Skip to content

Skills Directory

Skills Learn Security Categories Docs Blog Pro Advertise

Claude Skills by allsmog

github.com/allsmog

52 skillsA× 38B× 8C× 2D× 2F× 20 installs66 views

Ai Ml AttacksAThis skill should be used when the user asks about "AI security", "ML pipeline attacks", "prompt injection", "model deserialization", "unsafe model loading", "Jupyter injection", "LLM security", or needs to identify AI/ML-specific vulnerabilities in codebases that use machine learning frameworks.securityjavascriptpythonVotes: 0GitHub stars: 24
Business LogicAThis skill should be used when the user asks about "business logic", "workflow vulnerability", "trust boundary", "state machine", "authorization bypass", "multi-step process", "workflow bypass", "application logic flaw", or needs to identify business logic vulnerabilities during whitebox security review.developmentpythonrustVotes: 0GitHub stars: 24
Cache PoisoningAThis skill should be used when the user asks about "cache poisoning", "web cache deception", "CDN cache", "proxy cache", "nginx cache", "varnish", "cache key manipulation", "response caching", or needs to find cache-related vulnerabilities during whitebox security review.developmentpythongoVotes: 0GitHub stars: 24
Cloud NativeAThis skill should be used when the user asks about "cloud security", "AWS security", "GCP security", "Azure security", "Kubernetes security", "IMDS", "instance metadata", "S3 bucket policy", "IAM", "serverless security", "Lambda security", "container security", "cloud misconfiguration", "SSRF to cloud metadata", or needs to identify cloud-native security issues during whitebox security review.developmentrustgoVotes: 0GitHub stars: 24
Compliance MappingAThis skill should be used when the user asks about "compliance mapping", "PCI-DSS", "HIPAA", "SOC 2", "NIST CSF", "regulatory requirements", "compliance report", or needs to map security findings to compliance framework requirements.securityrustgoVotes: 0GitHub stars: 24
Cpg AnalysisAThis skill should be used when the user asks about "Code Property Graph", "CPG analysis", "Joern queries", "CPGQL", "data flow verification", "taint tracking with Joern", "semantic code analysis", or needs to understand how CPG-based verification works for vulnerability detection.developmentjavascripttypescriptVotes: 0GitHub stars: 24
Skills DirectorySkills Directory Look up any of 103,619 scanned skills — grade, score, and every finding. Free.Check a skill
Cross ComponentAThis skill should be used when analyzing multi-service architectures, frontend-backend interactions, microservices, or when looking for vulnerabilities that span multiple components. Use when the user asks about "cross-component", "frontend to backend", "service interaction", "internal service access", or "multi-service vulnerabilities".developmentrustgoVotes: 0GitHub stars: 24
Cryptographic FailuresBThis skill should be used when the user asks about "cryptographic failures", "weak encryption", "hardcoded secrets", "insecure random", "MD5", "SHA1", "weak hashing", or needs to find crypto-related vulnerabilities during whitebox security review.developmentjavascripttypescriptVotes: 0GitHub stars: 24
Dangerous FunctionsAThis skill should be used when the user asks about "dangerous functions", "security sinks", "what functions are dangerous in PHP/Java/Python", "find vulnerable functions", "code execution functions", "command injection sinks", "SQL injection functions", or needs to identify security-sensitive functions in source code during whitebox security review.developmentjavascriptpythonVotes: 0GitHub stars: 24
Data Flow TracingAThis skill should be used when the user asks to "trace data flow", "follow user input", "source to sink analysis", "track variable", "find input sources", "taint analysis", or needs to understand how user-controlled data flows through an application during whitebox security review.developmentpythongoVotes: 0GitHub stars: 24
Exception HandlingBThis skill should be used when the user asks about "XXE", "XML External Entity", "error handling", "exception disclosure", "stack trace exposure", "improper error handling", or needs to find exception-related vulnerabilities during whitebox security review.developmentjavascripttypescriptVotes: 0GitHub stars: 24
