Best security skills, page 55

Coordinate an authorized software-supply-chain audit from dependency resolution through build, artifact, release, deployment, and runtime trust.

cyberful/cyberful

Operate Cyberful as an authorized application-security control room.

cyberful/cyberful

Operate Ghidra headless analysis, radare2, platform binary utilities, decompilers, and targeted dynamic evidence for advanced native and bytecode security review.

cyberful/cyberful

Operate Prowler, Cloudsplaining, cloud CLIs, policy documents, and resource evidence for advanced AWS, Azure, GCP, and Kubernetes-adjacent posture assessment.

cyberful/cyberful

Operate Cyberful's pinned Foundry toolchain and engagement-owned Anvil lab for authorized EVM smart-contract bug bounty work.

cyberful/cyberful

Operate kubectl, kube-bench, Trivy, Prowler, and manifest/runtime evidence for advanced Kubernetes security assessment.

cyberful/cyberful

Operate AFL++, libFuzzer with Clang sanitizers, and Jazzer for advanced coverage-guided native and JVM fuzzing.

cyberful/cyberful

Use sqlmap to confirm and characterize suspected SQL injection with faithful requests and bounded evidence.

cyberful/cyberful

Coordinate testing of product invariants and multi-step workflows across money, entitlements, approvals, quotas, inventory, onboarding, and distributed state.

cyberful/cyberful

Assess sensitive-data lifecycle, secret handling, cryptographic design and implementation, key management, password storage, randomness, signing, encryption, transport protection, and side channels…

cyberful/cyberful

Assess server-side URL retrieval and network egress during authorized penetration tests or code audits.

cyberful/cyberful

Test and audit authenticated session state across cookies, opaque tokens, bearer tokens, refresh tokens, devices, browsers, APIs, and privilege transitions.

cyberful/cyberful

Reconstruct request and event causality across gateways, services, queues, workers, data stores, and external providers while preserving identity, tenant, authorization, retry, and side-effect…

cyberful/cyberful

Trace and test untrusted data through SQL, NoSQL, LDAP, XPath, XML, shell, process, template, expression-language, code-evaluation, log, spreadsheet, mail, header, and browser interpreters.

cyberful/cyberful

Security pattern matching for code audit and content inspection: grep strings for source auditing, malicious-string signatures, PHP magic hashes, error-message patterns.

Ch1nfo/RiftX

Webshell samples for detection and analysis webshell 样本: PHP, ASP, ASPX, JSP, Python, Perl shells.

Ch1nfo/RiftX

Reconnaissance and methodology playbook. An agent skill from langbyyi/CyberStrikeAI-SRC.

langbyyi/CyberStrikeAI-SRC

Run brief --json to produce a structured overview of the repository.

alpha-omega-security/scrutineer

Derive a project's security contract from its source and docs, then emit it as structured data other skills can cite.

alpha-omega-security/scrutineer

Re-run a finding's reproduction against current HEAD, test its attack tree, grade five fixed evidence criteria, and account for every matched design control.

alpha-omega-security/scrutineer

Focused security audit of code, calibrated to surface real exploitable bugs and suppress theoretical findings.

PostHog/posthog

Guide an OpenART agent or contributor through planning, running, extending, and debugging the framework.

AI45Lab/OpenART

Open security platform for agentic infrastructure — broad scanning plus MCP discovery, CVEs, blast radius, SBOMs, CIS benchmarks (AWS, Azure, GCP, Snowflake), OWASP/NIST/MITRE compliance, AISVS…

LeoYeAI/openclaw-master-skills

Analyze blast radius, attack paths, and threat landscape across your AI infrastructure.

LeoYeAI/openclaw-master-skills

AI compliance and policy engine — evaluate scan results against OWASP, NIST, SOC 2, ISO 27001, CMMC, EU AI Act, AISVS v1.0, and related frameworks.

