Security

Evidence-safe firewall ruleset audit reference specification — 22 documented detector patterns (17 vendor-agnostic plus 5 FortiGate-specific), a 15-check semantic catalogue, CIS Fortinet FortiGate…

transilienceai/communitytools

Open-source intelligence gathering - company repository enumeration, secret scanning, git history analysis, employee footprint, and code exposure discovery.

transilienceai/communitytools

Domain assessment and web application mapping - subdomain discovery, port scanning, endpoint enumeration, API discovery, and attack surface analysis.

transilienceai/communitytools

Re-validates every previously-confirmed finding against its current target — detects drift (patched, mitigated, re-introduced).

transilienceai/communitytools

Risk-based prioritisation of confirmed attack paths. An agent skill from transilienceai/communitytools.

transilienceai/communitytools

OSINT-based technology stack identification. An agent skill from transilienceai/communitytools.

transilienceai/communitytools

Threat-intel signal ingest — converts a CVE + affected-asset + claim payload into a queued engagement-scope row for the validation pipeline.

transilienceai/communitytools

Security-focused review of native Android and iOS mobile app source code against OWASP MASVS v2.1.0.

OWASP/secure-agent-playbook

WordPress plugin development with hooks, security, REST API, custom post types.

secondsky/claude-skills

Cloud posture security across AWS, Azure, and GCP — IAM least privilege, public exposure, encryption, logging coverage, landing-zone guardrails.

borghei/Claude-Skills

A skill your agent uses when handling database errors in Frappe/ERPNext.

Impertio-Studio/Frappe_Claude_Skill_Package

A skill your agent uses when debugging or preventing errors in Frappe Server Scripts.

Impertio-Studio/Frappe_Claude_Skill_Package

Optimized command-line arguments for all Android RE tools — jadx, baksmali, aapt, apkid, rg.

Paresh-Maheshwari/morphe-ai

Test application security against OWASP Top 10 (2025) with automated CI tooling: OWASP ZAP (DAST), dependency/supply-chain scanning (OSV-Scanner, SBOM, provenance), Semgrep SAST, auth/session tests…

petrkindlmann/qa-skills

A skill your agent uses when reviewing a Solidity, Vyper, or Rust (Solana/Anchor) smart contract for paid audit work or pre-launch sanity check.

elophanto/EloPhanto

Run an ApexGuru performance scan on a Salesforce Apex project via the ApexGuru SFAP Scan API.

forcedotcom/sf-skills

Software Composition Analysis: find vulnerable dependencies, correlate CVE/GHSA/OSV across ecosystems, generate CycloneDX/SPDX SBOMs, assess license compliance, and run reachability-aware triage to…

hardw00t/ai-security-arsenal

A skill your agent uses when code touches user input, tokens, redirects, raw SQL, or logging — injection, XSS, atom exhaustion, timing attacks, audit tooling.

j-morgan6/elixir-phoenix-guide

Harden code against vulnerabilities. An agent skill from BlackBeltTechnology/pi-agent-dashboard.

BlackBeltTechnology/pi-agent-dashboard

Hunting skill for auth bypass vulnerabilities. An agent skill from elementalsouls/Claude-BugHunter.

elementalsouls/Claude-BugHunter

Hunting skill for cache poison vulnerabilities. An agent skill from elementalsouls/Claude-BugHunter.

elementalsouls/Claude-BugHunter

Hunting skill for sqli vulnerabilities. An agent skill from elementalsouls/Claude-BugHunter.

elementalsouls/Claude-BugHunter

Run and inspect the local pieces of Guardana — the throwaway PostgreSQL for the collector, the collector itself, a fake OpenAI-compatible endpoint to probe, the documentation site served locally…

guardana/guardana

Hunt for credential access techniques like LSASS dumping or browser credential theft.

dandye/ai-runbooks

API hardening for Express, FastAPI, and serverless. An agent skill from jamditis/claude-skills-journalism.

jamditis/claude-skills-journalism

Secure authentication patterns (OWASP, NIST). An agent skill from jamditis/claude-skills-journalism.

