785 skills found · Page 16 of 27
jeremylongshore / alchemy-security-basicsAnalyze and secure Alchemy credentials, browser access, wallet authority, webhook verification, and untrusted chain data
jeremylongshore / analyzing-dependenciesAudit selected project dependency reports and review declared license
jeremylongshore / analyzing-security-headers'Analyze HTTP security headers of web domains to identify vulnerabilities
jeremylongshore / apollo-enterprise-rbac'Enterprise role-based access control for Apollo.io.
elementalsouls / continuous-exposure-monitoringTurns one-shot external recon into a continuous monitoring program. Covers the scheduled re-scan-and-diff loop (baseline snapshot -> interval sleep -> re-scan -> asset/finding delta -> threshold-gated webhook alert), the scan-to-scan diff engine (new/removed/changed assets by a tracked-attribute tab…
elementalsouls / email-domain-securityRigorous, defensible email-spoofability verdict and SPF supply-chain risk analysis computed from published DNS alone. Deepens the record-level SPF/DMARC/DKIM/BIMI/MTA-STS/DNSSEC fetch recipes in the offensive-osint arsenal (§16.14) with the reasoning that section doesn't do: a priority-ordered compo…
supabase / supabaseUse when doing ANY task involving Supabase. Triggers: Supabase products (Database, Auth, Edge Functions, Realtime, Storage, Vectors, Cron, Queues); client libraries and SSR integrations (supabase-js, @supabase/ssr) in Next.js, React, SvelteKit, Astro, Remix; auth issues (login, logout, sessions, JWT…
yaklang / websocket-securityWebSocket handshake, CSWSH, tooling (wsrepl, ws-harness, Burp), and common flaws
yaklang / csp-bypass-advancedAdvanced Content Security Policy bypass techniques
yaklang / macos-security-bypassmacOS security bypass playbook
yaklang / linux-security-bypassLinux security mechanism bypass playbook
yaklang / rsa-attack-techniquesRSA attack playbook for CTF and real-world cryptanalysis
yaklang / waf-bypass-techniquesWAF bypass methodology and generic evasion techniques
yaklang / hackEntry P0 primary router and operating doctrine for HackSkills
yaklang / ai-ml-securityAI/ML security playbook
yaklang / android-pentesting-tricksAndroid pentesting playbook
yaklang / hash-attack-techniquesHash attack playbook
yaklang / ios-pentesting-tricksiOS pentesting playbook
yaklang / llm-prompt-injectionLLM prompt injection playbook
mrgoonie / repomixPackage entire code repositories into single AI-friendly files using Repomix. Capabilities include pack codebases with customizable include/exclude patterns, generate multiple output formats (XML, Markdown, plain text), preserve file structure and context, optimize for AI consumption with token coun…
mrgoonie / web-testingWeb testing with Playwright, Vitest, k6. E2E/unit/integration/load/security/visual/a11y testing. Use for test automation, flakiness, Core Web Vitals, mobile gestures, cross-browser.
mrgoonie / devopsDeploy to Cloudflare (Workers, R2, D1), Docker, GCP (Cloud Run, GKE), Kubernetes (kubectl, Helm). Use for serverless, containers, CI/CD, GitOps, security audit.
P4nda0s / rev-ios-dumpDump decrypted iOS app binaries (砸壳) from jailbroken devices using frida-ios-dump. Activate when the user wants to decrypt an iOS app, dump an IPA from a device, or extract a decrypted Mach-O binary for reverse engineering.
WordPress / wp-plugin-developmentUse when developing WordPress plugins: architecture and hooks, activation/deactivation/uninstall, admin UI and Settings API, data storage, cron/tasks, security (nonces/capabilities/sanitization/escaping), and release packaging.
LeoYeAI / 360Guard360-degree comprehensive security review Skill. Use before installing any Skill from ClawHub, GitHub, or other sources. Performs full security scans including all Skill Vetter checks plus extended system/privacy/behavior checks and automated scanning scripts.
LeoYeAI / acl-rule-analysisVendor-agnostic ACL and firewall rule analysis with shadowed rule detection, overly permissive rule identification, unused rule discovery, redundant rule flagging, and rule ordering optimization. Covers ACLs (Cisco/JunOS/EOS) and firewall policies (PAN-OS/FortiGate/CheckPoint).
LeoYeAI / agent-bomOpen security platform for agentic infrastructure — broad scanning plus MCP discovery, CVEs, blast radius, SBOMs, CIS benchmarks (AWS, Azure, GCP, Snowflake), OWASP/NIST/MITRE compliance, AISVS v1.0, MAESTRO layer tagging, and vector database security checks
LeoYeAI / agentic-loop-upgradeEnhanced agentic loop with planning, parallel execution, confidence gates, semantic error recovery, and observable state machine. Includes Mode dashboard UI for easy configuration.
LeoYeAI / openclaw-security-hardeningComplete OpenClaw Agent Security Hardening - Protects against data leaks (storage security) and prompt injection (runtime security). Use for initial setup, security audits, and ongoing maintenance. Covers file permissions, sensitive data isolation, Git protection, and command execution safety.
LeoYeAI / agent-security-hardeningSecurity hardening patterns for production AI agents. Covers prompt injection defense (7 rules), data boundary enforcement, read-only defaults for external integrations, WAL protocol for data integrity, health check scripts, integrity gates, rule escalation ladder, and session memory security