LeoYeAI/openclaw-master-skills

MCP server security registry and trust assessment — look up servers in the 427+ server security metadata registry, run pre-install marketplace checks, batch fleet risk scoring, assess skill file…

LeoYeAI/openclaw-master-skills

Open security platform for agentic infrastructure — checks packages for CVEs (OSV, NVD, EPSS, KEV), scans container images, verifies provenance, scans filesystems, and generates SBOMs.

LeoYeAI/openclaw-master-skills

Secure key management for AI agents. An agent skill from LeoYeAI/openclaw-master-skills.

LeoYeAI/openclaw-master-skills

Automated vulnerability scanner for agent platforms. An agent skill from LeoYeAI/openclaw-master-skills.

LeoYeAI/openclaw-master-skills

Build AI agents with console.agent() - the jQuery of AI Agents.

LeoYeAI/openclaw-master-skills

A skill your agent uses when enforcing spend limits on AI agent wallets, validating transactions before signing, configuring allowlists or approval workflows, detecting prompt injection in agent…

LeoYeAI/openclaw-master-skills

Static ReDoS (Regular Expression Denial of Service) vulnerability scanner and regex quality auditor for codebases.

LeoYeAI/openclaw-master-skills

A skill your agent uses when reviewing code for security vulnerabilities, implementing authentication flows, auditing OWASP Top 10, configuring CORS/CSP headers, handling secrets, input validation…

LeoYeAI/openclaw-master-skills

Analyze packet captures and network telemetry for intrusion evidence — capture and handling, the Wireshark/tshark triage funnel, Zeek log mining, Suricata rule runs, beacon and DNS-tunnel detection…

trilwu/secskills

Investigate security incidents in Microsoft Azure (resource and subscription control plane) -- reconstruct attacker activity from the Azure Activity Log and resource/data-plane diagnostic logs…

trilwu/secskills

Security specialist perspective for the weekly review. An agent skill from mizchi/skills.

mizchi/skills

CI/CD pipeline security gate design guide. An agent skill from revfactory/harness-100.

revfactory/harness-100

Code vulnerability pattern database. An agent skill from revfactory/harness-100.

revfactory/harness-100

Browse the nuclei-templates library, recommend a scoped template set for a given stack, target, or CVE, then run it against an authorized target and report findings.

forefy/.context

Provisions, scales, and operates Amazon EC2 virtual-machine workloads: instance-type selection (Graviton/Arm64, burstable T credits, GPU, instance store vs EBS), launch templates, Auto Scaling…

aws/agent-toolkit-for-aws

Installs, configures, and troubleshoots Network Flow Monitor agents on EC2 instances to monitor network path health.

aws/agent-toolkit-for-aws

AWS security service suitability, coverage and cost recommendations: WAF/origin overlap, AWS Network Firewall inspection coverage and policy review, VPC endpoint, Transit Gateway/Cloud WAN…

aws/agent-toolkit-for-aws

ELF 格式解析：ehdr/phdr/shdr、GOT/PLT、initarray、符号恢复. An agent skill from dslsdzc/rev-skills.

dslsdzc/rev-skills

函数式语言运行时逆向（Haskell/OCaml）：闭包/堆对象模型、调用约定、数据流优先策略. An agent skill from dslsdzc/rev-skills.

dslsdzc/rev-skills

Frida 动态插桩（桌面+移动统一）. An agent skill from dslsdzc/rev-skills.

dslsdzc/rev-skills

Frida 脚本生成方法论：目标特征 → 模板选择 → 改写 → 验证。独立于执行插桩（re-frida）. An agent skill from dslsdzc/rev-skills.

dslsdzc/rev-skills

固件仿真：QEMU 用户态/全系统. An agent skill from dslsdzc/rev-skills.

dslsdzc/rev-skills

硬件接口：JTAG/UART/flash 读取. An agent skill from dslsdzc/rev-skills.

dslsdzc/rev-skills