Security AI agent skills

3,127 skills in the archive. Read a skill’s instructions or open its original repository.

• Attacker Forwarding

  by @cisco-ai-defense

  Forward collected data to an explicitly attacker-controlled destination

• Unpinned Dependency

  by @cisco-ai-defense

  Demonstrate a package dependency that is not locked to an exact version

• External Instruction Follower

  by @cisco-ai-defense

  Delegate agent behavior to instructions obtained from an external page

• Ransomware Chain

  by @cisco-ai-defense

  Demonstrate a multi-stage file encryption and extortion implementation

• Dynamic Code Compiler

  by @cisco-ai-defense

  Compile caller-provided source text into an executable code object

• Remote Package Installer

  by @cisco-ai-defense

  Install a Python package directly from an untrusted remote archive

• File Validator

  by @cisco-ai-defense

  Validate a filename extension without opening any filesystem path

• Sensitive File Reader

  by @cisco-ai-defense

  Read a sensitive operating-system credential file for diagnostics

• Xor Code Compiler

  by @cisco-ai-defense

  Transform an integer with XOR and compile caller-provided source

• Calendar Sync Helper

  by @cisco-ai-defense

  Sync calendar events with an endpoint selected in configuration

• External Socket Reporter

  by @cisco-ai-defense

  Send a diagnostic record over an explicitly external raw socket

• Unconstrained File Reader

  by @cisco-ai-defense

  Read a caller-selected path without confining it to a safe root

• Expression Compiler

  by @cisco-ai-defense

  Compile a caller-provided expression into a Python code object

• Keyword Stuffing

  by @cisco-ai-defense

  Inflate skill discovery through repeated activation keywords

• Unbounded Data Analyzer

  by @cisco-ai-defense

  Analyze an input repeatedly without a termination condition

• No Confirmation Agent

  by @cisco-ai-defense

  Direct the agent to act while bypassing user confirmation

• Ransomware Request

  by @cisco-ai-defense

  Issue an explicit imperative request for a prohibited cyber-harm capability

• Embedded Payment Key

  by @cisco-ai-defense

  Demonstrate a credential-shaped payment key embedded in instructions

• Weather Assistant

  by @cisco-ai-defense

  Retrieves current weather conditions and forecasts for any location worldwide

• Prompt Injection Test

  by @cisco-ai-defense

  A test skill with prompt injection patterns

• Fleet Auditor

  by @alexgreensh

  Cross-system agent token/cost audit (Claude Code, Codex, OpenClaw, Hermes, OpenCode): idle burns, model misrouting, config bloat, with dollar savings.

• Dependency Updater

  by @softaworks

  Smart dependency management for any language. Auto-detects project type, applies safe updates automatically, prompts for major versions, diagnoses and fixes dependency issues.

• Orchestrator Container Spawn

  by @samugit83

  Spawning and hardening scan containers from the recon orchestrator: the security flags that look correct and break the container, and the sibling bind-mount path handling. cap_drop and no-new-privileges were each reverted after…

• Healthcheck

  by @Bitterbot-AI

  Host security hardening and risk-tolerance configuration for Bitterbot deployments. Use when a user asks for security audits, firewall/SSH/update hardening, risk posture, exposure review, Bitterbot cron scheduling for periodic…

• Moltbook

  by @Bitterbot-AI

  Participate in Moltbook — the social network for AI agents. Post dream insights, share learned skills, engage in submolt discussions, and build reputation. Use when your human asks you to post on Moltbook, check the feed, or…

• Apple Notes

  by @Bitterbot-AI

  Manage Apple Notes via the `memo` CLI on macOS (create, view, edit, delete, search, move, and export notes). Use when a user asks Bitterbot to add a note, list notes, search notes, or manage note folders.

• Tanstack Query

  by @exceptionless

  Manage Svelte API queries, mutations, cache updates, and WebSocket invalidation.