Exploit TechniquesAThis skill should be used when the user asks to "write an exploit", "create PoC", "develop proof of concept", "exploit script", "automate exploitation", "build exploit", or needs guidance on developing working exploits during whitebox security review.developmentjavascriptpythonVotes: 0GitHub stars: 24
Framework PatternsAThis skill should be used when the user asks about "framework vulnerabilities", "Next.js security", "Flask security", "Django security", "Rails security", "Spring security", "GraphQL security", "Server Actions", "render_template_string", "SSTI patterns", "redirect SSRF", "mass assignment", "actuator exposure", "SpEL injection", "introspection", or needs to identify framework-specific vulnerability patterns during whitebox security review.developmentpythonrustVotes: 0GitHub stars: 24
Logging FailuresAThis skill should be used when the user asks about "logging failures", "log injection", "insufficient logging", "audit logging", "security logging", "CWE-117", or needs to find logging-related vulnerabilities during whitebox security review.developmenttypescriptpythonVotes: 0GitHub stars: 24
Mixed Language MonoreposBThis skill should be used when the user is auditing a "polyglot monorepo", "multi-language codebase", "microservices with different languages", "Go + Python + TypeScript", or any codebase with services written in different programming languages. Provides strategies for cross-service security analysis and unified threat modeling.developmentjavascripttypescriptVotes: 0GitHub stars: 24
Mobile AndroidAUse this skill when the user is auditing a decompiled Android application — directory structure includes `jadx_out/` / `apktool_out/`, files end in `.smali` / are jadx-renamed to `defpackage/*.java`, or the conversation mentions an APK / xAPK / `com.example.*` package. Covers the high-signal vulnerability classes vuln-scout detects in decompiled APKs and the conventions for running the unified mobile-audit workflow.developmentjavascriptpythonVotes: 0GitHub stars: 24
Mobile IosAUse this skill when the user is auditing an iOS application — directory contains `.ipa`, `Info.plist`, `*.swift`, `*.m`, `*.mm`, or an `xcodeproj`. Also activates when the conversation mentions WKWebView, NSURLSession, Keychain, App Transport Security, or any `com.apple.*` / `bundleidentifier`-style iOS package name.developmentjavascriptrustVotes: 0GitHub stars: 24
Mobile PaymentsAUse this skill when reviewing mobile code that handles card data, payment tokenization, or third-party payment SDK integrations (Braintree, Stripe, Adyen, Google Pay, Apple Pay, FirstData-style iframe encryptors). The skill catalogues the high-signal attack patterns vuln-scout detects in mobile payment flows — server-controlled tokenization URLs, JavaScript-injection-into-WebView card-data exfiltration, JS-bridge token construction, and payment scope mismatches — and maps each to the detector...developmentjavascriptrustVotes: 0GitHub stars: 24
Nextjs ReactAThis skill should be used when the user asks about "Next.js security", "React security", "Server Components", "Server Actions", "Route Handlers", "RSC vulnerabilities", "SSR security", or needs comprehensive Next.js/React security analysis during whitebox security review.developmenttypescriptgoVotes: 0GitHub stars: 24
Owasp 2025AUse this skill when the user asks for OWASP Top 10 mapping, CWE alignment, or standards-oriented reporting. The directory name stays `owasp-2025` for backward compatibility, but external reports should use official OWASP Top 10 names.securityrustgoVotes: 0GitHub stars: 24
Owasp Api Top10AThis skill should be used when the user asks about "API security", "OWASP API Top 10", "BOLA", "broken object level authorization", "API authentication", "mass assignment", "GraphQL security", "gRPC security", "rate limiting", "API abuse", "REST API vulnerabilities", or needs to identify API-specific security issues during whitebox security review.developmentjavascriptpythonVotes: 0GitHub stars: 24
Postmessage XssADetect postMessage handlers that trust unvalidated origins or write attacker-controlled data to dangerous DOM sinks.developmentjavascriptrustVotes: 0GitHub stars: 24
