Security AI agent skills

3,127 skills in the archive. Read a skill’s instructions or open its original repository.

• Harness Writing

  by @trailofbits

  Designs and improves fuzzing harnesses for C/C++ and Rust. Covers mapping raw bytes onto a target API, generating structured inputs, avoiding non-determinism and false crashes, and deciding what to fuzz together. Use when…

• Rust Review

  by @trailofbits

  Performs comprehensive Rust security review for safe/unsafe boundary issues, memory safety in unsafe blocks, concurrency hazards, panic-induced DoS, FFI safety, and async runtime mistakes. Use when auditing Rust crates,…

• Security Ownership Map

  by @tech-leads-club

  Analyze git repositories to build a security ownership topology (people-to-file), compute bus factor and sensitive-code ownership, and export CSV/JSON for graph databases and visualization. Use when the user explicitly wants a…

• Security Threat Model

  by @tech-leads-club

  Repository-grounded threat modeling that enumerates trust boundaries, assets, attacker capabilities, abuse paths, and mitigations, and writes a concise Markdown threat model. Use when the user asks to threat model a codebase or…

• Web Quality Audit

  by @tech-leads-club

  Comprehensive web quality audit covering performance, accessibility, SEO, and best practices in a single review. Use when asked to "audit my site", "review web quality", "run lighthouse audit", "check page quality", or "optimize…

• Perf Lighthouse

  by @tech-leads-club

  Run Lighthouse audits locally via CLI or Node API, parse and interpret reports, and set performance budgets. Use when measuring site performance, understanding Lighthouse scores, setting up budgets, or integrating audits into…

• Best Practices

  by @tech-leads-club

  Apply modern web development best practices for security, compatibility, and code quality. Use when asked to "apply best practices", "security audit", "modernize code", "code quality review", or "check for vulnerabilities". Do…

• Seo

  by @tech-leads-club

  Optimize for search engine visibility and ranking. Use when asked to "improve SEO", "optimize for search", "fix meta tags", "add structured data", "sitemap optimization", or "search engine optimization". Do NOT use for…

• Short Drama Delivery Audit

  by @TokenRhythm

  Internal deterministic delivery gate for meta-short-drama. Verifies real-provider image/video receipts, parent-owned paid-submission dispositions, runtime fallback evidence, decodability, and content-versus-final duration with…

• Attack Surface Recon

  by @AIPentest

  侦察/攻击面测绘:被动whois/amass/crt.sh/FOFA/Shodan,主动subfinder/httpx/naabu/katana/nuclei,DNS地域/CDN/Nginx catch-all/宝塔/UniApp指纹。开局第一动作,认知写入项目黑板。Use when starting recon, asset mapping, fingerprinting, or CDN/DNS bypass discovery.

• Active Directory Attack

  by @AIPentest

  内网域攻击:BloodHound,Kerberoast,ADCS ESC1/ESC8,NTLM Relay,Coerce,DACL,DCSync,Zerologon/NoPac/PrintNightmare,mitm6,LLMNR,Linux内网。Use when attacking Active Directory, ADCS, NTLM relay, or internal domain.

• Source Code Hunting

  by @AIPentest

  源码狩猎:.git泄露,危险函数grep,JS RC4解混淆,semgrep/CodeQL,trufflehog,patch diff,供应链/CI。Use when hunting source leaks, secrets, JS deobfuscation, or supply-chain issues.

• Component Vuln Intel

  by @AIPentest

  联网情报收集:识别组件后必做CVE/搜索引擎/中文社区/GitHub PoC/资产引擎/即时情报/依赖扩展+受阻换路。Use when a framework/component/version is identified and must search before exploit.

• Pentest Output Standards

  by @AIPentest

  输出规范:中文分析,思维链,漏洞报告模板,负结果,黑板状态总览,改动台账,死锁突破。 Use when reporting findings, maintaining change ledger, or formatting pentest output.

• Ontoly Software Graph

  by @anbeime

  Use Ontoly's deterministic Software Graph and MCP capabilities for architecture review, request tracing, dependency analysis, configuration lookup, and impact analysis before falling back to source-file search.

• Moltbook

  by @anbeime

  内容创作者与运营专员让 AI Agent 建立专属社交人设时，当用户明确要求 Agent 进行社交互动或社区运营时使用。一键完成注册、发帖、评论、点赞及创建社区，轻松打造 AI 专属社交圈。

• Agentic Supply Chain Detection

  by @Tencent

  Detect agentic supply-chain risks: compromised dependencies, malicious plugins/tools/models, and untrusted update sources.

