Security · For developers

Decompile Java applications (JAR/WAR/APK/class) — extract archives, detect obfuscators, decompile bytecode to source, analyse license logic and secrets.

ptn1411/skill

Defensive audit of a license/entitlement/activation mechanism on software you own or are authorized to test.

ptn1411/skill

Run authorized network reconnaissance with Nmap on Windows (or Linux).

ptn1411/skill

Analyze Rust native binaries — demangle symbols, extract panic paths to reconstruct module map, detect frameworks (Tauri/Actix/Rocket/Axum), locate license validation logic.

ptn1411/skill

Zero friction. An agent skill from HKUDS/CLI-Anything.

HKUDS/CLI-Anything

Default code-quality route for broad code review, PR review, maintainability, correctness, and regression-risk checks.

foryourhealth111-pixel/Vibe-Skills

Parse Office 365 Unified Audit Logs via Microsoft Graph API to detect email forwarding rule creation, inbox delegation, suspicious OAuth app grants, and other indicators of account compromise.

mukul975/Anthropic-Cybersecurity-Skills

Detect unusual API call patterns in AWS CloudTrail logs using boto3, statistical baselining, and behavioral analysis to identify credential compromise, privilege escalation, and unauthorized…

mukul975/Anthropic-Cybersecurity-Skills

Detect AWS IAM privilege escalation paths using boto3 and Cloudsplaining policy analysis to identify overly permissive policies, dangerous permission combinations, and least-privilege violations

mukul975/Anthropic-Cybersecurity-Skills

Detect lateral movement in Azure AD/Entra ID environments using Microsoft Graph API audit logs, Azure Sentinel KQL hunting queries, and sign-in anomaly correlation to identify privilege escalation…

mukul975/Anthropic-Cybersecurity-Skills

Deploy Runtime Application Self-Protection (RASP) agents to detect and block attacks from within application runtime, covering OpenRASP integration, attack pattern detection, and security policy…

mukul975/Anthropic-Cybersecurity-Skills

Identify CMS, frameworks, and server technology stacks on live hosts.

uphiago/recon-skills

High-precision Google dorks for exposed configs, secrets, and credentials -- real-world validated

uphiago/recon-skills

Spoof HTTP/2 SETTINGS frames and pseudo-header order per browser profile.

uphiago/recon-skills

Mass scan for exposed env files, backups, and git configs. An agent skill from uphiago/recon-skills.

uphiago/recon-skills

Launch stealth Chromium with C++ fingerprint patches for anti-bot bypass.

uphiago/recon-skills

Spoof TLS ClientHello and JA4 fingerprints for browser impersonation.

uphiago/recon-skills

Screenshot all live hosts for rapid visual triage and technology fingerprinting.

uphiago/recon-skills

A skill your agent uses for OpenIAP monorepo work that should follow the repository's shared agent workflows, including review-pr, audit-code, audit-security, audit-iapkit, compile-knowledge…

hyodotdev/openiap

Verify exact SillyTavern, Tavern Helper / JS-Slash-Runner, STScript, macro, prompt-injection, worldbook, EJS, MVU, and runtime-library capabilities before implementing or reviewing rolecard…

LiarMTTT/TavernWeave

Use before committing changes to auth, workspace scoping, channel webhooks, AI tools/MCP, permission settings, or anything handling untrusted channel content in ChatbotX.