Sandbox EscapesAThis skill should be used when the user asks about "sandbox escape", "vm escape", "template injection to RCE", "SSTI exploitation", "vm2 bypass", "restricted execution bypass", "sandbox breakout", or needs to identify sandbox escape and template engine exploitation techniques during whitebox security review.developmentpythonrubyVotes: 0GitHub stars: 24
Secret ScanningBThis skill should be used when the user asks about "secret scanning", "find secrets", "hardcoded credentials", "leaked API keys", "git history secrets", "credential scanning", "detect passwords in code", or needs to identify secrets and credentials in source code or git history during whitebox security review.developmentjavascripttypescriptVotes: 0GitHub stars: 24
Security MisconfigurationAThis skill should be used when the user asks about "security misconfiguration", "default credentials", "debug mode", "security headers", "exposed endpoints", "TLS configuration", or needs to find configuration-related vulnerabilities during whitebox security review.developmenttypescriptpythonVotes: 0GitHub stars: 24
Sensitive Data LeakageADetect ANY credential/secret flowing to ANY output sink. Use when asked about "credential leakage", "secret logging", "sensitive data exposure", "CWE-532", "password in logs", "token exposure", or security logging issues.developmentjavascripttypescriptVotes: 0GitHub stars: 24
Package EvidenceABundle findings, reports, audit plan, and ledger into one evidence zip.securityVotes: 0GitHub stars: 24
Review PrADiff-aware PR security review with verified findings and PR comment payload.code-qualitycode-reviewgitVotes: 0GitHub stars: 24
Scope RepoADecide audit boundaries for large or monorepo targets and write audit-plan.md.developmentrustVotes: 0GitHub stars: 24
Start AuditAGuided first-run security audit: doctor, scope, threats, scan, verify, report.securitypythoncode-reviewVotes: 0GitHub stars: 24
Verify FindingADrive a single finding through CPG verification and false-positive triage.securityVotes: 0GitHub stars: 24
Threat ModelingAThis skill should be used when the user asks about "threat model", "STRIDE", "data flow diagram", "attack surface", "threat analysis", "security architecture", "component threats", "trust boundaries", "technology decomposition", or needs systematic threat identification during whitebox security review.securityrustgoVotes: 0GitHub stars: 24
Vuln PatternsAThis skill should be used when the user asks about "vulnerability patterns", "how to find SQL injection", "XSS patterns", "command injection techniques", "OWASP vulnerabilities", "common web vulnerabilities", "exploitation patterns", or needs to understand how specific vulnerability classes work during whitebox security review.developmentjavascriptpythonVotes: 0GitHub stars: 24
Vulnerability ChainsAThis skill should be used when the user asks about "vulnerability chains", "chained exploits", "multi-step attacks", "SSRF to RCE", "pivot attacks", or needs to identify how vulnerabilities in different components can be combined during whitebox security review.securityrustshellVotes: 0GitHub stars: 24
Workspace DiscoveryAThis skill should be used when the user asks to "detect workspaces", "find packages", "list monorepo packages", "workspace structure", "monorepo analysis", or needs to identify workspace/package boundaries in a codebase for focused security analysis.developmentjavascripttypescriptVotes: 0GitHub stars: 24
Ad AttacksAThis skill should be used when the user asks about "Active Directory", "Kerberoasting", "AS-REP roasting", "LDAP enumeration", "BloodHound", "DCSync", "Pass-the-Hash", "Golden Ticket", or needs guidance on attacking Windows domain environments.securitypythongoVotes: 0GitHub stars: 5
Cacti ExploitationBThis skill covers Cacti network monitoring tool exploitation including authenticated RCE via graph templates (CVE-2025-24367), unauthenticated command injection (CVE-2022-46169), and authentication bypass techniques.securitypythonphpVotes: 0GitHub stars: 5
Common ExploitsDThis skill should be used when the user asks about "searchsploit", "CVE exploits", "exploit database", "common vulnerabilities", "reverse shells", "webshells", or needs guidance on exploiting common vulnerabilities and services.securitypythongoVotes: 0GitHub stars: 5