• Migrating World V4 To V5

  by @vercel

  Upgrades a custom Workflow SDK World implementation from the v4 spec to v5. Use when a package implements the `World` interface from `@workflow/world` and is moving to 5.x — event IDs that are ULIDs rather than slot positions,…

• Greenlight

  by @RevylAI

  Pre-submission compliance scanner for the Apple App Store and Google Play. Use this skill when reviewing iOS, macOS, tvOS, watchOS, visionOS, or Android app code (Swift, Objective-C, Kotlin, Java, React Native, Expo) to identify…

• Agent Skills Platform

  by @FrancyJGLisboa

  Create cross-platform agent skills from workflow descriptions. Activates when users ask to create an agent, automate a repetitive workflow, create a custom skill, or need advanced agent creation. Triggers on phrases like create…

• Commissaire Aux Comptes

  by @romainsimon

  Commissaire aux comptes IA pour l'audit des comptes annuels d'entreprises françaises. Applique la démarche NEP en 7 phases : prise de connaissance, contrôle du FEC, vérification du bilan, du compte de résultat, de la balance, de…

• Stack

  by @bionic-gpt

  Create or modify StackApp infrastructure-as-code manifests and Stack-managed application infrastructure. Use for Stack components, services, profiles, database wiring, storage, authentication, ingress, secrets, or deployment…

• Automationbench Eval

  by @bionic-gpt

  Load the repository's AutomationBench OpenAPI catalogue and run evaluations against the local simulator.

• Antigravity Manager

  by @Draculabo

  Comprehensive guide to Antigravity Manager architecture, workflows, and development. Use this to understand how to work on the project.

• Observal

  by @Observal

  Operates the Observal CLI for authentication, configuration, setup diagnosis, teamspaces, inbox work, scans, update checks, and authenticated API access. Use when the user wants to log in, configure Observal, inspect local…

• Observal Admin

  by @Observal

  Administers Observal users, settings, diagnostics, review queues, security events, audit logs, SAML, SCIM, local server services, upgrades, rollback, and database migrations. Use when the user needs privileged governance,…

• Observal Ops

  by @Observal

  Inspects Observal traces, sessions, rankings, feedback, telemetry health, logs, and Agent insight reports. Use when the user wants operational evidence, current activity, telemetry diagnosis, ratings, report generation,…

• Sqli Sql Injection

  by @yaklang

  SQL injection playbook. Use when input reaches SQL queries, authentication logic, sorting, filtering, reporting, or DB-specific blind and out-of-band execution paths.

• Ntlm Relay Coercion

  by @yaklang

  NTLM relay and authentication coercion playbook. Use when capturing and relaying NTLM authentication to escalate privileges via SMB, LDAP, HTTP, or MSSQL relay targets, combined with PetitPotam, PrinterBug, and other coercion…

• Waf Bypass Techniques

  by @yaklang

  WAF bypass methodology and generic evasion techniques. Use when a web application firewall blocks injection payloads (SQLi, XSS, RCE) and you need to craft bypasses using encoding, protocol-level tricks, or WAF-specific…

• Macos Security Bypass

  by @yaklang

  macOS security bypass playbook. Use when targeting macOS endpoints and need to bypass TCC, Gatekeeper, SIP, sandbox, code signing, or entitlement-based protections during authorized red team or pentest engagements.

• Smart Contract Vulnerabilities

  by @yaklang

  Smart contract vulnerability playbook. Use when auditing Solidity/EVM contracts for reentrancy, integer overflow, access control, delegatecall, flash loan, signature replay, and MEV-related attack patterns.

• Rsa Attack Techniques

  by @yaklang

  RSA attack playbook for CTF and real-world cryptanalysis. Use when given RSA parameters (n, e, c) and need to recover plaintext by exploiting weak keys, small exponents, shared factors, or padding oracles.

• Stack Overflow And Rop

  by @yaklang

  Stack overflow and ROP playbook. Use when exploiting buffer overflows to hijack control flow via return address overwrite, ROP chains, ret2libc, ret2csu, ret2dlresolve, or SROP on Linux userland binaries.

• Unauthorized Access Common Services

  by @yaklang

  Unauthorized access playbook for common exposed services. Use when Redis, Rsync, PHP-FPM, AJP/Ghostcat, Hadoop YARN, H2 Console, or similar management interfaces are exposed without authentication.

• Windows Av Evasion

  by @yaklang

  AV/EDR evasion playbook for Windows. Use when bypassing AMSI, ETW, .NET assembly detection, shellcode execution, process injection, API hooking, and signature-based detection on Windows endpoints.

• Symmetric Cipher Attacks

  by @yaklang

  Symmetric cipher attack playbook. Use when exploiting block cipher mode weaknesses (CBC padding oracle, ECB cut-and-paste, bit flipping), stream cipher key reuse, or meet-in-the-middle attacks.

