All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 31,574
- 1,316
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 16,441–16,464 of 31,574 skills
- Cms Framework AttackTargeted security assessment of Content Management Systems (WordPress, Joomla, Drupal) using specialized scanners and exploit techniques.Votes: 0GitHub stars: 70
- Cloud SecurityCloud security covers security assessment for major cloud platforms including AWS, Azure, and GCP, with core focus on IAM misconfiguration detection, storage bucket exposure scanning, metadata service attacks, container escape, and Kubernetes RBAC auditing.Votes: 0GitHub stars: 70
- Cloud Identity AttackCloud identity provider attacks covering Azure AD/Entra ID, Okta, Auth0, Ping, AWS IAM Identity Center, and Google Workspace — including OAuth 2.0 token theft, OIDC redirect abuse, SAML response forgery, conditional access bypass, MFA fatigue, federation compromise (AD FS, Ping), app registration abuse, and JIT access exploitation using ROADtools, AADInternals, MicroBurst, MFASweep, TokenTactics, and Okta API probing tools.Votes: 0GitHub stars: 70
- ChronicleA system for recording, indexing, and distilling knowledge from agent lifecycle events. Through a three-layer document system (overview -> detailed records -> knowledge distillation), raw conversation events are transformed into reusable experience.Votes: 0GitHub stars: 70
- Bluetooth Rfid NfcNear-field wireless penetration testing skills covering Bluetooth Classic device enumeration and exploitation, BLE GATT service attacks against IoT devices, RFID card cloning (MIFARE Classic/DESFire), NFC tag manipulation, and contactless payment probing.Votes: 0GitHub stars: 70
- Binary ReverseBinary reverse engineering covers the complete chain from static analysis, dynamic debugging, to vulnerability discovery, exploit development, and malware analysis.Votes: 0GitHub stars: 70
- Autonomous LoopsPerforming repetitive enumeration across many targets - Running batch vulnerability scans on multiple hosts - Monitoring for changes in target environment - Executing attack chains that require iterative steps - User says \"loop\", \"automate\", \"batch\", \"repeat.Votes: 0GitHub stars: 70
- Automotive Vehicle SecurityCAN/CAN-FD bus analysis, UDS diagnostics, IVI pentest, OBD-II exploitation, key fob replay/relay attacks, GNSS spoofing, EV charging station (ISO 15118), and connected vehicle red team operations.Votes: 0GitHub stars: 70
- Article WritingTransform technical findings into clear, structured written content: penetration test reports, vulnerability disclosures, security blog posts, and technical documentation.Votes: 0GitHub stars: 70
- Api SecurityAPI Security Testing covers security assessment across three major API architectures: REST, GraphQL, and gRPC, focusing on the OWASP API Security Top 10 core risks: Broken Authentication, Broken Object Level Authorization (BOLA), Excessive Data Exposure, Rate Limiting Bypass.Votes: 0GitHub stars: 70
- Anti ForensicsAnti-forensics is the offensive counterpart to digital forensics.Votes: 0GitHub stars: 70
- Ai Safety Redteam AdvancedAdvanced AI safety red team operations covering OWASP LLM Top 10 (2025), prompt injection (direct/indirect/multi-turn), jailbreak techniques (DAN, cognitive hacking, persona-based), data poisoning detection, model inversion attacks, adversarial examples (evasion), model extraction, and AI supply chain attacks against LLM-integrated applications, agent frameworks, and RAG systems.Votes: 0GitHub stars: 70
- Ai FuzzingAI-assisted fuzzing for automated vulnerability discovery. Coverage-guided fuzzing engines, AI-driven seed generation, intelligent mutation strategies, and systematic crash triage.Votes: 0GitHub stars: 70
- Agentic PentestLLM-driven autonomous penetration testing framework operations covering PentestGPT, HexStrike AI, Viper, PentestAgent, AI-Infra-Guard, AutoPWN, and custom agent harness patterns — including reasoning chain orchestration, tool delegation, context window management, output validation, multi-agent pentest team coordination, and human-in-the-loop checkpoints.Votes: 0GitHub stars: 70
- Ad Ldap AttackActive Directory is the backbone of enterprise identity and access management, making it a primary target during internal network penetration tests.Votes: 0GitHub stars: 70
- Ad Cs AbuseActive Directory Certificate Services (AD CS) abuse — ESC1-ESC15 attack patterns, PKINIT, PetitPotam to AD CS to Domain Admin chains, CVE-2022-26923 (Certifried), Shadow Credentials, Golden Certificate, certificate template ACL abuse, NTLM relay to web enrollment.Votes: 0GitHub stars: 70
- 5g 6g Telecom Attack AdvancedAdvanced 5G/6G telecom attacks covering 5G Core (SBA) exploitation, IMSI catcher evolution (5G Stingray), SIP/Diameter protocol attacks, Open RAN vulnerabilities, network slicing abuse, and early 6G research vectors (THz comms, AI-native air interface).Votes: 0GitHub stars: 70
- Skill VetterSecurity-first vetting for OpenClaw skills. Use before installing any skill from ClawHub, GitHub, or other sources.Votes: 0GitHub stars: 71
- Skill GuardRuntime security monitor for active OpenClaw skills. Watches file access, network calls, and shell commands.Votes: 0GitHub stars: 71
- Skill AuditorComprehensive security auditor for OpenClaw skills. Checks for typosquatting, dangerous permissions, prompt injection,Votes: 0GitHub stars: 71
- Setup Auditor'Audit your OpenClaw environment for credential leaks, unsafe defaults, and missing sandbox configuration. Wizard-style:Votes: 0GitHub stars: 71
- Sandbox GuardGenerate Docker sandbox configurations for safely running untrusted OpenClaw skills. Isolates filesystem, network,Votes: 0GitHub stars: 71
- Prompt GuardDetect and neutralize prompt injection attacks in OpenClaw skill content, user inputs, and external data sources.Votes: 0GitHub stars: 71
- Permission AuditorAnalyze OpenClaw skill permissions and explain exactly what each permission allows. Identifies over-privilegedVotes: 0GitHub stars: 71