ChatbotXIO/ChatbotX

Expert security auditor for AI Skills and Bundles. An agent skill from sickn33/agentic-awesome-skills.

sickn33/agentic-awesome-skills

Scan inputs for prompt injection, unsafe content, and adversarial attacks using AIDefence.

ruvnet/ruflo

Defense-in-depth security across Rust, TypeScript, and Bash for the Pump SDK — cryptographic key handling, memory zeroization, secure file I/O, input validation, privilege management, dependency…

nirholas/pump-fun-sdk

Operates this repository as a solo maintainer across PR triage, issue handling, release work, deploys, ops checks, cost checks, security review, and docs drift.

serithemage/serverless-openclaw

Comprehensive infrastructure security audit framework for IaC, Docker, Kubernetes, and cloud configurations.

forefy/.context

Review the implementation source code of MCP (Model Context Protocol) servers, clients, and tool handlers against a security baseline — authentication, sessions, rate limiting, input-schema…

github/awesome-copilot

A skill your agent uses when the user says 'dependency audit', 'npm audit', 'pip audit', 'cargo audit', 'security vulnerabilities', 'outdated packages', 'supply chain', or needs to scan project…

cwinvestments/memstack

A skill your agent uses when an open-source developer tool, package, CLI, agent, or MCP server must be evaluated for legitimacy, supply-chain risk, telemetry, dangerous capabilities, claim accuracy…

asimons81/hermes-field-kit

Capture a Burp Suite Repeater request/response as a PoC image (targets/<eng/poc/) by driving the Burp MCP + the Kali GUI.

Encod3d-Sec/TORCH

Detect package managers and CI action pins, then discover outdated or vulnerable dependencies.

tobihagemann/turbo

Domain-specific: SAP Commerce, OpenSearch detection, WordPress validation, enterprise search.

notque/vexjoy-agent

Security auditor for Laravel applications. An agent skill from aiskillstore/marketplace.

aiskillstore/marketplace

Handle CVE/vulnerability reports from security linters (trivy, osv-scanner, etc.).

hardisgroupcom/sfdx-hardis

Create OPA governance policies for Harness via MCP. An agent skill from harness/harness-skills.

harness/harness-skills

Dependabot-aware dependency updates with security audit, real-CI validation, and a unified PR.

joshukraine/dotfiles

Performs runtime dynamic analysis of Android applications using Frida, Objection, and Android Debug Bridge to observe application behavior during execution, intercept function calls, modify runtime…

mukul975/Anthropic-Cybersecurity-Skills

Performs forensic analysis of SQLite databases by examining B-tree page structures, recovering deleted records from freelist pages and Write-Ahead Log (WAL) files, decoding encoded timestamps, and…

mukul975/Anthropic-Cybersecurity-Skills

Azure Key Vault SDK for Python. An agent skill from microsoft/skills.

microsoft/skills

AI/LLM defensive security reference: prompt-injection defense, OWASP LLM Top 10 defensive mapping, MCP and agentic tool-call hardening, training-data poisoning detection, model-output validation and…

modu-ai/moai-adk

DevSecOps, container, and API operational defensive security reference: CI/CD pipeline hardening, secret scanning, IaC misconfiguration detection, SAST/DAST integration, container image scanning…

modu-ai/moai-adk

Periodic dependency review for Node.js/pnpm projects — outdated package triage, security audit, update batching strategy (patch/minor/major), validation checklist.

mizchi/skills

SQL injection screening for host code (MoonBit / TS / Rust) plus secretlint setup notes.

mizchi/skills

Centralized API key management from Access.txt. An agent skill from alinaqi/maggy.

alinaqi/maggy

Debug a rule or approximation that behaves unexpectedly by tracing where taint is dropped.

seqra/opentaint

Set up agent context for a project. An agent skill from unxed/f4.

unxed/f4

当目标为微信/支付宝/抖音/百度等小程序（含微信云开发/云函数）、需要小程序包获取与反编译、appid/appsecret/接口提取、微信登录链/支付/越权/WebView/rich-text 渲染/云开发漏洞挖掘时调用。负责小程序全生命周期深度挖掘：包还原 → 代码审计 → 接口与密钥提取 → 登录/支付/越权/渲染/云开发专项 → 验证要点。命中场景：openid 替换越权、code…

zhaji2333/CkSKILLS

Detect and analyze SQL injection vulnerabilities in application code and database queries.

jeremylongshore/tons-of-skills-marketplace