• Pdf Summarizer

  by @Tencent

  Summarize the key points of a PDF document into a short bullet list.

• Okx Agentic Wallet

  by @internet-court

  OKX Agentic Wallet — the single skill for the user's wallet and on-chain execution. Use it whenever the user wants to operate their wallet or execute an on-chain action, including: login & accounts, balance / holdings, wallet…

• Starknet Js

  by @internet-court

  Reference for building Starknet applications using starknet.js v9.x SDK, including contract interaction, account management, transaction handling, fee estimation, wallet integration, and paymaster flows.

• Starknet Wallet

  by @internet-court

  Create and manage Starknet wallets for AI agents. Transfer tokens, check balances, manage session keys, deploy accounts, and interact with smart contracts using native Account Abstraction.

• Okx Activity

  by @internet-court

  Register for the OKX.AI Trading Hackathon or explain its entry requirements and eligibility. Trigger on requests in any language to register, sign up, join, enter, or participate in the hackathon. Registers an existing Trading…

• Starknet Identity

  by @internet-court

  Register AI agents on-chain using the ERC-8004 Trustless Agents standard. Manage agent identity as NFTs, build reputation through feedback, and request third-party validation.

• Starknet Defi

  by @internet-court

  Execute DeFi operations on Starknet including token swaps via avnu aggregator, DCA recurring buys, STRK staking, and lending/borrowing. Supports gasless transactions.

• Fleet Maintenance

  by @steipete

  Mac fleet inventory and upkeep with full/worker profiles: collect installed apps and packages, compare desired versus observed state, audit local-account escrow references, update Homebrew/global packages, safely sync repos and…

• Vm Lab

  by @steipete

  Parallels macOS VM lab: GUI automation, Peekaboo, TCC, Ghostty.

• Codex Huge Context

  by @steipete

  Codex 1M context: direct OpenAI Responses API inference, safe Astra/Sol/Terra/Luna input headroom, Keychain delivery, and Mac fleet rollout.

• Twilio Sms

  by @steipete

  Twilio SMS CLI: buy/list/keep numbers, send/check messages, credential routing.

• Ssh Doctor

  by @steipete

  SSH triage: Remote Login, launchd sshd, pre-auth closes, stale sessions.

• Aig Agent Redteam

  by @Tencent

  当用户要求 AI/Agent 安全评估、蓝军演习、AI 安全审查、提示词注入测试、MCP/Skill/插件/代码包审计、Agent 工具链滥用测试，或需要生成类似渗透测试报告的 Markdown/HTML 时，必须使用本 skill。本 skill 让 Agent 以授权蓝军视角成为 AI 安全专家，面向 AI 产品、Agent、MCP Server、Skill、代码仓库和 AI 基础设施进行安全演习。优先使用第一性原理推理和真实证据，而不是机械跑…

• Aig Scanner

  by @Tencent

  A.I.G Scanner — AI security scanning for infrastructure, AI tools / skills, AI Agents, and LLM jailbreak evaluation via Tencent Zhuque Lab AI-Infra-Guard. Uses built-in exec + Python script, no plugin required. Requires…

• Edgeone Clawscan

  by @Tencent

  The first security skill to install after setting up OpenClaw — powered by Tencent Zhuque Lab. Works like an antivirus for your AI environment: audits installed skills, scans skills before installation, and performs a full…

• Edgeone Skill Scanner

  by @Tencent

  Scan any agent skill for security risks before you install or use it. Powered by Tencent Zhuque Lab A.I.G (AI-Infra-Guard). 100% local static analysis — no file contents or credentials leave your device. Compatible with…

• Web Exfiltration Detection

  by @Tencent

  Detect data exfiltration via URL path encoding and chained web_fetch navigation. Covers fake trusted UI injection, letter-level URL path exfiltration, and multi-hop navigation hijacking. Use when the agent has web/URL fetch…

• Indirect Injection Detection

  by @Tencent

  Detect indirect prompt injection (goal hijack). Instructions hidden in "external" content (documents, RAG, web) that the agent processes. Use when the agent has document/RAG/web/file input.

• Data Leakage Detection

  by @Tencent

  Detect sensitive information disclosure via escalating dialogue probes. Covers system prompt extraction, credential/API key leakage, PII, and internal configuration exposure.

