seam-access-codes
Integrate Seam's lower-level Access Codes API for direct, manual control over smart lock access codes. Create, update, and delete individual time-bound access…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-20 00:13
Security & auditing
7,236 results
opengrep-rule-generator-research
Use when the user wants to research vulnerabilities and create opengrep/semgrep SAST rules, conduct security research on CVEs or CWEs with web search, generate…
binance-auth
Binance API authentication and key management for trading skills. Securely stores API keys, validates permissions, supports testnet vs production environments,…
analyzing-binaries
Reverse engineer compiled binaries, firmware, and mobile app packages using triage, static disassembly, decompilation, and dynamic instrumentation. Use when…
exploiting-deserialization
Identify and exploit insecure deserialization across Java, .NET, PHP, Python, and Ruby — recognizing serialized formats by magic bytes, finding gadget chains…
entra-global-secure-access
Guidance for Microsoft Entra Global Secure Access (GSA) — Microsoft's Security Service Edge (SSE) combining Entra Internet Access (SWG/Secure Web Gateway) and…
passkeys-fido2
Guidance for rolling out passkeys (device-bound and synced) and FIDO2 security keys in Microsoft Entra ID as the primary phishing-resistant authentication…
js-api-extract
JavaScript static analysis to extract hidden API endpoints. Use when the target is an SPA/decoupled frontend-backend architecture, the page uses Vue/React/Angular, or conventional directory scanning yields little. Extract API paths, keys, internal domains, and WebSocket endpoints by analyzing JS bundles. This is the information gathering phase of API penetration testing. After discovering endpoints →…
multi-layer-network
Multi-layer network penetration and tunnel establishment. Use when you need to pivot from the DMZ to the internal network, penetrate across network segments, or when the target is behind multiple layers of firewalls/network partitions. Covers proxy setup (frp/chisel/SSH), multi-hop tunnel chains, port forwarding, and SOCKS proxies. Complete multi-layer attack path from perimeter breach to domain controller
owasp-top-10
OWASP Top 10 security vulnerabilities and mitigations. Use when conducting security audits, implementing security controls, or reviewing code for common…
burp-suite-testing
This skill should be used when the user asks to "intercept HTTP traffic", "modify web requests", "use Burp Suite for testing", "perform web vulnerability…
red-team-tools
This skill should be used when the user asks to "follow red team methodology", "perform bug bounty hunting", "automate reconnaissance", "hunt for XSS…
secure-code-review
Systematically reviews code for SQL injection, XSS, SSRF, broken access control, cryptographic failures, and other common OWASP Top 10 vulnerabilities,…
vulnerability-assessment
Professional skills and methodology for vulnerability assessment
1password
Secrets/API key management via 1Password CLI (op). Vault items, service accounts, secret references
byted-security-skillsscanner
Audit and scan the security of skills. Use when the user wants to perform a security scan on other skills in the workspace.
network_egress_test
Test skill for security scanning
blockchain-auditor
Security audit smart contracts for exploitable vulnerabilities from an unprivileged context. Use when analyzing Solidity contracts, reviewing bytecode, testing…
webhook-security
Implement secure webhook handling with signature verification, replay protection, and idempotency. Use when receiving webhooks from third-party services like…
re-angr
angr symbolic execution: symbolic input, solving. Trigger words: angr, symbolic execution, automatic solving, constraint
re-java
Java bytecode reverse engineering: CFR/JD-GUI, jar unpacking, Java hardening. Trigger words: Java, jar, bytecode, JD-GUI, CFR, class files
re-packer-id
Packer and obfuscator identification: signature/section names/EP/entropy. Trigger words: check packer, packer identification, packer, packer name, UPX
competitor-matrix
Research 5-8 real competitors and build a sourced feature comparison matrix, positioning gaps, threat ranking, and a niche to own. Use when a founder asks who…
csrf-protection-validator
Validate csrf protection validator operations. Auto-activating skill for Security Fundamentals. Triggers on: csrf protection validator, csrf protection…