1,109 skills found · Page 24 of 37
utkusen / sast-xxeDetect XML External Entity (XXE) vulnerabilities in a codebase using a three-phase approach: recon (find XML parsing sites without external-entity hardening), batched verify (trace user input to each site in parallel subagents, 3 sites each), and merge (consolidate batch results).
utkusen / sast-businesslogicDetect business logic vulnerabilities in a codebase using a three-phase approach: threat modeling (domain analysis and attack scenarios), batched verify (check exploitable gaps in parallel subagents, 3 scenarios each), and merge (consolidate batch results).
utkusen / sast-reportConsolidate all SAST vulnerability results from the sast/ folder into a single final report ranked by severity and confidentiality impact. Reads all *-results.md files and produces sast/final-report.md. Run after all vulnerability detection skills complete
Anil-matcha / home-assistantRead entity states and call services on your Home Assistant instance. Service calls are confirmed first. Trigger phrases: home assistant, smart home, turn on the light.
utkusen / sast-analysisPerform codebase analysis and architecture mapping as the first phase of a security assessment. Explores the tech stack, frameworks, entry points, data flows, and trust boundaries. Outputs sast/architecture.md. Run this before any vulnerability detection skill
uphiago / hunt-api-misconfigHunt API security misconfiguration — mass assignment, JWT attacks, prototype pollution, HTTP verb tampering. Mass assignment: send {is_admin:true, role:admin, verified:true} on profile/account/reset endpoints — server blindly applies.
uphiago / hunt-firebaseHunt Firebase / Firestore / GCP exploitation — Firebase API key discovery in JS bundles, anonymous auth via signUp endpoint, Firestore collection enumeration with anon key, Realtime Database read/write without auth, Firebase Storage bucket listing, Firebase Hosting detection, GCP service account JSO…
uphiago / wp-plugin-rest-auth-bypassScan WordPress REST API plugin endpoints for unauthenticated state-changing operations — discover write endpoints (POST/PUT/PATCH/DELETE) exposed without auth, enumerate all plugin routes, and test for unauthorized content publishing, settings modification, and data leakage.
uphiago / deep-invadeDeep pentest WP: SSRF, plugin CVE, JS mine, port scan chain.
uphiago / firebase-supabase-attackExploit Firebase/Supabase for data via JS config leak probe.
uphiago / xmlrpc-exploitationExploit XMLRPC multicall, pingback for brute force and SSRF.
uphiago / cors-chain-automationUse when a bounded list of authorized API endpoints needs consistent CORS triage before browser validation.
uphiago / flask-werkzeug-attackExploit Flask/Werkzeug debugger exposure for traceback and SECRET leaks.
uphiago / port-service-discoveryNmap scan for MySQL, Redis, FTP, SSH, internal API services.
uphiago / s3-minio-content-type-xssExploit public bucket Content-Type override for stored XSS on target origin.
uphiago / scada-hikvision-isapiEnumerate Hikvision ISAPI endpoints on SCADA and IoT web interfaces.
uphiago / unauth-api-flow-hijackExploit unauthenticated multi-step API flows without credentials.
uphiago / cloud-iam-deepGCP/AWS/Azure cloud exploitation -- Cloud Functions, Firestore, Cloud Run, S3, MinIO, Blob Storage, SA keys
uphiago / hunt-fastapiHunt FastAPI-specific vulnerabilities: dependency injection gaps, Pydantic coercion, and OpenAPI mining.
uphiago / pentest-playbook7-phase pentest pipeline from passive recon to exploitation.
uphiago / hunt-djangoHunt Django-specific vulnerabilities: DRF permission gaps, ORM injection, and admin exploitation.
uphiago / cross-attack-chainsUse when two or more verified findings may combine into a higher-impact authorized attack path.
uphiago / cross-wave-delta-analysisCompare recon waves to find NEW, REGRESSED, PERSISTENT findings.
uphiago / email-securityDMARC/SPF/DKIM check, email spoofing, SMTP test, and security header analysis
uphiago / bug-bountyMaster bug bounty orchestrator — full pipeline: recon, pre-hunt learning, vulnerability hunting (30+ classes), A-to-B chaining, AI/LLM testing (ASI01-ASI10), language-specific grep, bypass tables, and reporting (7-question gate, CVSS 3.1, human-tone templates).
uphiago / wordpress-full-compromiseUse when verified WordPress findings may combine into an authorized path to administrative or server control.
gooseworks-ai / competitor-ad-intelligenceScrape competitor ads from Meta, TikTok, Google, and LinkedIn ad libraries, analyze creative patterns (hooks, formats, CTAs), reverse-engineer landing page funnels, and produce a strategic teardown with vulnerability analysis and counter-play recommendations
BankrBot / wake-token-spotter-analysisGet the WAKE engine's analysis of any Base token by contract address. Returns a transparent 0-100 score across five criteria (deployer quality, liquidity health, contract safety, market signals, social signals), launch protocol classification (Bankr/Clanker/direct), security flags from GoPlus, contr…
BankrBot / trustlayer-sybil-scannerFeedback forensics for ERC-8004 agents. Detects Sybil rings, fake reviews, rating manipulation, and reputation laundering across 20 chains. No API key needed.
BankrBot / berry-juicerSingle-sided token-supply yield on Base, paid as AI inference
