GitHub
json-validation
Centralized JSON validation for AGENT_SUCCESS_CRITERIA with defensive parsing and injection attack prevention (CVSS 8.2)
☆ 14View skill
tools security AI Skills
Discover tools security skills, compare source repositories and read the instructions for each workflow.
Categories: tools security
tools security Clear filters
Browse skills
GitHub
ldap-injection-testing
This skill should be used when the user asks to "test for LDAP injection vulnerabilities", "exploit LDAP queries", "perform blind LDAP injection attacks", "bypass authentication using LDAP injection", "extract...
☆ 14View skill
GitHub
external-network-penetration-testing
This skill should be used when the user asks to "perform external pentesting", "conduct external network assessment", "enumerate external attack surface", "perform OSINT reconnaissance", or "test perimeter secu...
☆ 14View skill
GitHub
jwt-security-testing
This skill should be used when the user asks to "test JWT security", "hack JWT tokens", "bypass JWT authentication", "crack JWT secrets", or "exploit JWT vulnerabilities". It provides comprehensive JSON Web Tok...
☆ 14View skill
GitHub
api-fuzzing-for-bug-bounty
This skill should be used when the user asks to "test API security", "fuzz APIs", "find IDOR vulnerabilities", "test REST API", "test GraphQL", "API penetration testing", "bug bounty API testing", or needs guid...
☆ 14View skill
GitHub
broken-authentication-testing
This skill should be used when the user asks to "test for broken authentication vulnerabilities", "assess session management security", "perform credential stuffing tests", "evaluate password policies", "test f...
☆ 14View skill
GitHub
credential-harvesting-lab-setup
This skill should be used when the user asks to "build a phishing lab", "perform credential harvesting", "set up ARP spoofing", "configure DNS spoofing", "create a fake login page", or "test social engineering...
☆ 14View skill
GitHub
phishing-attacks
The assistant guides users through phishing attack simulation tools and techniques for penetration testing and security awareness. Activate when users ask about "phishing simulation," "social engineering testin...
☆ 14View skill
GitHub
security-audit
Security vulnerability analysis to detect hardcoded secrets, dangerous patterns, and unsafe code practices.
☆ 14View skill
GitHub
account-recovery
Guidance and guardrails for secure account recovery workflows including identity verification and password reset.
☆ 14View skill
GitHub
owasp-mobile-security-checker
Analyze Flutter and mobile applications for OWASP Mobile Top 10 (2024) security compliance. Use this skill when performing security audits, vulnerability assessments, or compliance checks on mobile applications...
☆ 14View skill
GitHub
auth
Authentication and authorization patterns including OAuth2, JWT, RBAC/ABAC, session management, API keys, password hashing, and MFA. USE WHEN: Implementing login flows, access control, identity management, tok...
☆ 13View skill
GitHub
data-validation
Data validation patterns including schema validation, input sanitization, output encoding, and type coercion. Use when implementing validate, validation, schema, form validation, API validation, JSON Schema, Zo...
☆ 13View skill
GitHub
security-audit
Performs comprehensive security audits identifying vulnerabilities, misconfigurations, and security best practice violations across applications, APIs, infrastructure, and data pipelines. Covers OWASP Top 10, c...
☆ 13View skill
GitHub
rate-limiting
API rate limiting and quota management implementation. Use when implementing request throttling, API quotas, backpressure handling, or protection against abuse. Keywords: rate limiting, rate limit, throttle, th...
☆ 13View skill
GitHub
powershell-security
Modern PowerShell security practices including SecretManagement, JEA, WDAC, and credential protection
☆ 13View skill
GitHub
nextjs-authentication
Complete Next.js authentication system. PROACTIVELY activate for: (1) NextAuth.js (Auth.js) setup, (2) OAuth providers (GitHub, Google), (3) Credentials provider, (4) Session management (JWT/database), (5) Prot...
☆ 13View skill
GitHub
security-first-2025
Security-first bash scripting patterns for 2025 (mandatory validation, zero-trust)
☆ 13View skill
GitHub
uncertainty-verification
Use when providing exact commands, flags, config keys, file paths, API details, standards, or version-specific behavior - enforces verification via official docs (Context7/web fetch), explicit citations, and ba...
☆ 13View skill
GitHub
scan-vulnerabilities
Detect security vulnerabilities in code and dependencies. Use when auditing security.
☆ 13View skill
GitHub
agent-penetration-tester
Expert penetration tester specializing in ethical hacking, vulnerability assessment, and security testing. Masters offensive security techniques, exploit development, and comprehensive security assessments with...
☆ 13View skill
GitHub
agent-skill-evaluator
Comprehensive security and safety evaluation system for agent skills (.skill files). Use when users provide GitHub URLs, website links, or .skill files for download and request security assessment, safety evalu...
☆ 13View skill
GitHub
security-specialist
Auditing for unsafe code and secrets.
☆ 13View skill
GitHub
vulnerability-resolver
Specialized CVE and vulnerability management for morphir-dotnet. Use when user asks to scan for vulnerabilities, fix CVEs, suppress false positives, review security reports, or manage dependency-check. Triggers...
☆ 12View skill
The default order uses GitHub repository stars from our indexed data. Stars belong to the source repository and may be shared by multiple skills. They indicate repository interest, not skill installs or an independent quality score.