1,110 skills found · Page 23 of 37
cbrock84 / security-architecture-reviewReviews a design or change for security before it ships — authentication and authorization, data handling, secrets, dependencies, and the secure-development practices around it.
cbrock84 / vulnerability-managementRuns the loop from discovering a weakness to confirming it is fixed — scanning, triage, prioritization by real exploitability, remediation tracking, and patch policy.
mukul975 / cve-mcp-serverProduction-grade MCP server giving Claude 27 security intelligence tools across 21 APIs — CVE lookup, EPSS scoring, CISA KEV, MITRE ATT&CK, Shodan, VirusTotal, and more.
rmyndharis / code-review-ai-ai-reviewCombine static analysis with model-assisted code review to assess security, performance, correctness, and architecture
rmyndharis / deployment-pipeline-designDesign multi-stage CI/CD pipelines with approval gates, security checks, and deployment orchestration
rmyndharis / firmware-analystExpert firmware analyst specializing in embedded systems, IoT
rmyndharis / error-debugging-multi-agent-reviewCoordinate specialized code, security, architecture, and performance reviewers and consolidate their results
rmyndharis / backend-security-coderExpert in secure backend coding practices specializing in input
rmyndharis / cloud-architectExpert cloud architect specializing in AWS/Azure/GCP multi-cloud
rmyndharis / code-reviewerElite code review expert specializing in modern AI-powered code
rmyndharis / comprehensive-review-full-reviewCoordinate code quality, architecture, security, performance, testing, and documentation reviews
rmyndharis / deployment-engineerExpert deployment engineer specializing in modern CI/CD pipelines,
BlackSnufkin / LitterBoxA self-hosted sandbox for red teams to test payloads against modern detection before deployment. MCP integration lets an LLM agent drive analysis end to end.
rohitg00 / verification-gatesCreates explicit validation checkpoints (verification gates) between project phases to catch errors early and ensure quality before proceeding
rohitg00 / structured-code-reviewPerforms a structured five-stage code review covering requirements compliance, correctness, code quality, testing, and security/performance. Each stage uses targeted checklists and categorized feedback (Blocker/Major/Minor/Nit) with actionable suggestions and rationale
daymade / qa-expertSets up QA testing processes: test strategies, Google Testing Standards test cases, P0-P4 bug tracking, quality metrics, progress reports, autonomous execution via master prompts, and OWASP security testing, with third-party QA handoff docs
daymade / marketplace-health-checkRuns an evidence-based health audit of this skills marketplace repo — code safety, docs/SSOT, security/PII, PR/issue triage, manifest integrity — via a parallel workflow, then verifies findings by priority.
daymade / repomix-safe-mixerSafely package codebases with repomix by automatically detecting and removing hardcoded credentials before packing
CloudAI-X / security-patternsImplements authentication, authorization, encryption, secrets management, and security hardening patterns
taielab / awesome-hacking-listsA curated collection of top-tier penetration testing tools and productivity utilities across multiple domains. Join us to explore, contribute, and enhance your hacking toolkit!
tjboudreaux / thinking-red-teamFor authorized security review of code, auth, or APIs you control, model the attacker, map the attack surface, and report only findings with a reproducible exploit path and verified mitigation.
tjboudreaux / thinking-theory-of-constraintsWhen throughput or latency is pipeline-limited, identify the single binding constraint and exploit, subordinate, elevate, then recheck—ignore non-constraints.
first-fluke / oma-securityScan application source, agent skills, and MCP components; run
first-fluke / oma-qaReview changes for correctness, security, accessibility, and
utkusen / sast-fileuploadDetect insecure file upload vulnerabilities in a codebase using a three-phase approach: discovery (find all upload sites), batched verify (check extension bypass and related issues in parallel subagents, 3 sites each), and merge (consolidate batch results).
utkusen / sast-jwtDetect insecure JWT (JSON Web Token) implementations in a codebase using a two-phase approach: first map all JWT issuance and verification sites to understand the token lifecycle and signing configuration, then check each verification site for exploitable weaknesses such as algorithm confusion, miss…
utkusen / sast-pathtraversalDetect path traversal vulnerabilities in a codebase using a three-phase approach: recon (find file-loading sinks with dynamic paths), batched verify (trace user input and mitigations in parallel subagents, 3 sinks each), and merge (consolidate batch results).
utkusen / sast-ssrfDetect Server-Side Request Forgery (SSRF) vulnerabilities in a codebase using a three-phase approach: recon (find outbound call sites), batched verify (trace user input to destinations in parallel subagents, 3 sites each), and merge (consolidate batch results).
utkusen / sast-sstiDetect Server-Side Template Injection (SSTI) vulnerabilities in a codebase using a three-phase approach: recon (find template rendering sites that use dynamic strings), batched verify (trace user input to those sites in parallel subagents, 3 candidates each), and merge (consolidate batch results).
utkusen / sast-xssDetect Cross-Site Scripting (XSS) vulnerabilities in a codebase using a three-phase approach: recon (find HTML/JS/DOM sink sites), batched verify (trace user input to sinks in parallel subagents, 3 sink sites each), and merge (consolidate batch results).
