Security · For developers

现代 C++ 二进制逆向：RTTI/异常/虚表恢复、ABI 识别、mangling 解码. An agent skill from dslsdzc/rev-skills.

dslsdzc/rev-skills

崩溃/漏洞样本分析：确定性复现、ASAN/UBSAN 报告解读、输入最小化 (afl-tmin/cmin)、gdb 回溯定位、rr 录制重放、PoC 产出。

dslsdzc/rev-skills

密钥与口令提取：硬编码、内存搜索、资源. An agent skill from dslsdzc/rev-skills.

dslsdzc/rev-skills

磁盘/文件系统取证：删除恢复、时间线、可疑文件定位. An agent skill from dslsdzc/rev-skills.

dslsdzc/rev-skills

Electron 桌面应用逆向：asar 解包、主/渲染进程 JS、V8 字节码（.jsc）边界、CDP 动态调试、反调试对抗。

dslsdzc/rev-skills

覆盖率引导模糊测试：AFL++/libFuzzer/honggfuzz、插桩与语料初始化、 afl-fuzz 运行参数、覆盖率(afl-cov)、字典/结构化输入。

dslsdzc/rev-skills

固件提取与解包：binwalk/unblob、magic 扫描、字节序. An agent skill from dslsdzc/rev-skills.

dslsdzc/rev-skills

物联网协议：MQTT/CoAP/BLE/Zigbee；BLE 链路层（广播解析/配对加密）与 NFC/智能卡（ISO14443/APDU/MIFARE）。

dslsdzc/rev-skills

Java 字节码逆向：CFR/JD-GUI、jar 解包、Java 加固。触发词：Java、jar、字节码、JD-GUI、CFR、class文件

dslsdzc/rev-skills

Android 加固脱壳专项：乐固/360/梆梆/爱加密、DEX 恢复. An agent skill from dslsdzc/rev-skills.

dslsdzc/rev-skills

RISC-V 架构逆向：RV32/RV64、压缩指令（RVC）、gp 相对寻址、ABI 与 ecall 系统调用约定、工具链指纹。

dslsdzc/rev-skills

Linux kernel testing skill for KUnit, kselftest, syzkaller, and LTP.

mohitmishra786/low-level-dev-skills

Rust security skill for supply chain safety and memory-safe development.

mohitmishra786/low-level-dev-skills

Zig testing skill for writing and running tests. An agent skill from mohitmishra786/low-level-dev-skills.

mohitmishra786/low-level-dev-skills

容器安全CVE漏洞修复验证引擎。从容器漏扫报告(Excel)自动提取漏洞，生成修复计划， SSH到测试环境验证OS包(apt/yum/apk)、Python(pip)、Node.js(npm)、Java(JAR)四种包类型的 修复方案，产出修复验证报告。不涉及主机层漏洞修复、不处理容器编排层安全配置。

infometa/workbuddyskills

Analyze source code for security vulnerabilities using static analysis tools, custom rules, and CI-integrated scanning pipelines.

seb1n/awesome-ai-agent-skills

Harden Angular apps against XSS, CSP violations, and unauthorized access.

HoangNguyen0403/agent-skills-standard

Probe for hardcoded secrets, injection surfaces, unguarded routes, business logic flaws, and platform-specific weaknesses across backend (Node, Go, Java, Python, Rust), frontend (React, Angular…

HoangNguyen0403/agent-skills-standard

Secure Go backend services against common vulnerabilities. An agent skill from HoangNguyen0403/agent-skills-standard.

HoangNguyen0403/agent-skills-standard

Secure iOS apps with secure storage, biometrics, and data protection.

HoangNguyen0403/agent-skills-standard

Prevent XSS, secure auth flows, and harden React client-side applications.

HoangNguyen0403/agent-skills-standard

Secure server-side TypeScript input, auth tokens, and injection boundaries.

