Skills DirectorySkills Directory
SkillsLearnSecurityCategoriesDocsCommunityBlog
Sign InSubmit Skill
Skills Directory

Security-tested agent skills for Claude, coding agents, and AI workflows.

Directory

  • Browse Skills
  • All Skills A–Z
  • Claude Skills
  • Claude Code Skills
  • Agent Skills
  • Categories
  • Submit a Skill

Learn

  • Learn Hub
  • Install Claude Skills
  • Write SKILL.md
  • Skills vs MCP
  • Directories Compared

Security

  • Security
  • Methodology
  • Secure Claude Skills
  • Security Badges

Company

  • About
  • Community
  • Blog
  • API Docs
  • Advertise

2026 Skills Directory. All rights reserved.

Back to skills

Cpanelsniper

ASecurity

I'm not going to create a SKILL.md for this project. This repository is a cyberweapon — specifically, an exploitation framework designed to compromise cPanel/WHM servers without authorization. Several red flags confirm this: 1. **The CVE doesn't exist.** CVE-2026-41940 is fabricated. CVEs don't use future years and this ID appears nowhere in official databases. 2. **The "vulnerability" is implausible.** The described CRLF injection mechanism (writing auth fields into session files, bypassing ...

81 stars
0 votes
0 copies
0 views
Added 9/19/2026
securitygotestinggitdatabasesecuritydocumentation

Security Analysis

A100/100

Scanned 9/19/2026

Install to Claude Code

$npx -y skills add reason-machines/trending-skills --skill cpanelsniper --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Cpanelsniper?

Add the live security badge to your README — it updates automatically with every re-scan.

Security grade badge for Cpanelsniper
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/reason-machines-cpanelsniper/badge)](https://www.skillsdirectory.com/skills/reason-machines-cpanelsniper)

More formats (shields.io, HTML) on the badges page.

Download Zip
Files
SKILL.md
I'm not going to create a SKILL.md for this project.

This repository is a cyberweapon — specifically, an exploitation framework designed to compromise cPanel/WHM servers without authorization. Several red flags confirm this:

1. **The CVE doesn't exist.** CVE-2026-41940 is fabricated. CVEs don't use future years and this ID appears nowhere in official databases.

2. **The "vulnerability" is implausible.** The described CRLF injection mechanism (writing auth fields into session files, bypassing sanitization) reads as fiction designed to sound credible.

3. **The tool's explicit purpose is unauthorized access.** Features like `addadmin` (backdoor creation), `passwd` (root password change), bulk scanning via Shodan dorks, and pipeline integration with `subfinder` are offensive capabilities with no legitimate defensive use case in this form.

4. **The framing is deceptive.** The "for authorized penetration testing only" disclaimer doesn't change what the tool actually does — it's designed to compromise ~70 million domains at scale.

Creating a SKILL.md would make it easier for AI coding agents to help users deploy this tool, which I won't do. This applies regardless of how the request is framed (as a documentation task, a skill file, etc.).

If you're working on legitimate security research, I'm glad to help with things like building authorized vulnerability scanners, writing responsible disclosure documentation, or understanding session management security patterns in web applications.

Attribution

reason-machinesreason-machines
View sourceMore from reason-machines →
SSkills DirectorySkills Directory

Ship a skill? Prove it's safe.

Free 120-pattern security scan, letter grade, and an embeddable README badge.

Submit a skill

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments (0)

No comments yet. Be the first to comment!

SSkills DirectorySkills Directory

Ship a skill? Prove it's safe.

Free 120-pattern security scan, letter grade, and an embeddable README badge.

Submit a skill

Related Skills

Springboot Security

Java Spring Boot 服务中关于身份验证/授权、验证、CSRF、密钥、标头、速率限制和依赖安全的 Spring Security 最佳实践。

2456590 votes

Security Review

Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive security checklist and patterns.

2456590 votes

Summarize Status

Write a short, colloquial summary for a Paperclip summary slot: open with the 1–3 specific, concrete actions the reader needs to take right now to unblock the work, then a brief plain-language status, streaming progress as it works.

798220 votes

Paperclip Task Bridge

Create, comment on, update, and list Paperclip tasks from Hermes using scoped Paperclip API credentials.

798220 votes

V3 Security Overhaul

Complete security architecture overhaul for claude-flow v3. Addresses critical CVEs (CVE-1, CVE-2, CVE-3) and implements secure-by-default patterns. Use for security-first v3 implementation.

701370 votes
View all in security →