GitHub
json-validation
Centralized JSON validation for AGENT_SUCCESS_CRITERIA with defensive parsing and injection attack prevention (CVSS 8.2)
☆ 14Voir le skill
Skills IA tools security
Découvrez les skills tools security, comparez leurs dépôts et consultez leurs instructions.
Catégories: tools security
tools security Effacer les filtres
Explorer
GitHub
ldap-injection-testing
This skill should be used when the user asks to "test for LDAP injection vulnerabilities", "exploit LDAP queries", "perform blind LDAP injection attacks", "bypass authentication using LDAP injection", "extract...
☆ 14Voir le skill
GitHub
external-network-penetration-testing
This skill should be used when the user asks to "perform external pentesting", "conduct external network assessment", "enumerate external attack surface", "perform OSINT reconnaissance", or "test perimeter secu...
☆ 14Voir le skill
GitHub
jwt-security-testing
This skill should be used when the user asks to "test JWT security", "hack JWT tokens", "bypass JWT authentication", "crack JWT secrets", or "exploit JWT vulnerabilities". It provides comprehensive JSON Web Tok...
☆ 14Voir le skill
GitHub
api-fuzzing-for-bug-bounty
This skill should be used when the user asks to "test API security", "fuzz APIs", "find IDOR vulnerabilities", "test REST API", "test GraphQL", "API penetration testing", "bug bounty API testing", or needs guid...
☆ 14Voir le skill
GitHub
broken-authentication-testing
This skill should be used when the user asks to "test for broken authentication vulnerabilities", "assess session management security", "perform credential stuffing tests", "evaluate password policies", "test f...
☆ 14Voir le skill
GitHub
credential-harvesting-lab-setup
This skill should be used when the user asks to "build a phishing lab", "perform credential harvesting", "set up ARP spoofing", "configure DNS spoofing", "create a fake login page", or "test social engineering...
☆ 14Voir le skill
GitHub
phishing-attacks
The assistant guides users through phishing attack simulation tools and techniques for penetration testing and security awareness. Activate when users ask about "phishing simulation," "social engineering testin...
☆ 14Voir le skill
GitHub
security-audit
Security vulnerability analysis to detect hardcoded secrets, dangerous patterns, and unsafe code practices.
☆ 14Voir le skill
GitHub
account-recovery
Guidance and guardrails for secure account recovery workflows including identity verification and password reset.
☆ 14Voir le skill
GitHub
owasp-mobile-security-checker
Analyze Flutter and mobile applications for OWASP Mobile Top 10 (2024) security compliance. Use this skill when performing security audits, vulnerability assessments, or compliance checks on mobile applications...
☆ 14Voir le skill
GitHub
auth
Authentication and authorization patterns including OAuth2, JWT, RBAC/ABAC, session management, API keys, password hashing, and MFA. USE WHEN: Implementing login flows, access control, identity management, tok...
☆ 13Voir le skill
GitHub
data-validation
Data validation patterns including schema validation, input sanitization, output encoding, and type coercion. Use when implementing validate, validation, schema, form validation, API validation, JSON Schema, Zo...
☆ 13Voir le skill
GitHub
security-audit
Performs comprehensive security audits identifying vulnerabilities, misconfigurations, and security best practice violations across applications, APIs, infrastructure, and data pipelines. Covers OWASP Top 10, c...
☆ 13Voir le skill
GitHub
rate-limiting
API rate limiting and quota management implementation. Use when implementing request throttling, API quotas, backpressure handling, or protection against abuse. Keywords: rate limiting, rate limit, throttle, th...
☆ 13Voir le skill
GitHub
powershell-security
Modern PowerShell security practices including SecretManagement, JEA, WDAC, and credential protection
☆ 13Voir le skill
GitHub
nextjs-authentication
Complete Next.js authentication system. PROACTIVELY activate for: (1) NextAuth.js (Auth.js) setup, (2) OAuth providers (GitHub, Google), (3) Credentials provider, (4) Session management (JWT/database), (5) Prot...
☆ 13Voir le skill
GitHub
security-first-2025
Security-first bash scripting patterns for 2025 (mandatory validation, zero-trust)
☆ 13Voir le skill
GitHub
uncertainty-verification
Use when providing exact commands, flags, config keys, file paths, API details, standards, or version-specific behavior - enforces verification via official docs (Context7/web fetch), explicit citations, and ba...
☆ 13Voir le skill
GitHub
scan-vulnerabilities
Detect security vulnerabilities in code and dependencies. Use when auditing security.
☆ 13Voir le skill
GitHub
agent-penetration-tester
Expert penetration tester specializing in ethical hacking, vulnerability assessment, and security testing. Masters offensive security techniques, exploit development, and comprehensive security assessments with...
☆ 13Voir le skill
GitHub
agent-skill-evaluator
Comprehensive security and safety evaluation system for agent skills (.skill files). Use when users provide GitHub URLs, website links, or .skill files for download and request security assessment, safety evalu...
☆ 13Voir le skill
GitHub
security-specialist
Auditing for unsafe code and secrets.
☆ 13Voir le skill
GitHub
vulnerability-resolver
Specialized CVE and vulnerability management for morphir-dotnet. Use when user asks to scan for vulnerabilities, fix CVEs, suppress false positives, review security reports, or manage dependency-check. Triggers...
☆ 12Voir le skill
Le classement utilise les étoiles du dépôt GitHub indexé. Plusieurs skills peuvent partager ce nombre : ce n’est ni un nombre d’installations ni une note de qualité.