Security · Python

Run defensive pre-release security tests for Python web applications.

aiskillstore/marketplace

CTF 挑战中的源码审计方法。当发现 .git 目录、.bak/.zip 备份、/proc/self/environ 泄露源码时使用。与真实代码审计不同——CTF 源码中的漏洞是故意设置的，通常只有 1-2 个关键点。先找危险函数（sink），再追溯输入（source）到该函数的路径。覆盖 PHP/Python/Node.js/Java 四种语言的危险函数和漏洞模式

wgpsec/AboutSecurity

Validate API consistency between two versions of Python libraries.

ArabelaTso/Skills-4-SE

服务上线前的 AI 安全审查，聚焦需要理解代码语义和业务逻辑的安全问题. An agent skill from 312362115/claude.

312362115/claude

Comprehensive security vulnerability analysis for codebases and infrastructure.

aiskillstore/marketplace

Webshell samples for detection and analysis webshell 样本: PHP, ASP, ASPX, JSP, Python, Perl shells.

Ch1nfo/RiftX

Automated vulnerability scanner for agent platforms. An agent skill from LeoYeAI/openclaw-master-skills.

LeoYeAI/openclaw-master-skills

Build AI agents with console.agent() - the jQuery of AI Agents.

LeoYeAI/openclaw-master-skills

Static ReDoS (Regular Expression Denial of Service) vulnerability scanner and regex quality auditor for codebases.

LeoYeAI/openclaw-master-skills

Code vulnerability pattern database. An agent skill from revfactory/harness-100.

revfactory/harness-100

Guide an OpenART agent or contributor through planning, running, extending, and debugging the framework.

AI45Lab/OpenART

Run and inspect the local pieces of Guardana — the throwaway PostgreSQL for the collector, the collector itself, a fake OpenAI-compatible endpoint to probe, the documentation site served locally…

guardana/guardana

Guide to software engineering research topics and methodologies

wentorai/research-plugins

Frida 动态插桩（桌面+移动统一）. An agent skill from dslsdzc/rev-skills.

dslsdzc/rev-skills

Frida 脚本生成方法论：目标特征 → 模板选择 → 改写 → 验证。独立于执行插桩（re-frida）. An agent skill from dslsdzc/rev-skills.

dslsdzc/rev-skills

隐写术检测与提取：文件尾附加、图片 LSB、音频与其他载体、提取验证. An agent skill from dslsdzc/rev-skills.

dslsdzc/rev-skills

Generate randomized and edge-case inputs to detect unexpected failures, bugs, and security vulnerabilities through fuzz testing.

ArabelaTso/Skills-4-SE

Creating fuzz driver for Python libraries using LibFuzzer. An agent skill from benchflow-ai/skillsbench.

benchflow-ai/skillsbench

Generate structured CSV security audit reports from vulnerability data with proper filtering and formatting.

benchflow-ai/skillsbench

REST API security hardening with authentication, rate limiting, input validation, security headers.

secondsky/claude-skills

Configures HTTP security headers to protect against XSS, clickjacking, and MIME sniffing attacks.

secondsky/claude-skills

XSS attack prevention with input sanitization, output encoding, Content Security Policy.

secondsky/claude-skills

Agent-to-agent messaging with cryptographic signing and encryption.

LeoYeAI/openclaw-master-skills

CTF/靶场 Flag 强制验证流程。当通过任何方式发现疑似 flag 字符串（含 flag{、FLAG{、ctf{ 等格式）时必须立即使用此 skill 验证，不要直接提交。防止因字符截断、编码错误、HTML 实体、base64 不完整解码、hex 截断等原因导致提交错误 flag。即使 flag 看起来完整，也可能存在隐藏字符或编码问题。覆盖 SQL…

wgpsec/AboutSecurity

Review or write Python, JavaScript, TypeScript, or Go code using secure defaults.

nightly-labs/openbot

Systematic diagnosis of a red test, a rule that fires or stays silent wrongly, a scan or probe whose artifact looks wrong, a collector error, a red CI run or a gate that is green for the wrong reason.

guardana/guardana

当拿到源码、代码片段、反编译产物，或用户要求代码审计时调用。负责输入点→传播链→危险函数Sink的静态审计，跨语言（PHP/Java/Python/Node/Go）危险函数速查，输出可疑调用链与缺陷触发条件。

zhaji2333/CkSKILLS

漏扫报告分析 Skill。输入主流厂商漏扫报告（绿盟/深信服/悬镜/明鉴/等保/奇安信/启明/华云安/长亭/Nessus/Trivy/Grype/Snyk/OpenVAS 等 Excel/HTML/JSON/XML/.nessus 格式），自动提取漏洞并去重，可选对接知识库 Provider（修复历史）和威胁情报 Provider（CVE 情报），生成 7…

infometa/workbuddyskills

Applies NIST/CWE security hardening to Python and Rust code.

athola/claude-night-market

Analyze source code for security vulnerabilities using static analysis tools, custom rules, and CI-integrated scanning pipelines.

seb1n/awesome-ai-agent-skills

容器安全CVE漏洞修复验证引擎。从容器漏扫报告(Excel)自动提取漏洞，生成修复计划， SSH到测试环境验证OS包(apt/yum/apk)、Python(pip)、Node.js(npm)、Java(JAR)四种包类型的 修复方案，产出修复验证报告。不涉及主机层漏洞修复、不处理容器编排层安全配置。

infometa/workbuddyskills

Probe for hardcoded secrets, injection surfaces, unguarded routes, business logic flaws, and platform-specific weaknesses across backend (Node, Go, Java, Python, Rust), frontend (React, Angular…

HoangNguyen0403/agent-skills-standard

Android 加密体系审计（crypto audit）：AndroidKeyStore 密钥体系分析（别名/算法/用途/硬件背书）、 Cipher/KeyInfo 审计、加密调用点 hook（Frida 拦截密钥别名与用途）。

dslsdzc/rev-skills

加密数据还原：定位解密函数、写解密脚本. An agent skill from dslsdzc/rev-skills.

dslsdzc/rev-skills

物联网协议：MQTT/CoAP/BLE/Zigbee；BLE 链路层（广播解析/配对加密）与 NFC/智能卡（ISO14443/APDU/MIFARE）。

dslsdzc/rev-skills

Expert knowledge for Azure Firmware Analysis development including best practices, security, integrations & coding patterns, and deployment.

MicrosoftDocs/Agent-Skills