jamditis/claude-skills-journalism

Pre-deployment security audit organized by OWASP Top 10. An agent skill from jamditis/claude-skills-journalism.

jamditis/claude-skills-journalism

Social media monitoring, narrative tracking, and OSINT. An agent skill from jamditis/claude-skills-journalism.

jamditis/claude-skills-journalism

Detect SQL injection vulnerabilities in a codebase using a three-phase approach: recon (find unsafe SQL construction sites), batched verify (trace user input to those sites in parallel subagents, 3…

utkusen/sast-skills

Symbolic execution and constraint solving with angr, Z3, Unicorn, and Qiling.

ptn1411/skill

Multi-source threat intelligence and vulnerability lookup. An agent skill from ptn1411/skill.

ptn1411/skill

Authorized testing of access-control and business-logic flaws that pattern scanners cannot find — IDOR/BOLA, broken function-level authorization, mass assignment, business-logic abuse, and race…

ptn1411/skill

A skill your agent uses when the user wants to automatically harden a guardrail, classifier, content filter, prompt, or API they own by running attack and defense together as a closed loop, not just…

gaasher/Agent-Loop-Skills

Use the open-source CodeQL ecosystem for .NET security analysis.

managedcode/Storage

Use the open-source free Roslynator analyzer packages and optional CLI for .NET.

managedcode/Storage

Authorized security assessment of LLM applications and AI agents: prompt injection, tool abuse, RAG exposure, memory poisoning, system-prompt extraction, and agent-compliance engineering per OWASP…

sickn33/agentic-awesome-skills

Security payloads, bypass tables, wordlists, gf pattern names, always-rejected bug list, and conditionally-valid-with-chain table.

sickn33/agentic-awesome-skills

External recon for software supply-chain attack surface. An agent skill from sickn33/agentic-awesome-skills.

sickn33/agentic-awesome-skills

Analyze malicious Linux ELF binaries — botnets, cryptominers, ransomware, and rootkits targeting Linux servers, containers, and cloud infrastructure — through static analysis, dynamic tracing, and…

mukul975/Anthropic-Cybersecurity-Skills

Detects prompt injection using regex signature matching, heuristic scoring for structural anomalies, and DeBERTa-based transformer classification, flagging direct injections (system-prompt…

mukul975/Anthropic-Cybersecurity-Skills

Detect and prevent dependency confusion (public-over-private package name resolution) in npm, PyPI, and Maven by enumerating claimable internal package names with tools like confused and OWASP…

mukul975/Anthropic-Cybersecurity-Skills

Detect and defend against indirect prompt injection hidden in web pages, documents, and images consumed by an agent, via content extraction (HTML/PDF/OCR), normalization, and scanning with LLM…

mukul975/Anthropic-Cybersecurity-Skills

Triage npm packages and lockfiles for install-script malware, credential exfiltration, and worming behavior using GuardDog, manual tarball inspection, and dynamic detonation with network/filesystem…

mukul975/Anthropic-Cybersecurity-Skills

Runs the Pacu AWS exploitation framework end-to-end — session and credential setup, IAM enumeration, automated privilege-escalation scanning via iamprivescscan, and persistence/backdooring modules…

mukul975/Anthropic-Cybersecurity-Skills

Extracts and analyzes browser history, cookies, cache, downloads, and bookmarks from Chrome, Firefox, and Edge using sqlite3, DB Browser for SQLite, Hindsight, and NirSoft tools…

mukul975/Anthropic-Cybersecurity-Skills

Deploys canary tokens and honeytokens (fake AWS credentials, DNS canaries, document beacons, database records) that trigger alerts when accessed by attackers.

mukul975/Anthropic-Cybersecurity-Skills

Monitors dark web forums, marketplaces, paste sites, and ransomware leak sites for mentions of organizational assets, leaked credentials, threatened attacks, and threat actor communications to…

mukul975/Anthropic-Cybersecurity-Skills

Deploys deception technology including honeypots, honeytokens, and decoy systems to detect attackers who have bypassed perimeter defenses, providing high-fidelity alerts with near-zero false…

mukul975/Anthropic-Cybersecurity-Skills