Ghidra), dynamic debugging (Frida/x64dbg), traffic analysis (Wireshark), memory forensics, etc.

Security & auditing47 installs

evasion-technique-integrate

Evasion technique integration: implant evasion techniques (API obfuscation, string encryption, Syscall, anti-debugging, AMSI bypass, etc.) into existing Loader code. Use when new loading techniques need to be added to an existing Loader, or when an existing Loader is detected and components need to be replaced. First read references/evasion-techniques-db.json…

Security & auditing47 installs

lateral-movement

Lateral movement techniques. Used when acquired credentials (passwords/hashes/keys/tickets) need to be used to move from the current host to other hosts. Covers SSH, RDP, WMI, PSExec, PTH, PTT, DCOM and other techniques. Select the optimal movement method based on the target operating system and the types of available credentials

Security & auditing47 installs

healthcare-audit-logger

This skill should be used when the user asks to "generate audit logs", "create HIPAA audit trail", "log healthcare events", "configure audit logging", "track…

Security & auditing46 installs

hipaa-guardian

This skill should be used when the user asks to "scan for PHI", "detect PII", "HIPAA compliance check", "audit for protected health information", "find…

Security & auditing46 installs

soar

Implements Security Orchestration, Automation, and Response for blue-team incident handling.

Security & auditing46 installs

add-request-protection

Deprecated: use the `arcjet` skill instead. Adds security protection to a server-side route or endpoint — rate limiting, bot detection, email validation, and…

Security & auditing46 installs

law-gdpr-pdpa

Analyze data privacy compliance requirements under GDPR, Taiwan's Personal Data Protection Act (PDPA), and related regulations. Use this skill when the user…

Security & auditing46 installs

harden

Applies NIST/CWE security hardening to Python and Rust code. Use when auditing code for vulnerabilities or proposing concrete security remediations.

Security & auditing46 installs

nestjs-websocket

WebSocket integration for NestJS using Socket.IO. Covers gateways, rooms, authentication guards, exception filters, and Redis adapter for scaling. USE WHEN:…

Security & auditing46 installs

pentest-cve-vulnerability-research-helper

CVE and vulnerability research skill for exact CVE lookup, product/version applicability, exploit maturity, KEV/PoC status, source ranking, contradiction…

Security & auditing46 installs

api-security-testing

API security testing workflow for REST and GraphQL APIs covering authentication, authorization, rate limiting, input validation, and security best practices.

Security & auditing46 installs

re-ios-jb

iOS jailbreak reverse engineering environment: jailbreak detection identification and bypass, tweak analysis and development. Trigger words: jailbreak, tweak, Theos, LLDB remote

Security & auditing46 installs

re-variant

Binary variant/patch comparison: function matching, N-day patch diff, variant tracing and similarity analysis. Trigger words: binary diff, patch diff, N-day, variant analysis, BinDiff, function matching, sample similarity.

Security & auditing46 installs