Container EscapesDThis skill covers container escape techniques for Docker, LXC/LXD, and Kubernetes environments. Includes Docker socket escape, Docker Desktop API escape (192.168.65.7:2375), privileged container breakout, and capability-based escapes.securitybashnodeVotes: 0GitHub stars: 5
Credential AttacksBThis skill should be used when the user asks about "password cracking", "brute force", "hydra", "hashcat", "john", "credential stuffing", "password spraying", or needs guidance on credential-based attacks.securitygophpVotes: 0GitHub stars: 5
Ctf Writeup LookupAThis skill should be used when stuck on a CTF challenge or when the user asks to look up a writeup. Use EARLY when brute forcing or guessing seems like the only option - writeups often reveal the intended path. Trigger on: "look up writeup", "how do others solve", "stuck", "what's the intended path", machine names like "Soulmate", "Headless".securitygobashVotes: 0GitHub stars: 5
Database ExtractionAThis skill should be used when the user asks about "dump database", "extract credentials", "sqlite", "mysql credentials", "database passwords", or needs to extract user data from common database systems.securityjavascriptgoVotes: 0GitHub stars: 5
Erlang ExploitationBThis skill should be used when Erlang/OTP services are detected: - Port 4369 (EPMD - Erlang Port Mapper Daemon) - Erlang SSH (usually port 2222) - RabbitMQ, CouchDB, or other Erlang-based services Covers CVE-2025-32433 pre-auth RCE and other Erlang attack vectors.securitypythonshellVotes: 0GitHub stars: 5
Ftp ExploitationFThis skill should be used when FTP services are detected including: - CrushFTP (CVE-2025-31161 auth bypass) - vsftpd (backdoor) - ProFTPD (mod_copy) - Pure-FTPd, FileZilla Server Covers authentication bypass, file access, and privilege escalation.securityphpshellVotes: 0GitHub stars: 5
Hash CrackingBThis skill should be used when the user asks about "crack hash", "identify hash", "hashcat", "john", "found hash", or needs to crack password hashes. Provides complete workflow from hash identification to cracking.securitygophpVotes: 0GitHub stars: 5
Linux PrivescFThis skill should be used when the user asks about "Linux privilege escalation", "linpeas", "SUID", "sudo abuse", "GTFOBins", "kernel exploits", "cron jobs", "capabilities", or needs guidance on escalating privileges on Linux systems.securitypythonrubyVotes: 0GitHub stars: 5
Password HuntingCThis skill should be used when you have shell access and need to find credentials for lateral movement or privilege escalation. Covers: - Grepping for passwords in config files - Common credential locations - Database extraction - History files and environment variablessecuritypythongoVotes: 0GitHub stars: 5
Php Type JugglingAThis skill covers PHP type juggling vulnerabilities including magic hashes, loose comparison bypass, and authentication circumvention. Use when encountering PHP applications with password reset, token validation, or strcmp-based auth.securitygophpVotes: 0GitHub stars: 5
ReconnaissanceAThis skill should be used when the user asks about "nmap", "port scanning", "network reconnaissance", "service discovery", "masscan", "host discovery", "banner grabbing", or needs guidance on network enumeration techniques.securityrustgoVotes: 0GitHub stars: 5
Source Code PatternsAThis skill should be used when analyzing discovered source code for security issues. Helps identify dangerous functions, hardcoded secrets, and vulnerable packages.developmentjavascriptpythonVotes: 0GitHub stars: 5

Skills Directory

Security-tested agent skills for Claude, coding agents, and AI workflows.

Stay in the loop

Get weekly updates on the best new skills and tutorials.

Email address

Directory

Browse skills
All skills A–Z
Claude skills
Claude Code skills
Agent skills
Categories
Authors
Submit a skill

Learn and security

Learn hub
Install Claude skills
Write SKILL.md
Skills vs MCP
Directories compared
Security
Security methodology
Secure Claude skills
Security badges

Company

About
Pro
Blog
API docs
Chrome extension
Skill Manager
Advertise
Terms
Privacy
Refunds

© 2026 Skills Directory. All rights reserved.