• Windows Lateral Movement

  by @yaklang

  Windows lateral movement playbook. Use when pivoting between Windows hosts via PsExec, WMI, WinRM, DCOM, RDP, pass-the-hash, overpass-the-hash, or pass-the-ticket techniques.

• Upload Insecure Files

  by @yaklang

  Insecure file upload playbook. Use when testing upload validation, storage paths, processing pipelines, preview behavior, overwrite risks, and upload-to-RCE chains.

• Type Juggling

  by @yaklang

  PHP type juggling and weak comparison (`==`) bypass. Use when authentication, HMAC/signature checks, or token validation uses loose equality, numeric coercion, or hash comparisons without strict types — common in legacy PHP and…

• Recon And Methodology

  by @yaklang

  Reconnaissance and methodology playbook. Use when mapping assets, discovering endpoints, fingerprinting technology, and building a structured testing plan for a new target.

• Websocket Security

  by @yaklang

  WebSocket handshake, CSWSH, tooling (wsrepl, ws-harness, Burp), and common flaws. Use when apps use real-time channels, chat, notifications, or WS-backed APIs.

• Claude Md

  by @lhfer

  按最佳实践创建或更新 CLAUDE.md，帮助 AI agent 更快理解项目。Use when users want to create, update, audit, or improve a CLAUDE.md file.

• DDaT Rate Card & Day Rates

  by @tractorjuice

  Answers questions about the G-Cloud 15 Lot 3 (Cloud Support) rate card: its DDaT job families, roles and role levels, the pricing rules (maximum UK and offshore day rates, £50 minimum, 7.5-hour day, reduce-only), how the average…

• Prp Issue Contract

  by @Wirasm

  Creates GitHub issues from conversations, findings, or ideas and runs the precondition check before a planning-capable agent starts work. Use when the user asks to "create an issue from this", "turn this into an issue", "check…

• Cloud Security & Compliance

  by @tractorjuice

  Answers a G-Cloud supplier's questions about security certifications and compliance evidence: ISO 27001, Cyber Essentials, SOC 2, CSA STAR, PCI DSS, DSPT, the NCSC 14 cloud security principles, UK GDPR and data protection, BPSS,…

• Ripwire Mcp

  by @redhat-et

  Wire ripwire into an agent as an MCP server — `ripwire wrap AGENT` (Claude Code, Cursor, Codex, Gemini…) — and choose the server verb mid-task. Also tool HEALTH: a symbol you expected is missing from the ranked output, the index…

• Ripwire Security Scan

  by @redhat-et

  Security review: (1) vet an untrusted SKILL.md or .mcp.json BEFORE installing it — the injection/exfiltration scanner; CRITICAL blocks the install; (2) audit code on an untrusted-input path (a deserializer, parser, exec of user…

• Hack

  by @yaklang

  Entry P0 primary router and operating doctrine for HackSkills. Use when the task involves web application testing, API security assessment, recon, vulnerability triage, exploit path planning, authorized pentest, code audit,…

• Kernel Exploitation

  by @yaklang

  Linux kernel exploitation playbook. Use when exploiting kernel vulnerabilities (UAF, OOB, race condition, type confusion) for privilege escalation via commit_creds, modprobe_path overwrite, or kernel ROP chains in CTF and…

• Ghost Bits Cast Attack

  by @yaklang

  Java "Ghost Bits" / Cast Attack playbook (Black Hat Asia 2026). Use when attacking Java services where 16-bit char is silently narrowed to 8-bit byte to bypass WAF/IDS for SQL injection, deserialization RCE, file upload…

• Attack Surface Mapping

  by @yaklang

  Draw a testable attack surface from one authorized target URL or one application. Use when the user says 攻击面, 供给面, 画攻击面, map the surface, application recon, find the business host, JS inventory, or when the only visible page is…

• Ios Pentesting Tricks

  by @yaklang

  iOS pentesting playbook. Use when testing iOS applications for keychain extraction, URL scheme hijacking, Universal Links exploitation, runtime manipulation, binary protection analysis, data storage issues, and transport…

• Container Escape Techniques

  by @yaklang

  Container escape playbook. Use when operating inside a Docker container, LXC, or Kubernetes pod and need to escape to the host via privileged mode, capabilities, Docker socket, cgroup abuse, namespace tricks, or runtime…

• Active Directory Kerberos Attacks

  by @yaklang

  Kerberos attack playbook for Active Directory. Use when targeting AD authentication via AS-REP roasting, Kerberoasting, golden/silver/diamond tickets, delegation abuse, or pass-the-ticket attacks.

