All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 29,770
- 1,241
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 11,425–11,448 of 29,770 skills
- Gha Security ReviewFind exploitable vulnerabilities in GitHub Actions workflows. Every finding MUST include a concrete exploitation scenario — if you can't build the attack, don't report it.Votes: 0GitHub stars: 6
- Fsi Compliance CheckerMaps code, architecture, and infrastructure changes to specific control IDs in PCI-DSS v4.0 and MAS TRM (Singapore financial regulator), producing an audit-traceable findings report with per-control rVotes: 0GitHub stars: 6
- Frontend Security CoderExpert in secure frontend coding practices specializing in XSS prevention, output sanitization, and client-side security patterns.Votes: 0GitHub stars: 6
- Firmware PentestFirmware penetration testing following the OWASP FSTM nine-stage flow: extraction, EMBA automation, Firmadyne/QEMU emulation, AFL++ fuzzing, and hands-on exploitation in authorized labs.Votes: 0GitHub stars: 6
- Firmware AnalystExpert firmware analyst specializing in embedded systems, IoT security, and hardware reverse engineering.Votes: 0GitHub stars: 6
- Find BugsFind bugs, security vulnerabilities, and code quality issues in local branch changes. Use when asked to review changes, find bugs, security review, or audit code on the current branch.Votes: 0GitHub stars: 6
- File Path TraversalIdentify and exploit file path traversal (directory traversal) vulnerabilities that allow attackers to read arbitrary files on the server, potentially including sensitive configuration files, credentiVotes: 0GitHub stars: 6
- Fable Safe PromptRewrite allowed prompts to reduce false-positive safety triggers without bypassing policy or changing intent.Votes: 0GitHub stars: 6
- Ethical Hacking MethodologyMaster the complete penetration testing lifecycle from reconnaissance through reporting. This skill covers the five stages of ethical hacking methodology, essential tools, attack techniques, and profeVotes: 0GitHub stars: 6
- Docs GeneratorGenerate technical deliverables from completed analysis: reverse-engineering reports, penetration-test reports, CTF write-ups, and signature-analysis documentation with evidence-backed structure.Votes: 0GitHub stars: 6
- Codebase Audit Pre PushDeep audit before GitHub push: removes junk files, dead code, security holes, and optimization issues. Checks every file line-by-line for production readiness.Votes: 0GitHub stars: 6
- Code Review ChecklistComprehensive checklist for conducting thorough code reviews covering functionality, security, performance, and maintainabilityVotes: 0GitHub stars: 6
- Code Review And QualityConducts multi-axis code review. Use before merging any change. Use when reviewing code written by yourself, another agent, or a human. Use when you need to assess code quality across multiple dimensiVotes: 0GitHub stars: 6
- Cloud Penetration TestingConduct comprehensive security assessments of cloud infrastructure across Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP).Votes: 0GitHub stars: 6
- Cloud K8sAuthorized cloud, container, and Kubernetes security assessment: metadata SSRF, IAM misconfiguration, container escape paths, and cluster RBAC review.Votes: 0GitHub stars: 6
- Cc Skill Security ReviewThis skill ensures all code follows security best practices and identifies potential vulnerabilities. Use when implementing authentication or authorization, handling user input or file uploads, or creVotes: 0GitHub stars: 6
- Burp Suite TestingExecute comprehensive web application security testing using Burp Suite's integrated toolset, including HTTP traffic interception and modification, request analysis and replay, automated vulnerabilityVotes: 0GitHub stars: 6
- Broken AuthenticationIdentify and exploit authentication and session management vulnerabilities in web applications. Broken authentication consistently ranks in the OWASP Top 10 and can lead to account takeover, identityVotes: 0GitHub stars: 6
- Backend Security CoderExpert in secure backend coding practices specializing in input validation, authentication, and API security. Use PROACTIVELY for backend security implementations or security code reviews.Votes: 0GitHub stars: 6
- Aws Penetration TestingProvide comprehensive techniques for penetration testing AWS cloud environments. Covers IAM enumeration, privilege escalation, SSRF to metadata endpoint, S3 bucket exploitation, Lambda code extractionVotes: 0GitHub stars: 6
- Auth Implementation PatternsImplement or review authentication and authorization with explicit token, session and resource-access boundaries.Votes: 0GitHub stars: 6
- Api Security Best PracticesImplement secure API design patterns including authentication, authorization, input validation, rate limiting, and protection against common API vulnerabilitiesVotes: 0GitHub stars: 6
- Api Fuzzing Bug BountyProvide comprehensive techniques for testing REST, SOAP, and GraphQL APIs during bug bounty hunting and penetration testing engagements. Covers vulnerability discovery, authentication bypass, IDOR expVotes: 0GitHub stars: 6
- Anti Reversing TechniquesAUTHORIZED USE ONLY: This skill contains dual-use security techniques. Before proceeding with any bypass or analysis: > 1.Votes: 0GitHub stars: 6