• Hardcoded Secret Detection

  by @Tencent

  Detect hardcoded secrets in code or configuration accessible to the target agent. Focuses on secrets embedded in source, configs, or IaC, not runtime leaks.

• Memory Poisoning Detection

  by @Tencent

  Detect persistent instruction injection or long-term memory poisoning. Focus on writing/retaining hostile instructions for future tasks, not data leakage.

• File Path Traversal Detection

  by @Tencent

  Detect unsafe file handling and path traversal in upload/save/extract flows. Focuses on user-controlled paths or filenames, not data leakage.

• Owasp Asi

  by @Tencent

  OWASP Top 10 for Agentic Applications 2026 (ASI) classification framework. Use for mapping security findings to standardized risk categories.

• Tool Abuse Detection

  by @Tencent

  Detect tool misuse and unexpected code execution via dialogue testing. Use when the agent exposes file, code-execution, or network tools.

• Direct Injection Detection

  by @Tencent

  Detect direct prompt injection or instruction override via user message (no external content). Focuses on system/role override attempts.

• Authorization Bypass Detection

  by @Tencent

  Detect privilege escalation and unauthorized access via dialogue. Use when the agent has roles, admin functions, or multi-user data.

• Human Agent Trust Exploit Detection

  by @Tencent

  Detect social engineering, deceptive responses, false assurances, or prompts that induce unsafe user actions.

• Cascading Failure Detection

  by @Tencent

  Detect error propagation, chain failures, and single-point breakdowns that cascade across agent workflows.

• Inter Agent Comm Security Detection

  by @Tencent

  Detect data leakage, missing boundaries, or privilege mismatch in inter-agent communication.

• Unexpected Code Execution Detection

  by @Tencent

  Detect command injection, eval/exec usage, remote execution, or arbitrary code loading.

• Deepchat Data Import

  by @ThinkInAIXYZ

  Help developers build third-party tools that import, inspect, migrate, or analyze DeepChat data. Use when Codex needs to work with DeepChat provider configuration, model configuration, MCP/app settings, sessions, messages,…

• Memcode

  by @ThinkInAIXYZ

  Use the enabled Memcode MCP connection to explicitly save approved facts and recall relevant memories across DeepChat conversations. Never save a transcript or retrieve memory automatically.

• Render Deploy

  by @tech-leads-club

  Deploy applications to Render by analyzing codebases, generating render.yaml Blueprints, and providing Dashboard deeplinks. Use when the user wants to deploy, host, publish, or set up their application on Render's cloud…

• Component Common Domain Detection

  by @tech-leads-club

  Finds duplicate business logic spread across multiple components and suggests consolidation. Use when asking "where is this logic duplicated?", "find common code between services", "what can be consolidated?", "detect shared…

• Subagent Creator

  by @tech-leads-club

  Guide for creating AI subagents with isolated context for complex multi-step workflows. Use when users want to create a subagent, specialized agent, verifier, debugger, or orchestrator that requires isolated context and deep…

• Technical Design Doc Creator

  by @tech-leads-club

  Creates comprehensive Technical Design Documents (TDD) with mandatory and optional sections through interactive discovery. Use when user asks to "write a design doc", "create a TDD", "technical spec", "architecture document",…

• Cursor Subagent Creator

  by @tech-leads-club

  Creates Cursor-specific AI subagents with isolated context for complex multi-step workflows. Use when creating subagents for Cursor editor specifically, following Cursor's patterns and directories (.cursor/agents/). Triggers on…

• Autoresearch

  by @uditgoenka

  Autonomous iteration loop: modify, verify, keep/discard against any metric

• Code Review

  by @ThinkInAIXYZ

  Comprehensive code review assistant that analyzes code quality, security, and best practices

• Anysearch

  by @anysearch-ai

  Real-time search engine supporting web search, vertical domain search, parallel batch search, and URL content extraction.

• N8n Self Hosting

  by @czlonkowski

  Deploy a production self-hosted n8n end-to-end to a fresh Linux VM over SSH, using Docker Compose behind a Caddy reverse proxy with automatic HTTPS. Use whenever the user wants to self-host, install, provision, or deploy n8n on…

• N8n Mcp Tools Expert

  by @czlonkowski

  Expert guide for using n8n-mcp MCP tools effectively. Use when searching for nodes, validating configurations, accessing templates, managing workflows, organizing workflows into folders, managing credentials, auditing instance…

• N8n Validation Expert

  by @czlonkowski

  Interpret validation errors and guide fixing them. Use when encountering validation errors, validation warnings, false positives, operator structure issues, or need help understanding validation results. Also use when asking…

• Fix Vulnerability

  by @lightdash

  Fix a Snyk vulnerability PR by regenerating the pnpm lockfile, checking changelogs for breaking changes, and posting findings as a PR comment. Use when asked to fix a vulnerability PR or handle a Snyk dependency upgrade.

