Security

Security audits, vulnerabilities, compliance, auth, secrets, and safe automation

skills in category: 29,769
pages available: 1,241

Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.

Open in full browser

Browse security skills

Showing 10,105–10,128 of 29,769 skills

Pentest OrchestratorBYetkili penetration testing engagement orchestrator — scope declaration, OPSEC tagging, evidence handling disiplini. Triggers on pentest, penetration test, red team, engagement, ROE, scope, security assessment, vulnerability assessment, ethical hacking. ADVISORY/DEFENSIVE: live exploit yapmaz; metodoloji, plan, analiz, raporlama.securitygobashVotes: 0GitHub stars: 4
Pentest ForensicsBDigital forensics — evidence acquisition, memory/disk imaging analiz, timeline reconstruction, IOC extraction advisory. Triggers on forensics, DFIR, Volatility, memory analysis, disk image, Autopsy, FTK, timeline, IOC extraction, evidence chain, log analysis.securityrustgoVotes: 0GitHub stars: 4
Pentest Exploit ChainAMulti-step exploit zinciri analizi — low/medium severity bulgulari critical chain'e baglama, stealth+impact scoring advisory. Triggers on exploit chain, attack chain, chain analysis, multi-step attack, kill chain, attack path, stealth scoring, impact analysis.securitygosqlVotes: 0GitHub stars: 4
Pentest EngagementAPenetration testing engagement planning — scoping, ROE drafting, phased timeline, MITRE ATT&CK mapping, kickoff/closeout dokumantasyonu. Triggers on engagement plan, ROE, rules of engagement, scoping, pentest plan, phased plan, MITRE mapping, attack matrix, kickoff, closeout.securitygosqlVotes: 0GitHub stars: 4
Pentest CredentialsACredential testing methodology — hash crack secimi, wordlist generation, password spray (advisory), default cred audit. Triggers on credential testing, hash crack, Hashcat, John the Ripper, password spray, wordlist generation, cupp, CeWL, Crunch, hashid, default password, credential stuffing.securitygobashVotes: 0GitHub stars: 4
Pentest CicdCCI/CD red team methodology — GitHub Actions, GitLab CI, Jenkins pipeline guvenlik analizi, secret leak, workflow injection advisory. Triggers on CI/CD pentest, GitHub Actions security, GitLab CI, Jenkins, pipeline injection, workflow injection, secret leak, OIDC abuse, runner takeover, supply chain.securityrustgoVotes: 0GitHub stars: 4
Skills DirectorySkills Directory Look up any of 103,619 scanned skills — grade, score, and every finding. Free.Check a skill
Pentest BugbountyABug bounty methodology — HackerOne/Bugcrowd/Intigriti, deduplication, rapor yazimi, severity scoring, payout maksimizasyonu advisory. Triggers on bug bounty, HackerOne, Bugcrowd, Intigriti, H1, BB, dedup, severity, CVSS scoring, bug report writing, triage.securitygobashVotes: 0GitHub stars: 4
Pentest ApiAAPI security testing — REST/GraphQL/WebSocket, OWASP API Top 10, JWT/OAuth analiz, mass assignment, broken object-level authorization advisory. Triggers on API pentest, OWASP API, REST security, GraphQL test, WebSocket, JWT analysis, OAuth flow, BOLA, BFLA, mass assignment.securitypythonrustVotes: 0GitHub stars: 4
Pentest AdAActive Directory pentest methodology — BloodHound graph analiz, Kerberos abuse, ACL exploitation, lateral movement path advisory. Triggers on Active Directory, AD pentest, BloodHound, Kerberoasting, AS-REP, DCSync, Golden Ticket, Silver Ticket, NTLM relay, lateral movement, Impacket, NetExec, Certipy.securitypythonrustVotes: 0GitHub stars: 4
Payment NetworkAAssess payment network compliance — Nacha ACH rules, Visa/Mastercard requirements, state MTLssecuritygitVotes: 0GitHub stars: 4
Patient Consent SimplifierASimplify informed consent documents into patient-friendly language while maintaining regulatory compliance (FDA 21CFR50, ICH-GCP, HIPAA) and required legal elements.securitypythongoVotes: 0GitHub stars: 4
