134 skills found · Page 4 of 5
yaklang / unauthorized-access-common-servicesUnauthorized access playbook for common exposed services
yaklang / hackEntry P0 primary router and operating doctrine for HackSkills
yaklang / android-pentesting-tricksAndroid pentesting playbook
yaklang / defi-attack-patternsDeFi attack pattern playbook
yaklang / hash-attack-techniquesHash attack playbook
yaklang / ios-pentesting-tricksiOS pentesting playbook
yaklang / sqli-sql-injectionSQL injection playbook
rmyndharis / error-debugging-multi-agent-reviewCoordinate specialized code, security, architecture, and performance reviewers and consolidate their results
rohitg00 / structured-code-reviewPerforms a structured five-stage code review covering requirements compliance, correctness, code quality, testing, and security/performance. Each stage uses targeted checklists and categorized feedback (Blocker/Major/Minor/Nit) with actionable suggestions and rationale
tjboudreaux / thinking-red-teamFor authorized security review of code, auth, or APIs you control, model the attacker, map the attack surface, and report only findings with a reproducible exploit path and verified mitigation.
utkusen / sast-reportConsolidate all SAST vulnerability results from the sast/ folder into a single final report ranked by severity and confidentiality impact. Reads all *-results.md files and produces sast/final-report.md. Run after all vulnerability detection skills complete
uphiago / wp-plugin-rest-auth-bypassScan WordPress REST API plugin endpoints for unauthenticated state-changing operations — discover write endpoints (POST/PUT/PATCH/DELETE) exposed without auth, enumerate all plugin routes, and test for unauthorized content publishing, settings modification, and data leakage.
uphiago / cors-chain-automationUse when a bounded list of authorized API endpoints needs consistent CORS triage before browser validation.
uphiago / cross-attack-chainsUse when two or more verified findings may combine into a higher-impact authorized attack path.
uphiago / wordpress-full-compromiseUse when verified WordPress findings may combine into an authorized path to administrative or server control.
pashov / solidity-auditorSecurity audit of Solidity code while you develop. Trigger on "audit", "check this contract", "review for security", "loop mode", "run the auditor in loop mode", "run 3 passes". Modes - default (full repo) or a specific filename.
itsmostafa / iamAWS Identity and Access Management for users, roles, policies, and permissions
brycewang-stanford / ccs-supplementaryUse when preparing ACM CCS appendices and supplementary material, including the ethics considerations appendix, protocol transcripts, formal proofs, measurement tables, and anonymized supporting material under the 12-page body limit, anonymity, and reviewer-discretion constraints for a security pape…
BagelHole / incident-responseHandle security incidents with IR playbooks and procedures. Implement detection, containment, eradication, and recovery processes
hashgraph-online / docker-patternsDocker and Docker Compose patterns for local development, container security, networking, volume strategies, and multi-service orchestration.
hoangsonww / version-releaseChoose and apply the correct semantic version bump for this repository. Use for every user-visible release, before merge when a change set should ship as patch, minor, or major, and whenever package/plugin/desktop version metadata must stay synchronized.
Masriyan / 03-exploit-developmentProof-of-concept development, payload crafting, shellcode analysis, and
Masriyan / 09-web-securityOWASP Top 10 testing, injection vulnerability detection, API security
Masriyan / 14-red-team-opsAuthorized red team engagement planning, C2 architecture design, attack
Masriyan / 01-recon-osintPassive and active reconnaissance, subdomain enumeration, DNS analysis,
Masriyan / 02-vulnerability-scannerDependency auditing, CVE detection, configuration security review, CVSS
Masriyan / 16-ai-llm-securityLLM and AI application security testing — prompt injection, jailbreak
Masriyan / 17-mobile-securityAndroid and iOS application security testing — static and dynamic analysis,
Masriyan / 18-ot-ics-securityOperational Technology and industrial control system security — Purdue
jabrena / 804-regulations-eu-nis2Use when reviewing, designing, or modifying Java enterprise systems from a maintainer-authored or maintainer-sanitized NIS2 engineering evidence inventory.