• Update Threat Db

  by @FlorianBruniaux

  Update the guide's threat intelligence through AgentSec Triage, research new coding-agent and MCP security advisories, and synchronize the security feed. Use for threat database refreshes or mise a jour de la base de menaces,…

• Sandbox Unblock

  by @FlorianBruniaux

  Diagnostic protocol to run before reporting a sandbox blocker or asking for a configuration change. Eight checks that eliminate false positives, then a report template the person holding the settings can act on. On one measured…

• Source Command Audit Prose

  by @FlorianBruniaux

  Add descriptive prose to bare sections in whitepapers (FR + EN) using 9 parallel agents

• Ship

  by @FlorianBruniaux

  Comprehensive pre-deployment verification to ensure release readiness

• Sandbox Status

  by @FlorianBruniaux

  Display native sandbox status, configuration, and recent violations

• Security

  by @FlorianBruniaux

  Rapid security assessment focused on OWASP Top 10 vulnerabilities

• Security Check

  by @FlorianBruniaux

  Quick configuration security check against known threats database

• Security Audit

  by @FlorianBruniaux

  Comprehensive security audit with scored posture assessment

• Sonarqube

  by @FlorianBruniaux

  Analyze SonarCloud quality issues for a specific PR

• Xiaohongshu Note Detail

  by @browser-act

  Fetch Xiaohongshu (RedNote / xhs) note detail and comments by note ID, returning title, description, author info, engagement stats, tags, and paginated comment list. Use when user mentions note detail xiaohongshu, get rednote…

• Offensive Windows Privesc

  by @SnailSploit

  Comprehensive Windows privilege escalation methodology for offensive security engagements. Covers the full attack surface from a standard user shell to NT AUTHORITY\SYSTEM: token impersonation via SeImpersonate and…

• Offensive Tls Attacks

  by @SnailSploit

  Comprehensive methodology for auditing and exploiting TLS/SSL implementations and misconfigurations across network services and mobile applications. Covers protocol downgrade attacks including POODLE (CVE-2014-3566) against…

• Offensive Social Engineering

  by @SnailSploit

  Social engineering attack techniques beyond email phishing for authorized red team and physical penetration testing engagements. Covers pretexting methodology (persona creation, authority and urgency psychological triggers,…

• Offensive Linux Privesc

  by @SnailSploit

  Comprehensive Linux privilege escalation methodology for offensive security engagements. Covers the full attack surface from a low-privilege shell to root: SUID/SGID binary abuse via GTFOBins, Linux capabilities exploitation…

• Offensive Crypto Attacks

  by @SnailSploit

  Systematic methodology for identifying and exploiting cryptographic implementation weaknesses in real-world applications. Covers padding oracle attacks against CBC-mode ciphers with PKCS7 padding (Vaudenay's original attack…

• Offensive Phishing

  by @SnailSploit

  Phishing campaign execution methodology for authorized red team engagements. Covers end-to-end campaign lifecycle: infrastructure provisioning (GoPhish, SMTP relay configuration, domain acquisition and aging, SPF/DKIM/DMARC…

• Offensive K8s Attacks

  by @SnailSploit

  Kubernetes cluster attack techniques covering the full attack lifecycle from initial foothold in a pod to cluster-wide compromise. Covers service account token theft and impersonation, RBAC misconfiguration exploitation…

• Offensive Anti Forensics

  by @SnailSploit

  Anti-forensics and evidence destruction techniques for red team operators conducting authorized engagements. Covers log clearing on Windows (wevtutil, Clear-EventLog, ETW provider patching) and Linux (journal truncation,…

• Offensive Persistence

  by @SnailSploit

  Comprehensive persistence tradecraft for authorized red team engagements covering Windows and Linux mechanisms. Windows techniques include registry Run/RunOnce keys, scheduled tasks, WMI event subscriptions, DLL search order…

