Skills DirectorySkills Directory
All authors
costrict-plugins-repo avatar

Claude Skills by costrict-plugins-repo

github.com/costrict-plugins-repo
818 skillsA× 697B× 83C× 17D× 12F× 90 installs64 views
Performing Blind Ssrf ExploitationA

Detect and exploit blind Server-Side Request Forgery (SSRF) using out-of-band

toolspythongo
0
67
Performing Bluetooth Security AssessmentA

Assess Bluetooth Low Energy (BLE) device security using Python's bleak asyncio

securitypythontesting
0
67
Performing Brand Monitoring For ImpersonationA

Monitor for brand impersonation attacks across domains, social media,

content-marketingpythonrust
0
67
Performing Clickjacking Attack TestA

Testing web applications for clickjacking vulnerabilities by assessing

securityjavascriptpython
0
67
Performing Cloud Asset Inventory With CartographyB

Run Cartography to sync AWS, GCP, or Azure resources into a Neo4j graph database,

devopspythonrust
0
67
Performing Cloud Forensics InvestigationA

Collect and analyze cloud forensic evidence using AWS CLI, Azure CLI, or gcloud

devopspythongo
0
67
Performing Cloud Forensics With Aws CloudtrailA

Investigate AWS account compromise by querying CloudTrail with boto3's LookupEvents

businesspythonsql
0
67
Performing Cloud Incident Containment ProceduresA

Execute cloud-native incident containment across AWS, Azure, and GCP using platform

securitypythonrust
0
67
Performing Cloud Log Forensics With AthenaB

'Uses AWS Athena to query CloudTrail, VPC Flow Logs, S3 access logs,

devopspythongo
0
67
Performing Cloud Native Forensics With FalcoB

'Uses Falco YAML rules for runtime threat detection in containers and

devopspythonshell
0
67
Performing Cloud Native Threat Hunting With Aws DetectiveA

Investigate AWS security incidents using Amazon Detective's behavior graphs,

researchpythonbash
0
67
Performing Cloud Penetration Testing With PacuA

'Run authorized AWS penetration tests with Pacu, the open-source AWS exploitation

securityrustgo
0
67
Performing Cloud Storage Forensic AcquisitionB

Perform forensic acquisition of cloud storage services including Google

securitypythongo
0
67
Performing Container Escape DetectionA

Audits container and pod configuration for escape-enabling misconfiguration using the Kubernetes Python client - privileged flags, dangerous capability grants, host path mounts, shared namespaces, and CVE-2022-0492 style cgroup abuse. Use when sweeping a cluster for workloads that could break out, producing a posture report, or checking configuration before enforcement is switched on. Keywords: privileged, hostPath, hostPID, capabilities, CVE-2022-0492, cgroup, kubernetes python client, postu...

devopspythondocker
0
67
Performing Container Image HardeningB

'Harden container images by minimizing attack surface, stripping unnecessary

devopspythongo
0
67
Performing Container Security Scanning With TrivyA

Runs Trivy across every target type it supports - container images, filesystems, Git repositories, and Kubernetes clusters - for OS and dependency vulnerabilities, IaC misconfiguration, exposed secrets, and licences, generating CycloneDX or SPDX SBOMs. Use when integrating Trivy into CI/CD, deploying the Trivy Kubernetes operator, scanning non-image targets, or triaging results at scale. Keywords: Trivy, trivy k8s, operator, SBOM, CycloneDX, SPDX, misconfig, secret scanning. Do not use for a ...