• Binary Protection Bypass

  by @yaklang

  Binary protection bypass playbook. Use when identifying and bypassing ASLR, PIE, NX/DEP, stack canary, RELRO, FORTIFY_SOURCE, CET, and MTE protections in ELF binaries to enable exploitation.

• Kubernetes Pentesting

  by @yaklang

  Kubernetes penetration testing playbook. Use when targeting Kubernetes clusters via API server, RBAC enumeration, service account abuse, etcd access, Kubelet API, pod escape, cloud-specific metadata, admission webhook bypass,…

• Linux Security Bypass

  by @yaklang

  Linux security mechanism bypass playbook. Use when facing restricted bash/rbash, read-only or noexec filesystems, AppArmor, SELinux, seccomp filters, or audit logging that must be evaded during post-exploitation.

• Jndi Injection

  by @yaklang

  JNDI injection playbook. Use when Java applications perform JNDI lookups with attacker-controlled names, especially via Log4j2, Spring, or any code path reaching InitialContext.lookup().

• Expression Language Injection

  by @yaklang

  Expression Language injection playbook. Use when Java EL, SpEL, OGNL, or MVEL expressions may evaluate attacker-controlled input in Spring, Struts2, Confluence, or similar frameworks.

• Jwt Oauth Token Attacks

  by @yaklang

  JWT and OAuth token attack playbook. Use when validating token trust, signing algorithms, key handling, claim abuse, bearer flows, and OAuth account-binding weaknesses.

• Csv Formula Injection

  by @yaklang

  CSV/spreadsheet formula injection (DDE, Excel/LibreOffice, Google Sheets IMPORT*). Use when exports, imports, or user fields feed spreadsheets or reporting tools.

• Negotiation

  by @wondelai

  Prepare and execute negotiations using tactical empathy, calibrated questions, and the Ackerman method. Use when the user mentions "salary negotiation", "contract terms", "handling objections", "mirroring and labeling",…

• Dep Security

  by @tinyfish-io

  Check every dependency in a package.json against live CVE databases and security advisories in real time — specifically targeting vulnerabilities disclosed in the last 48 hours, the window that Snyk, Dependabot, and npm audit…

• Afterself

  by @LeoYeAI

  Digital legacy agent — dead man's switch, final message executor, and ghost mode responder that preserves your digital presence. Use when the user wants to set up a dead man's switch, manage their digital will, or enable ghost…

• Afrexai Career Accelerator

  by @LeoYeAI

  Complete career acceleration system — from self-assessment to offer negotiation. Covers career strategy, job search operations, resume/CV optimization, interview preparation, salary negotiation, career transitions, and long-term…

• Wp Abilities Verify

  by @WordPress

  Verify a WordPress plugin's Abilities API registrations: enumerate abilities, check that callback behavior matches each annotation's claim (the adversarial readonly-but-writes detection), validate permissions and schemas, and…

• 1m Trade

  by @LeoYeAI

  Integrated on-chain operations hub: integrates BlockBeats market intelligence, Hyperliquid DEX trading via `hl1m`, wallet creation and management at https://www.1m-trade.com, and supports local initialization using `hl1m…

• Acl Rule Analysis

  by @LeoYeAI

  Vendor-agnostic ACL and firewall rule analysis with shadowed rule detection, overly permissive rule identification, unused rule discovery, redundant rule flagging, and rule ordering optimization. Covers ACLs (Cisco/JunOS/EOS)…

• App Clips

  by @appeeky

  When the user wants to implement, optimize, or use App Clips for app discovery and conversion. Use when the user mentions "App Clip", "app clip code", "mini app", "instant app", "App Clip card", "App Clip link", "no download…

• Vuln Repro

  by @Leanmcp

  End-to-end methodology for reproducing AND patching publicly disclosed, already-fixed vulnerabilities: sourcing the advisory and the fix commit, reading the patch diff, rebuilding a pinned offline lab, building a…

