978 skills found · Page 20 of 33
yaklang / rsa-attack-techniquesRSA attack playbook for CTF and real-world cryptanalysis
yaklang / smart-contract-vulnerabilitiesSmart contract vulnerability playbook
yaklang / stack-overflow-and-ropStack overflow and ROP playbook
yaklang / subdomain-takeoverSubdomain takeover detection and exploitation playbook
yaklang / unauthorized-access-common-servicesUnauthorized access playbook for common exposed services
yaklang / waf-bypass-techniquesWAF bypass methodology and generic evasion techniques
yaklang / web-cache-deceptionWeb cache deception and poisoning playbook
yaklang / windows-privilege-escalationWindows local privilege escalation playbook
yaklang / hackEntry P0 primary router and operating doctrine for HackSkills
yaklang / ai-ml-securityAI/ML security playbook
yaklang / android-pentesting-tricksAndroid pentesting playbook
yaklang / defi-attack-patternsDeFi attack pattern playbook
yaklang / hash-attack-techniquesHash attack playbook
yaklang / ios-pentesting-tricksiOS pentesting playbook
yaklang / llm-prompt-injectionLLM prompt injection playbook
yaklang / sqli-sql-injectionSQL injection playbook
yaklang / upload-insecure-filesInsecure file upload playbook
yaklang / container-escape-techniquesContainer escape playbook
yaklang / heap-exploitationHeap exploitation playbook
yaklang / jndi-injectionJNDI injection playbook
yaklang / open-redirectOpen redirect playbook
mrgoonie / repomixPackage entire code repositories into single AI-friendly files using Repomix. Capabilities include pack codebases with customizable include/exclude patterns, generate multiple output formats (XML, Markdown, plain text), preserve file structure and context, optimize for AI consumption with token coun…
mrgoonie / web-testingWeb testing with Playwright, Vitest, k6. E2E/unit/integration/load/security/visual/a11y testing. Use for test automation, flakiness, Core Web Vitals, mobile gestures, cross-browser.
mrgoonie / devopsDeploy to Cloudflare (Workers, R2, D1), Docker, GCP (Cloud Run, GKE), Kubernetes (kubectl, Helm). Use for serverless, containers, CI/CD, GitOps, security audit.
P4nda0s / rev-ios-dumpDump decrypted iOS app binaries (砸壳) from jailbroken devices using frida-ios-dump. Activate when the user wants to decrypt an iOS app, dump an IPA from a device, or extract a decrypted Mach-O binary for reverse engineering.
WordPress / wp-plugin-developmentUse when developing WordPress plugins: architecture and hooks, activation/deactivation/uninstall, admin UI and Settings API, data storage, cron/tasks, security (nonces/capabilities/sanitization/escaping), and release packaging.
LeoYeAI / 360Guard360-degree comprehensive security review Skill. Use before installing any Skill from ClawHub, GitHub, or other sources. Performs full security scans including all Skill Vetter checks plus extended system/privacy/behavior checks and automated scanning scripts.
LeoYeAI / acl-rule-analysisVendor-agnostic ACL and firewall rule analysis with shadowed rule detection, overly permissive rule identification, unused rule discovery, redundant rule flagging, and rule ordering optimization. Covers ACLs (Cisco/JunOS/EOS) and firewall policies (PAN-OS/FortiGate/CheckPoint).
LeoYeAI / agent-bomOpen security platform for agentic infrastructure — broad scanning plus MCP discovery, CVEs, blast radius, SBOMs, CIS benchmarks (AWS, Azure, GCP, Snowflake), OWASP/NIST/MITRE compliance, AISVS v1.0, MAESTRO layer tagging, and vector database security checks
LeoYeAI / agentic-loop-upgradeEnhanced agentic loop with planning, parallel execution, confidence gates, semantic error recovery, and observable state machine. Includes Mode dashboard UI for easy configuration.