devopsdockerkubernetes
0
67
Performing Content Security Policy BypassA

Analyze Content-Security-Policy headers and bypass them to achieve cross-site

developmentjavascriptgo
0
67
Performing Credential Access With LazagneA

Extract stored credentials from compromised endpoints using the LaZagne

securitypythongo
0
67
Performing Cryptographic Audit Of ApplicationA

A cryptographic audit systematically reviews an application's use of

securitypythongo
0
67
Performing Csrf Attack SimulationA

Testing web applications for Cross-Site Request Forgery vulnerabilities

securityjavascriptpython
0
67
Performing Cve Prioritization With Kev CatalogA

Fetch and parse the CISA Known Exploited Vulnerabilities (KEV) catalog,

securitypythongo
0
67
Performing Dark Web Monitoring For ThreatsA

Dark web monitoring involves systematically scanning Tor hidden services,

securityjavascriptpython
0
67
Performing Deception Technology DeploymentA

'Deploys deception technology including honeypots, honeytokens, and decoy

devopspythongo
0
67
Performing Directory Traversal TestingC

Test web applications for path traversal and Local/Remote File Inclusion

securitygophp
0
67
Performing Disk Forensics InvestigationA

'Conduct disk forensics investigations using forensic imaging, file system

toolsgoshell
0
67
Performing Dmarc Policy Enforcement RolloutA

Execute a phased DMARC rollout by inventorying sending sources, configuring

devopsgotesting
0
67
Performing Dns Enumeration And Zone TransferA

'Enumerates DNS records, attempts zone transfers, brute-forces subdomains,

securitygobash
0
67
Performing Dns Tunneling DetectionA

'Detects DNS tunneling by computing Shannon entropy of DNS query names,

securitypythongo
0
67
Performing Docker Bench Security AssessmentA

Runs Docker Bench for Security, the open-source CIS Docker Benchmark audit script, across host configuration, daemon settings, images, and runtime configuration, then interprets pass/fail/warn output and remediates the common failures. Use when auditing Docker hosts for CIS compliance, scheduling recurring container assessments, or validating runtime hardening controls after a change. Keywords: docker-bench-security, CIS Docker Benchmark, audit script, pass fail warn, host configuration, reme...

devopsrustbash
0
67
Performing Dynamic Analysis Of Android AppA

'Performs runtime dynamic analysis of Android applications using Frida,

securityjavascriptpython
0
67
Performing Dynamic Analysis With Any RunA

'Perform interactive dynamic malware analysis using the ANY.RUN cloud sandbox

securityrustgo
0
67
Performing Endpoint Forensics InvestigationA

'Performs digital forensics investigation on compromised endpoints including

researchshellbash
0
67
Performing Endpoint Vulnerability RemediationA

'Performs vulnerability remediation on endpoints by prioritizing CVEs

securitygoshell
0
67
Performing Entitlement Review With Sailpoint IiqA

'Runs entitlement review and access certification campaigns in SailPoint

devopsgojava
0
67
Performing External Network Penetration TestB

Conduct a comprehensive external network penetration test to identify

securitypythongo
0
67
Performing False Positive Reduction In SiemA

Reduces SIEM false positives through systematic rule tuning, threshold

securitypythongo
0
67
Performing File Carving With ForemostA

Recovers files from disk images and unallocated space using Foremost's

databasespythongo
0
67
Performing Firmware Extraction With BinwalkF

'Performs firmware image extraction and analysis using binwalk to identify

securitypythongo
0
67
Performing Firmware Malware AnalysisD

'Analyzes firmware images for embedded malware, backdoors, and unauthorized

businesspythongo
0
67
Performing Fuzzing With AflplusplusA

'Performs coverage-guided fuzzing of compiled binaries with AFL++, instrumenting

researchgotesting
0
67
Performing Gcp Penetration Testing With GcpbucketbruteA

Performs authorized GCP security testing using GCPBucketBrute to enumerate

securitypythongo
0
67
Performing Gcp Security Assessment With ForsetiA

'Performing comprehensive security assessments of Google Cloud Platform

securitypythongo
0
67
Performing Graphql Depth Limit AttackA

Execute and test GraphQL depth limit attacks using deeply nested recursive

securityjavascriptpython
0
67
Performing Graphql Introspection AttackA

'Performs GraphQL introspection attacks that extract the full API schema

securitypythongo
0
67
Performing Graphql Security AssessmentA

Assessing GraphQL API endpoints for introspection leaks, injection attacks,

securitypythongo
0
67
Performing Hardware Security Module IntegrationA

Integrates Hardware Security Modules (HSMs) via the PKCS#11 interface

businesspythongo
0
67
Performing Hash Cracking With HashcatB

Cracks password hashes with Hashcat, covering hash-type identification,

securitypythontesting
0
67
Performing Http Parameter Pollution AttackA

Executes HTTP Parameter Pollution attacks that inject duplicate request

securitypythonrust
0
67
Performing Ics Asset Discovery With ClarotyA

'Performs ICS/OT asset discovery with Claroty xDome, combining passive

securitypythongo
0
67
Performing Indicator Lifecycle ManagementA

Tracks IOCs through discovery, enrichment/validation (VirusTotal, Shodan,

devopspythonrust
0
67