110 skills found · Page 3 of 4
Jeffallan / secure-code-guardianUse when implementing authentication/authorization, securing user input, or preventing OWASP Top 10 vulnerabilities — including custom security implementations such as hashing passwords with bcrypt/argon2, sanitizing SQL queries with parameterized statements, configuring CORS/CSP headers, validating…
Jeffallan / code-reviewerAnalyzes code diffs and files to identify bugs, security vulnerabilities (SQL injection, XSS, insecure deserialization), code smells, N+1 queries, naming issues, and architectural concerns, then produces a structured review report with prioritized, actionable feedback
Jeffallan / fullstack-guardianBuilds security-focused full-stack web applications by implementing integrated frontend and backend components with layered security at every level. Covers the complete stack from database to UI, enforcing auth, input validation, output encoding, and parameterized queries across all layers
Jeffallan / security-reviewerIdentifies security vulnerabilities, generates structured audit reports with severity ratings, and provides actionable remediation guidance
android / android-intent-securityBest practices for Android Intent security. Use this skill when auditing
trailofbits / substrate-vulnerability-scannerScans Substrate/Polkadot pallets for 7 critical vulnerabilities including arithmetic overflow, panic DoS, incorrect weights, and bad origin checks
trailofbits / firebase-apk-scannerScans Android APKs for Firebase security misconfigurations including open databases, storage buckets, authentication issues, and exposed cloud functions
SnailSploit / offensive-persistenceComprehensive persistence tradecraft for authorized red team engagements covering Windows and Linux mechanisms. Windows techniques include registry Run/RunOnce keys, scheduled tasks, WMI event subscriptions, DLL search order hijacking, COM object hijacking, Startup folder drops, service creation, Se…
elementalsouls / mid-engagement-ir-detectionMethodology for detecting client SOC patches, attacker activity, and security-state changes that occur DURING a red-team engagement — and converting those observations into deliverable findings.
Dimillian / review-swarmParallel read-only multi-agent review of a current git diff or explicit file scope to find behavioral regressions, security or privacy risks, performance or reliability issues, and contract or test coverage gaps
Tiger3807861189 / j-spaceOperate a selective workspace for complex reasoning, long tasks, repository engineering, coordinated agents, and authorized security analysis
yaklang / websocket-securityWebSocket handshake, CSWSH, tooling (wsrepl, ws-harness, Burp), and common flaws
yaklang / macos-security-bypassmacOS security bypass playbook
yaklang / rsa-attack-techniquesRSA attack playbook for CTF and real-world cryptanalysis
yaklang / hackEntry P0 primary router and operating doctrine for HackSkills
yaklang / android-pentesting-tricksAndroid pentesting playbook
yaklang / hash-attack-techniquesHash attack playbook
yaklang / ios-pentesting-tricksiOS pentesting playbook
rmyndharis / error-debugging-multi-agent-reviewCoordinate specialized code, security, architecture, and performance reviewers and consolidate their results
rohitg00 / structured-code-reviewPerforms a structured five-stage code review covering requirements compliance, correctness, code quality, testing, and security/performance. Each stage uses targeted checklists and categorized feedback (Blocker/Major/Minor/Nit) with actionable suggestions and rationale
utkusen / sast-reportConsolidate all SAST vulnerability results from the sast/ folder into a single final report ranked by severity and confidentiality impact. Reads all *-results.md files and produces sast/final-report.md. Run after all vulnerability detection skills complete
uphiago / cross-attack-chainsUse when two or more verified findings may combine into a higher-impact authorized attack path.
pashov / solidity-auditorSecurity audit of Solidity code while you develop. Trigger on "audit", "check this contract", "review for security", "loop mode", "run the auditor in loop mode", "run 3 passes". Modes - default (full repo) or a specific filename.
itsmostafa / iamAWS Identity and Access Management for users, roles, policies, and permissions
brycewang-stanford / ccs-supplementaryUse when preparing ACM CCS appendices and supplementary material, including the ethics considerations appendix, protocol transcripts, formal proofs, measurement tables, and anonymized supporting material under the 12-page body limit, anonymity, and reviewer-discretion constraints for a security pape…
BagelHole / incident-responseHandle security incidents with IR playbooks and procedures. Implement detection, containment, eradication, and recovery processes
hashgraph-online / docker-patternsDocker and Docker Compose patterns for local development, container security, networking, volume strategies, and multi-service orchestration.
hoangsonww / version-releaseChoose and apply the correct semantic version bump for this repository. Use for every user-visible release, before merge when a change set should ship as patch, minor, or major, and whenever package/plugin/desktop version metadata must stay synchronized.
Masriyan / 03-exploit-developmentProof-of-concept development, payload crafting, shellcode analysis, and
Masriyan / 09-web-securityOWASP Top 10 testing, injection vulnerability detection, API security
