Skill collection
yaklang/hack-skills agent skills
- skills
- 26
- GitHub stars
- 2.4k
GitHub description: “Helping AI Agent become an awesome practical hacker!”
- Stars
- 2,394 (317 forks)
- Licence
- MIT
- Last push
- Sep 2026
- Created
- Apr 2026
Install all skills
npx skills add yaklang/hack-skillsAdd --skill <name> for a single skill and -a <agent> to choose the agent (see the agent guides).
Skills in yaklang/hack-skills, ranked
Ranked by score. Sort bymost stars,trending,newest,recently updated
| # | Skill | Repository | Stars | Used in | Tokens | Auto-check | Licence | Updated |
|---|---|---|---|---|---|---|---|---|
| 1 | Anti-debugging detection and bypass playbook. An agent skill from yaklang/hack-skills. | yaklang/ | 2.4k | — | ~3.4k | Automated safety check: Pass | MIT | 25 days ago |
| 2 | API authentication and JWT abuse playbook. An agent skill from yaklang/hack-skills. | yaklang/ | 2.4k | — | ~567 | Automated safety check: Pass | MIT | 25 days ago |
| 3 | API authorization and BOLA testing playbook. An agent skill from yaklang/hack-skills. | yaklang/ | 2.4k | — | ~449 | Automated safety check: Pass | MIT | 25 days ago |
| 4 | API reconnaissance and documentation review playbook. An agent skill from yaklang/hack-skills. | yaklang/ | 2.4k | — | ~456 | Automated safety check: Pass | MIT | 25 days ago |
| 5 | Draw a testable attack surface from one authorized target URL or one application. | yaklang/ | 2.4k | — | ~2.6k | Automated safety check: Pass | MIT | 25 days ago |
| 6 | Classical cipher analysis playbook. An agent skill from yaklang/hack-skills. | yaklang/ | 2.4k | — | ~4.8k | Automated safety check: Pass | MIT | 25 days ago |
| 7 | Code obfuscation analysis and deobfuscation playbook. An agent skill from yaklang/hack-skills. | yaklang/ | 2.4k | — | ~3.3k | Automated safety check: Pass | MIT | 25 days ago |
| 8 | CORS misconfiguration testing playbook. An agent skill from yaklang/hack-skills. | yaklang/ | 2.4k | — | ~2.4k | Automated safety check: Pass | MIT | 25 days ago |
| 9 | Advanced Content Security Policy bypass techniques. An agent skill from yaklang/hack-skills. | yaklang/ | 2.4k | — | ~3.1k | Automated safety check: Pass | MIT | 25 days ago |
| 10 | CSV/spreadsheet formula injection (DDE, Excel/LibreOffice, Google Sheets IMPORT). | yaklang/ | 2.4k | — | ~1.1k | Automated safety check: Pass | MIT | 25 days ago |
| 11 | Dangling markup injection playbook. An agent skill from yaklang/hack-skills. | yaklang/ | 2.4k | — | ~3.3k | Automated safety check: Pass | MIT | 25 days ago |
| 12 | GraphQL and hidden parameter testing playbook. An agent skill from yaklang/hack-skills. | yaklang/ | 2.4k | — | ~441 | Automated safety check: Pass | MIT | 25 days ago |
| 13 | Lattice-based cryptanalysis playbook. An agent skill from yaklang/hack-skills. | yaklang/ | 2.4k | — | ~3.5k | Automated safety check: Pass | MIT | 25 days ago |
| 14 | Memory forensics playbook using Volatility 2/3. An agent skill from yaklang/hack-skills. | yaklang/ | 2.4k | — | ~2.5k | Automated safety check: Pass | MIT | 25 days ago |
| 15 | Advanced prototype pollution playbook — server-side RCE, client-side gadgets, filter bypasses, and detection techniques. | yaklang/ | 2.4k | — | ~2.8k | Automated safety check: Pass | MIT | 25 days ago |
| 16 | RSA attack playbook for CTF and real-world cryptanalysis. An agent skill from yaklang/hack-skills. | yaklang/ | 2.4k | — | ~2.9k | Automated safety check: Pass | MIT | 25 days ago |
| 17 | Steganography detection and extraction playbook. An agent skill from yaklang/hack-skills. | yaklang/ | 2.4k | — | ~2.7k | Automated safety check: Pass | MIT | 25 days ago |
| 18 | Subdomain takeover detection and exploitation playbook. An agent skill from yaklang/hack-skills. | yaklang/ | 2.4k | — | ~2.6k | Automated safety check: Pass | MIT | 25 days ago |
| 19 | Symbolic execution and constraint solving playbook. An agent skill from yaklang/hack-skills. | yaklang/ | 2.4k | — | ~3k | Automated safety check: Pass | MIT | 25 days ago |
| 20 | Traffic analysis and PCAP forensics playbook. An agent skill from yaklang/hack-skills. | yaklang/ | 2.4k | — | ~2.8k | Automated safety check: Notes | MIT | 25 days ago |
| 21 | AV/EDR evasion playbook for Windows. An agent skill from yaklang/hack-skills. | yaklang/ | 2.4k | — | ~2.9k | Automated safety check: Pass | MIT | 25 days ago |
| 22 | 22.Hack Entry P0 primary router and operating doctrine for HackSkills. | yaklang/ | 2.4k | — | ~4.7k | Automated safety check: Notes | MIT | 25 days ago |
| 23 | Entry P1 category router for injection testing. An agent skill from yaklang/hack-skills. | yaklang/ | 2.4k | — | ~570 | Automated safety check: Pass | MIT | 25 days ago |
| 24 | OAuth and OIDC misconfiguration testing playbook. An agent skill from yaklang/hack-skills. | yaklang/ | 2.4k | — | ~580 | Automated safety check: Pass | MIT | 25 days ago |
| 25 | Entry P1 category router for business logic testing. An agent skill from yaklang/hack-skills. | yaklang/ | 2.4k | — | ~309 | Automated safety check: Pass | MIT | 25 days ago |
| 26 | Entry P1 category router for file access and upload workflows. | yaklang/ | 2.4k | — | ~368 | Automated safety check: Pass | MIT | 25 days ago |
Questions, answered from the data.
What is the best skill in yaklang/hack-skills?
Anti Debugging Techniques from yaklang/hack-skills ranks first of the 26 skills in yaklang/hack-skills listed here, with the highest score: its repository has 2.4k GitHub stars, its SKILL.md loads about 3.4k tokens and it passes the automated safety check with no findings. Next come API Auth And JWT Abuse and API Authorization And Bola.
Are the skills in yaklang/hack-skills official?
None yet. All 26 skills in yaklang/hack-skills listed here come from community repositories; a skill counts as official when the product's own GitHub organization publishes it.
How do I install all skills from yaklang/hack-skills?
Run npx skills add yaklang/hack-skills in your project: the open-source skills CLI installs the repository's skills into your coding agent's skills folder. To install a single skill, open its page here for the exact command.
How are these skills ranked?
By Skill Navigator score, which combines the GitHub stars of the skill's repository (shared across that repo's skills and discounted for large collections), how many other GitHub owners carry a copy of the skill, and automated SKILL.md quality checks, minus penalties for safety-check warnings and for each further skill from the same repository. Skills that fail the safety check are not listed.