Pasta Threat Modeling FrameworkASystematically identify and classify technical and business risks using the risk-centric PASTA framework across seven stages: 1. Define the Objectives, 2. Define the Technical Scope, 3. Decompose the Application, 4. Analyze the Threats, 5. Analyze the Vulnerabilities and Weaknesses, 6. Analyze the Attacks, and 7. Analyze the Residual Risk and Impact.securityrustgoVotes: 0GitHub stars: 4
Parallel Code ReviewAParallel 3-reviewer code review: Security, Business-Logic, Architecture.securitytypescriptpythonVotes: 0GitHub stars: 4
Palo AltoAPAN-OS firewall'unda DNAT (port yönlendirme) ve security policy source kısıtlama işlerini doğal dilden uygular. Müşteri tek cümlede ister ("198.51.100.108'in 80 portu 192.168.1.50:90'a yönlendirilsin" / "RULE_108 sadece şu IP'lere açık olsun"); skill firewall'a doğrudan bağlanır, çakışmaları kontrol eder, idempotent şekilde NAT + security policy + service/address objelerini oluşturur ve commit eder. Credential'lar sadece process içinde tutulur, diske yazılmaz. Her çağrı öncesi auto-update yap...securitypythonshellVotes: 0GitHub stars: 4
Palantir Security BasicsAApply Palantir Foundry security best practices for credentials, scopes, and access control. Use when securing API tokens, implementing least privilege access, or auditing Foundry security configuration. Trigger with phrases like "palantir security", "foundry secrets", "secure palantir", "palantir API key security", "foundry scopes".securitypythongoVotes: 0GitHub stars: 4
Package Vuln Scanner Osv ApiAScans npm, PyPI, and Go module dependencies for known vulnerabilities using the OSV.dev API and GitHub Advisory Database. Generates SBOM reports in CycloneDX format.securitygogitVotes: 0GitHub stars: 4
Package SearchBSearch for packages and assess security risk before adding as dependenciessecuritypythongoVotes: 0GitHub stars: 4
Owasp Zap Security Scanner AgentAAutomates OWASP ZAP active and passive scanning against web applications, parsing alerts into structured vulnerability reports. Integrates with the ZAP API daemon to manage contexts, spider targets, and export SARIF-formatted findings.securitygogitVotes: 0GitHub stars: 4
Owasp Zap Scan OrchestratorAOrchestrates OWASP ZAP active and passive scans via the ZAP API, automating spider crawls, AJAX spidering with Selenium, and generating SARIF-format vulnerability reports.securitygogitVotes: 0GitHub stars: 4
Owasp Zap Automated Scan OrchestratorARuns OWASP ZAP active and passive scans against target URLs using the ZAP Docker API. Parses JSON reports to flag XSS, SQLi, and CSRF vulnerabilities with severity scoring.securitygosqlVotes: 0GitHub stars: 4
Owasp Security AuditAProvides comprehensive security standards and checklists based on OWASP Top 10:2025. Includes language-specific secure coding patterns for 20+ languages, guidance on Agentic AI security, and ASVS 5.0 requirements to ensure robust defense-in-depth across the development lifecycle.securityjavascripttypescriptVotes: 0GitHub stars: 4
Owasp Mobile SecurityAUse when performing security audits, vulnerability assessments, or compliance checks on Flutter or mobile applications. Covers OWASP Mobile Top 10 (2024) — hardcoded secrets (M1), insecure storage (M9), weak cryptography (M10), network issues (M5), and 6 more categories with automated scanners and remediation guidance.securitypythongoVotes: 0GitHub stars: 4
Owasp CheckerAVérifie un projet contre le OWASP Top 10 et propose des remédiations. À utiliser pour vérifier la conformité OWASP. Se déclenche avec "OWASP", "top 10", "failles web", "sécurité web", "A01 broken access", "injection", "vérifier OWASP".securitygoshellVotes: 0GitHub stars: 4
Owasp CheckAOWASP Top 10 vulnerability scanning and remediationsecurityjavascriptpythonVotes: 0GitHub stars: 4