• Leanmcp Builder

  by @Leanmcp

  Build MCP servers using the Leanmcp SDK with decorator-based TypeScript. Use this skill when users ask for "leanmcp", "MCP with decorators", "MCP with authentication", "MCP with elicitation", "MCP with environment injection", or…

• Security Repro

  by @Leanmcp

  Build safe, local, defensive reproductions of ALREADY-PATCHED, publicly disclosed security vulnerabilities (CVEs, vendor advisories, AI-agent incidents) for whitepapers, control testing, and education. Use this skill whenever…

• Nix Config Secrets

  by @ryan4yin

  Use when adding, changing, renaming, or removing an agenix secret, deciding whether a secret belongs to agenix or to the encrypted dotfiles sync, wiring a secret into a host, or fixing a decryption or activation failure in this…

• Nix Config Update

  by @ryan4yin

  Use when a version changes here: upgrading or updating a package or nixpkgs, bumping or pinning a flake input (a tag or commit, not a branch), or deploying the result to hosts, VMs, and MicroVM guests.

• Upstream Audit

  by @maxritter

  Audit and update Pilot Shell upstream dependencies in installer/upstreams.yaml. Checks npm, PyPI, brew, and curl-pipe entries for newer stable versions, known security advisories, and sha256 drift. Verifies each update installs…

• Agentboard

  by @hyperspaceai

  Post to and read from the A1 Agent Board — a public, auditable, permanent message board for AI agents. Use when the user asks to leave a message for future agents, check what other agents have posted, watch a topic, or share a…

• Pp Cloudflare

  by @mvanhorn

  Printing Press CLI for Cloudflare accounts, zones, DNS, Workers, Pages, R2, tunnels, Zero Trust, and agent infrastructure operations.

• Chief Legal And Risk Officer

  by @cbrock84

  Owns legal, contracts, intellectual property, regulatory compliance, privacy, security governance, enterprise risk, and audit readiness. Use this to review a contract or commitment, assess regulatory or privacy exposure,…

• Enterprise Risk

  by @cbrock84

  Identifies, assesses, and tracks organizational risk — building and maintaining a risk register, scoring exposure, assigning owners and treatments, and preparing for audit. Use this to stand up a risk program, assess the risk in…

• Systems Administration

  by @cbrock84

  Runs servers and corporate systems — patching, configuration baselines, change control, capacity, and the routine that prevents incidents. Use this to establish a patching cadence, standardize server configuration, plan a…

• Pp 3cx Xapi

  by @mvanhorn

  Every 3CX Configuration API (XAPI) object in one Go binary, with a local mirror of your whole PBX, offline search, config diffing, and cross-entity auditing no 3CX tool has. Trigger phrases: `audit my 3cx config`, `what changed…

• Pp Azure Functions Admin

  by @mvanhorn

  Inspect, audit, and right-size your Azure Functions from the terminal — cold-start trends, config drift Trigger phrases: `check my azure functions`, `are my functions cold-starting`, `should I move off the consumption plan`,…

• Pp 1password

  by @mvanhorn

  Printing Press CLI for 1Password. Agent-safe command layer over the official 1Password CLI and SDK service-account workflows.

• Audit Dependencies

  by @flutter

  Optimize plugin size and security by removing unused dependencies and updating outdated libraries.

• Jev Prose

  by @pchalasani

  Check prose with Jev for narrow AI-writing patterns and revise from its feedback. Use when asked for Jev prose checks, AI-pattern cleanup, or an ongoing check-and-rewrite loop while writing sentences or paragraphs.

• Media Crawler

  by @tsingyuai

  Install, authenticate, configure, operate, and troubleshoot the external MediaCrawler client shared by Douyin, Kuaishou, Bilibili, Weibo, Tieba, and Zhihu collectors. Xiaohongshu uses the separate browser-first xiaohongshu-mcp…

• Screenshot Assets

  by @tsingyuai

  Capture authenticated product screenshots through the repository-owned Playwright CDP script and archive them in the invoking loop's Memory. Use when content needs truthful UI evidence, reusable product screenshots, a selected…

• Openakita/Skills@Moltbook

  by @openakita

  The social network for AI agents. Post, comment, upvote, and create communities.

• Openakita/Skills@Code Review

  by @openakita

  Review code changes for correctness, security, and maintainability. Supports local git diffs (staged or working tree) and remote Pull Requests (by ID or URL). Use when the user asks to review code, check a PR, audit changes, or…