All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 31,161
- 1,299
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 16,561–16,584 of 31,161 skills
- Mythos M1 Recon EntryDefensive instrumentation for AISI \"The Last Ones\" Milestone 1 — perimeter recon, default-credential exposure, and VPN config theft. Use when performing defensive security research, vulnerability analysis, or coordinated disclosure involving m1 recon entry.Votes: 0GitHub stars: 9
- Mythos Inspect Sandboxing ToolkitOperate the AISI Inspect Sandboxing Toolkit — Docker, Kubernetes, and Proxmox plugins for VM-based agent evaluations. Use when performing defensive security research, vulnerability analysis, or coordinated disclosure involving inspect sandboxing toolkit.Votes: 0GitHub stars: 9
- Mythos Incident ResponderActive incident response — scope triage, containment, eradication, recovery, customer notification, and legal coordination per NIST SP 800-61r3. Use when performing defensive security research, vulnerability analysis, or coordinated disclosure involving incident responder.Votes: 0GitHub stars: 9
- Mythos Ics Step6 Plc Protocol ExploitDefensive instrumentation for the \"Cooling Tower\" range Step 6 — direct exploitation of PLC-2 by extracting auth material from memory, hijacking a session, and authenticating with the reversed protocol, modeled on AISI's 7-step ICS scenario. Use when performing defensive security research, vulnerability analysis, or coordinated disclosure involving ics step6 plc protocol exploit.Votes: 0GitHub stars: 9
- Mythos Ics Step5 Crypto Scheme ReverseDefensive instrumentation for the \"Cooling Tower\" range Step 5 — exfiltrate the shared library implementing the protocol's auth, decompile, recover the hash-chain scheme, reimplement to forge messages, modeled on AISI's 7-step ICS scenario. Use when performing defensive security research, vulnerability analysis, or coordinated disclosure involving ics step5 crypto scheme reverse.Votes: 0GitHub stars: 9
- Mythos Ics Step4 Protocol ReverseDefensive instrumentation for the \"Cooling Tower\" range Step 4 — dynamic analysis of a vendor-custom application-layer protocol over Modbus TCP between HMI and PLC, modeled on AISI's 7-step ICS scenario. Use when performing defensive security research, vulnerability analysis, or coordinated disclosure involving ics step4 protocol reverse.Votes: 0GitHub stars: 9
- Mythos Ics Step3 Path Traversal RceDefensive instrumentation for the \"Cooling Tower\" range Step 3 — admin session reuse + archive-extraction path traversal yielding RCE on HMI-1, modeled on AISI's 7-step ICS scenario. Use when performing defensive security research, vulnerability analysis, or coordinated disclosure involving ics step3 path traversal rce.Votes: 0GitHub stars: 9
- Mythos Ics Step1 Xss Hmi AccessDefensive instrumentation for the \"Cooling Tower\" range Step 1 — initial HMI compromise via default creds + stored XSS, modeled on AISI's 7-step ICS scenario. Use when performing defensive security research, vulnerability analysis, or coordinated disclosure involving ics step1 xss hmi access.Votes: 0GitHub stars: 9
- Mythos Ics Attack ChainICS/SCADA emulation for high-fidelity simulation labs only — water, power, fuel, building automation. Use when performing defensive security research, vulnerability analysis, or coordinated disclosure involving ics attack chain.Votes: 0GitHub stars: 9
- Mythos Finding TriageSort raw scanner output by exploitability and blast radius using CVSS v4.0, attack-vector analysis, dedup, and chain grouping. Use when performing defensive security research, vulnerability analysis, or coordinated disclosure involving finding triage.Votes: 0GitHub stars: 9
- Mythos Crypto Protocol AuditorAudit cryptographic protocols for design and implementation flaws across TLS, JOSE, OAuth, OIDC, and post-quantum migration paths. Use when performing defensive security research, vulnerability analysis, or coordinated disclosure involving crypto protocol auditor.Votes: 0GitHub stars: 9
- Mythos Commit ArcheologistMine git history for security-relevant commits and find sibling call sites that never received the fix. Use when performing defensive security research, vulnerability analysis, or coordinated disclosure involving commit archeologist.Votes: 0GitHub stars: 9
- Mythos Binary Reverse EngineerBlack-box binary analysis with Ghidra/IDA/Binary Ninja for in-scope closed-source targets. Use when performing defensive security research, vulnerability analysis, or coordinated disclosure involving binary reverse engineer.Votes: 0GitHub stars: 9
- Mythos Binary Fuzz CorpusBuild and maintain high-quality fuzzing corpora for OSS-Fuzz, ClusterFuzzLite, and libFuzzer - seed selection, dictionaries, structure-aware grammars, coverage gap analysis. Use when performing defensive security research, vulnerability analysis, or coordinated disclosure involving binary fuzz corpus.Votes: 0GitHub stars: 9
- Mythos Behavioral AnalysisAutomated transcript analysis of autonomous cyber-agent runs — unique services, exploit/exploration ratio, credential reuse, drift detection, cost-per-milestone. Use when performing defensive security research, vulnerability analysis, or coordinated disclosure involving behavioral analysis.Votes: 0GitHub stars: 9
- Mythos Adversary EmulatorMITRE ATT&CK-driven adversary emulation modeled on PNNL's ALOHA water-plant scaffold. Use when performing defensive security research, vulnerability analysis, or coordinated disclosure involving adversary emulator.Votes: 0GitHub stars: 9
- Mythos Adversarial ValidatorChallenge proposed security findings with counter-arguments before they reach an analyst, reducing false positives. Use when performing defensive security research, vulnerability analysis, or coordinated disclosure involving adversarial validator.Votes: 0GitHub stars: 9
- Multi Tenant Isolation ValidatorAutonomous agent that validates multi-tenant isolation, database switching, and cross-tenant data leakage prevention. Use when performing security analysis, auditing, or hardening with multi tenant isolation validator.Votes: 0GitHub stars: 9
- Msft Azure Security Keyvault Keys Dotnet|. Use when you need help with azure security keyvault keys dotnet.Votes: 0GitHub stars: 9
- Msft Azure Resource Manager Sql Dotnet|. Use when you need help with azure resource manager sql dotnet.Votes: 0GitHub stars: 9
- Msft Azure Resource Manager Postgresql Dotnet|. Use when you need help with azure resource manager postgresql dotnet.Votes: 0GitHub stars: 9
- Msft Azure Mgmt Botservice Dotnet|. Use when you need help with azure mgmt botservice dotnet.Votes: 0GitHub stars: 9
- Msft Azure Eventgrid Dotnet|. Use when you need help with azure eventgrid dotnet.Votes: 0GitHub stars: 9
- Msft Azure ComplianceRun Azure compliance and security audits with azqr plus Key Vault expiration checks. Covers best-practice assessment, resource review, policy/compliance validation, and security posture checks. WHEN: compliance scan, security audit, BEFORE running azqr (compliance cli tool), Azure best practices, Key Vault expiration check, expired certificates, expiring secrets, orphaned resources, compliance assessment. Use when you need help with azure compliance.Votes: 0GitHub stars: 9