• Offensive Api Abuse

  by @SnailSploit

  Advanced API exploitation methodology focused on business logic abuse and sophisticated attack patterns that bypass traditional security controls. Covers business logic bypass through API call chaining and workflow manipulation.…

• Offensive Graphql

  by @SnailSploit

  Offensive methodology for attacking GraphQL APIs during penetration tests and bug bounty engagements. Covers the full attack lifecycle: endpoint discovery, introspection abuse and blind schema reconstruction when introspection…

• Offensive Reporting

  by @SnailSploit

  Penetration test and red team report writing methodology. Covers executive summary structuring (risk-led narrative for non-technical readers), technical finding format (title, severity, affected scope, narrative, reproduction…

• Offensive Lateral Movement

  by @SnailSploit

  Comprehensive lateral movement tradecraft for authorized red team engagements covering credential-based movement (pass-the-hash, pass-the-ticket, overpass-the-hash), NTLM relay attacks (ntlmrelayx with PetitPotam, DFSCoerce,…

• Offensive Api Security

  by @SnailSploit

  Comprehensive API security testing methodology covering REST, gRPC, and WebSocket attack surfaces. Addresses the full OWASP API Security Top 10 2023 including BOLA/IDOR, broken authentication, excessive data exposure, rate…

• Offensive Mobile

  by @SnailSploit

  Mobile (Android + iOS) application penetration testing methodology. Covers static analysis (apktool/jadx for Android, class-dump/Hopper/IDA for iOS), dynamic instrumentation with Frida and Objection, SSL pinning bypass…

• Offensive Advanced Redteam

  by @SnailSploit

  Comprehensive red team operations methodology covering full engagement lifecycle from planning through reporting. Addresses engagement scoping and rules of engagement negotiation, multi-tier C2 infrastructure design with…

• Offensive Iot

  by @SnailSploit

  IoT and embedded device security testing methodology. Covers hardware reconnaissance (UART, JTAG, SWD, SPI flash, I2C EEPROM, eMMC chip-off), firmware acquisition (vendor portals, OTA capture, flash dump, binwalk extraction),…

• Offensive Business Logic

  by @SnailSploit

  Business logic vulnerability testing for web/mobile/API engagements. Covers workflow bypass, state machine violations, multi-step process abuse, price/quantity/discount manipulation, currency confusion, coupon stacking,…

• Offensive Osint

  by @SnailSploit

  Comprehensive OSINT methodology skill for offensive security, red team intelligence gathering, and bug bounty reconnaissance. Covers domain recon, email harvesting, social media profiling, GitHub/code leaks, Shodan/Censys…

• Offensive Sqli

  by @SnailSploit

  SQL injection testing skill for offensive security assessments and bug bounty hunting. Covers error-based, UNION-based, boolean/time-based blind, out-of-band, second-order, NoSQL, GraphQL, WebSocket, and JSON-operator SQLi.…

• Offensive Jwt

  by @SnailSploit

  JWT attack methodology for penetration testers. Covers algorithm confusion (alg:none, RS256→HS256), weak HMAC secret brute force, kid parameter injection (SQLi, path traversal), jku/x5u/jwk header injection, JWKS cache…

• Audit Agents Skills

  by @FlorianBruniaux

  Audit Claude Code agents, skills, and commands for quality and production readiness. Use when evaluating skill quality, checking production readiness scores, or comparing agents against best-practice templates.

• Audit Codebase

  by @FlorianBruniaux

  Codebase health audit scoring 7 categories with progression plan

• Diagnose

  by @FlorianBruniaux

  Interactive troubleshooting assistant for Claude Code issues

• Release Notes

  by @FlorianBruniaux

  Generate release notes in multiple formats from git commits

• Review Pr

  by @FlorianBruniaux

  Perform a comprehensive code review of a pull request

• Indeed Job Search

  by @browser-act

  Scrape job listings from Indeed.com by keyword, location, and country. Returns job title, company, salary, rating, description, benefits, and apply links. Use when user mentions Indeed, Indeed scraper, Indeed jobs, scrape…

• Amazon Product Detail

  by @browser-act

  Amazon product detail page scraper: extract full product data from any open Amazon product detail URL (any /dp/{asin} or /gp/product/{asin} page across all Amazon regional TLDs) — returns asin, url, title, brand, price,…

• Amazon Search Listing

  by @browser-act

  Amazon search and category listing scraper: extract product listings from any Amazon search results page, keyword search URL, or category browse page and return per-item cards (asin, title, url, image, price, listPrice, stars,…