HoangNguyen0403/agent-skills-standard

Guidance for Azure Web Application Firewall — deployed on Azure Front Door (global, edge-tier) or Azure Application Gateway (regional, integrated with backend pools).

vinayaklatthe/microsoft-security-skills

Guidance for Microsoft Defender for Cloud — cloud security posture management (CSPM) and cloud workload protection (CWPP) across Azure, AWS, and GCP.

vinayaklatthe/microsoft-security-skills

Guidance for Microsoft Defender for Containers — Kubernetes and container security across AKS, Azure Arc-enabled Kubernetes, EKS, GKE, and OpenShift.

vinayaklatthe/microsoft-security-skills

Guidance for Microsoft Defender for Endpoint (MDE) — enterprise endpoint security with next-gen AV, EDR, attack surface reduction (ASR), Defender Vulnerability Management, automated investigation…

vinayaklatthe/microsoft-security-skills

Guidance for Microsoft Defender for Identity (MDI) — identity threat detection (ITDR) across on-premises Active Directory, AD CS, AD FS, and Entra Connect using sensors.

vinayaklatthe/microsoft-security-skills

Guidance for Microsoft Defender for IoT — agentless OT/ICS network detection and response for industrial environments, plus enterprise IoT (EIoT) protection integrated with Defender XDR.

vinayaklatthe/microsoft-security-skills

Guidance for Microsoft Defender XDR — the unified extended detection and response suite that correlates signals across endpoints, identities, email, and cloud apps into prioritised incidents with…

vinayaklatthe/microsoft-security-skills

Guidance for Microsoft Entra ID Governance — automating identity lifecycle and access with entitlement management (access packages), access reviews, lifecycle workflows for joiner-mover-leaver…

vinayaklatthe/microsoft-security-skills

Guidance for designing public key infrastructure (PKI) and certificate management on Azure and hybrid environments.

vinayaklatthe/microsoft-security-skills

Guidance for Microsoft Security Copilot - the generative-AI security platform that helps analysts investigate, hunt, summarise, and respond using natural language, plugins, promptbooks, and embedded…

vinayaklatthe/microsoft-security-skills

Guidance for designing and operating Microsoft Sentinel, the cloud-native SIEM and SOAR delivered through the Defender portal.

vinayaklatthe/microsoft-security-skills

Guidance for the Microsoft unified security operations platform that brings Microsoft Sentinel, Microsoft Defender XDR, Security Copilot, Threat Intelligence, and Microsoft Security Exposure…

vinayaklatthe/microsoft-security-skills

This skill should be used when the user asks to "triage security findings", "fix an Aikido finding", "review Aikido issues", "dismiss a false positive", "check SAST/IaC alerts", or needs to work…

bitwarden/ai-plugins

Conducts digital forensics investigations following a personal data breach, covering evidence preservation, chain of custody documentation, log analysis, scope determination, and root cause analysis.

mukul975/Privacy-Data-Protection-Skills

A skill your agent uses when auditing an Anchor or bare-Rust Solana program end to end; because Solana ships no static analyzers, the coverage strategy is compiler-warning triage, manual source…

mtarcure/claude-vibe-squad

Scan GitHub Actions workflow files for security vulnerabilities by reading the YAML and reporting findings directly — no external tools, no installation, no shell execution.

aiskillstore/marketplace

Expert code review specialist for quality, security, and maintainability.

aiskillstore/marketplace

RouterOS packet capture and TZSP streaming for protocol debugging.

aiskillstore/marketplace

Automated security scanning for dependencies, code, containers with Trivy, Snyk, npm audit.

secondsky/claude-skills

Expert knowledge for Azure External Attack Surface Management development including configuration.

MicrosoftDocs/Agent-Skills

Expert knowledge for Azure Firmware Analysis development including best practices, security, integrations & coding patterns, and deployment.

MicrosoftDocs/Agent-Skills

Expert knowledge for Azure Security development including best practices, decision making, security, configuration, integrations & coding patterns, and deployment.

MicrosoftDocs/Agent-Skills

移动应用安全深度测试专业技能（v3.0）：移动端深层攻击链（App→API→后端→云）、Android/iOS深度逆向与动态调试、Frida全面对抗与加固脱壳、iOS越狱检测绕过/ObjC Runtime/LLDB调试/证书固定绕过、跨平台框架漏洞（Flutter/React…

langbyyi/CyberStrikeAI-SRC

CVE(Common Vulnerabilities and Exposures) 분석 방법론, 의존성 취약점 스캔 도구 활용, CVSS 점수 해석, 취약점 우선순위 결정 가이드.

revfactory/harness-100