Security · Backend development

Django access control and IDOR security review. An agent skill from getsentry/skills.

getsentry/skills

Runs and interprets Psalm security (taint) analysis on a Laravel project.

cachethq/core

Server-Side Template Injection — fingerprint the engine first (Jinja2 / Twig / Velocity / Freemarker / ERB / Smarty / Mako / Handlebars / Pug), then escalate the engine-specific primitive to RCE or…

PentesterFlow/agent

Run the full Spring Boot verification loop — Maven or Gradle build, SpotBugs, PMD, and Checkstyle static analysis, unit and Testcontainers integration tests with JaCoCo coverage, OWASP dependency…

affaan-m/ECC

Django security best practices, authentication, authorization, CSRF protection, SQL injection prevention, XSS prevention, and secure deployment configurations.

affaan-m/ECC

Django 安全最佳实践、认证、授权、CSRF 防护、SQL 注入预防、XSS 预防和安全部署配置. An agent skill from affaan-m/ECC.

affaan-m/ECC

Java Spring Boot 服务中认证/授权、验证、CSRF、密钥、标头、速率限制和依赖安全性的 Spring Security 最佳实践。

affaan-m/ECC

Review Django security audit patterns for settings and middleware.

IgorWarzocha/Opencode-Workflows

Django security best practices, authentication, authorization, CSRF protection, SQL injection prevention, XSS prevention, and secure deployment configurations.

affaan-m/ECC

NVIDIA's runtime safety framework for LLM applications. An agent skill from Orchestra-Research/AI-Research-SKILLs.

Orchestra-Research/AI-Research-SKILLs

Server-Side Template Injection detection→engine-fingerprint→RCE for web apps.

s0ld13rr/pentestcode

Detects and exploits Server-Side Template Injection (SSTI) vulnerabilities across Jinja2, Twig, Freemarker, and other template engines to achieve remote code execution.

mukul975/Anthropic-Cybersecurity-Skills

Detects and exploits JavaScript prototype pollution vulnerabilities in client-side and server-side (Node.js) applications to achieve XSS, RCE, or authentication bypass through property injection…

mukul975/Anthropic-Cybersecurity-Skills

Audits Rails application security against OWASP Top 10, detects vulnerabilities with Brakeman, and verifies Pundit authorization policies.

ThibautBaissac/rails_ai_agents

Laravel 框架特效安全审计工具。针对 Laravel 常见鉴权/CSRF/Session/模型填充/Blade 渲染等框架特性进行白盒静态审计，并将风险映射到你现有通用漏洞类型体系（AUTH/CSRF/LOGIC/XSS/CFG 等）。

0xShe/PHP-Code-Audit-Skill

Buenas prácticas de Spring Security para autenticación/autorización, validación, CSRF, secretos, cabeceras, limitación de velocidad y seguridad de dependencias en servicios Java Spring Boot.

affaan-m/ECC

Detects and exploits HTTP request smuggling caused by Content-Length/Transfer-Encoding parsing discrepancies between front-end and back-end servers, using Burp Suite Repeater (auto Content-Length…

mukul975/Anthropic-Cybersecurity-Skills

Server-Side Request Forgery detection→internal-access→proof for web apps.

s0ld13rr/pentestcode

Review secret detection patterns and scanning workflows. An agent skill from IgorWarzocha/Opencode-Workflows.

IgorWarzocha/Opencode-Workflows

Identify CMS, frameworks, and server technology stacks on live hosts.

uphiago/recon-skills

Security auditor for Laravel applications. An agent skill from aiskillstore/marketplace.

aiskillstore/marketplace

Analyze session management implementations to identify security vulnerabilities in web applications.

jeremylongshore/tons-of-skills-marketplace

Review Vite security audit patterns for SPA and dev server security.

IgorWarzocha/Opencode-Workflows

Hunting skill for cache poison vulnerabilities. An agent skill from elementalsouls/Claude-BugHunter.

elementalsouls/Claude-BugHunter

Hunting skill for sqli vulnerabilities. An agent skill from elementalsouls/Claude-BugHunter.

elementalsouls/Claude-BugHunter

API hardening for Express, FastAPI, and serverless. An agent skill from jamditis/claude-skills-journalism.

jamditis/claude-skills-journalism

Deploys Llama Guard 3 safety classification, NeMo Guardrails programmable dialogue rails, and LLM Guard input/output scanner pipelines as complementary runtime defenses that inspect and constrain…

mukul975/Anthropic-Cybersecurity-Skills

Advanced prototype pollution playbook — server-side RCE, client-side gadgets, filter bypasses, and detection techniques.

yaklang/hack-skills

Detect Server-Side Request Forgery (SSRF) vulnerabilities in a codebase using a three-phase approach: recon (find outbound call sites), batched verify (trace user input to destinations in parallel…

utkusen/sast-skills

Detect Server-Side Template Injection (SSTI) vulnerabilities in a codebase using a three-phase approach: recon (find template rendering sites that use dynamic strings), batched verify (trace user…

utkusen/sast-skills

Server-side vulnerability testing - SSRF, HTTP Request Smuggling, Path Traversal, File Upload, Insecure Deserialization, and Host Header injection.

transilienceai/communitytools

Use this skill as THE specialized Lightning Web Security (LWS) validator for a Lightning Web Component bundle (.js, .ts, .html, .css, .js-meta.xml) — the canonical LWS/Product-Security review for…

forcedotcom/sf-skills

Audit PHP web application source for critical vulnerabilities using PHP's specific sink and footgun catalog — object injection via unserialize and phar:// POP chains, type-juggling and magic-hash…

trilwu/secskills

Run defensive pre-release security tests for Python web applications.

aiskillstore/marketplace

Detect and exploit server-side request forgery to access internal resources and cloud metadata

NeoTheCapt/RedteamAgent

Provides AWS Key Management Service (KMS) patterns using AWS SDK for Java 2.x.

giuseppe-trisciuoglio/developer-kit

Backend tech-stack identification — web servers, runtimes, languages, frameworks, databases, APIs, and CMS via HTTP headers, cookies, error pages, and API discovery.

transilienceai/communitytools

PHP-only security standards for database access, password handling, and input validation.

HoangNguyen0403/agent-skills-standard

Spring Boot 服务的 Spring Security 身份验证/授权、验证、CSRF、密钥、响应头、速率限制和依赖项安全最佳实践。

xu-xiang/everything-claude-code-zh

Spring Boot 服务的身份验证/授权、校验、CSRF、机密管理、响应头、速率限制及依赖安全的 Spring Security 最佳实践。

xu-xiang/everything-claude-code-zh

Assess server-side URL retrieval and network egress during authorized penetration tests or code audits.

cyberful/cyberful

PHP 框架特定安全审计。当在 PHP 白盒审计中已识别目标使用特定框架、 需要检查框架特有安全机制和常见配置缺陷时触发。

wgpsec/AboutSecurity

Server-side template injection detection, engine identification, and RCE

NeoTheCapt/RedteamAgent

Secure server-side TypeScript input, auth tokens, and injection boundaries.

HoangNguyen0403/agent-skills-standard