4,624 skills sorted by stars.
Prioritize vulnerability remediation using KEV-style exploitation context plus asset criticality. Use for CVE triage, pa...
Map application security findings to OWASP Top 10 categories and generate remediation checklists. Use for normalized App...
Vulnerability assessment, defensive programming, and attack prevention
UK NCSC Cyber Essentials compliance assessor for code, config, and CI. Maps five technical controls to application check...
Help with application security review, bug bounty workflows, recon, and secure coding while keeping things ethical and s...
OSS-only security for OWASP Top 10, pentest, vuln testing (XSS, SSRF, CSRF, business-logic, Host header), threat modelin...
Foundational cybersecurity literacy covering threat landscape (malware, phishing, social engineering, network attacks),...
FETIH Siber Güvenlik Ana Orkestratörü — 912+ skill ile tüm siber güvenlik alanlarını kapsar. Tehdit avı, zararlı yazılım...
红队渗透 / 攻防 — 受授权的红队作业者 + 渗透测试工程师 + 攻击型安全顾问的认知操作系统 (侦察 OSINT / 外网渗透 / 内网 AD 渗透 BloodHound + Kerberoasting + ADCS 利用 + 横向移动...
Security and enterprise architecture advisory skill. Use this skill when the user needs help with cybersecurity strategy...
Security advisory skill (free edition). Use this skill when the user needs help with cybersecurity strategy, threat mode...
Query the Cyfrin/Solodit findings database (50,530+ findings from 30+ audit firms) for vulnerability research, pattern e...
Queries Cynara database and validates runtime privilege policies. Coordinates access control decisions across system ser...
Audits a Cloudflare application repository offline for code paths and configuration that may create usage-based billing...
Stores a DAG definition once and re-runs it by name, instead of pasting the definition into every run. Use when the user...
Validates permission inheritance between parent and child agents. Ensures child permissions are equal to or more restric...
The read-only morning pass over one ad account: last seven complete days against the prior seven, budget going nowhere,...
The Damage Control Expert - Guardian of the Nebuchadnezzar v4.0 system integrity. Monitors PreToolUse hooks, manages blo...
Production-ready security analysis with CMMC Level 2 compliance. USE WHEN user needs vulnerability scanning, STRIDE thre...
Automatically validate DAPR HTTP middleware configuration files. Checks for correct middleware types, proper secret refe...
基于 gin-gonic/gin 的企业级 Web 框架增强版，提供开箱即用的 JWT 认证、SSE 实时通信、缓存管理、OpenAPI 文档生成等企业级功能。涵盖选项式路由配置、统一响应格式、中间件管理、安全加固、性能优化等完整开发能力。
Dark web intelligence collection methodology — vendor-first access posture, sourced reference lists for 35+ underground...
View all tracked vulnerabilities and their current status
Expert routing agent for Dynamic Application Security Testing (DAST). Covers runtime scanning fundamentals, active vs. p...
Automate dynamic web vulnerability scanning using OWASP ZAP and Nuclei in CI/CD staging environments.
Security reviewer specializing in Dynamic Application Security Testing - analyzing running application behavior and runt...
Reviews DAST tool configurations against OWASP Top 10:2021 and OWASP Testing Guide v4.2. Auto-invoked when reviewing OWA...
Dynamic Application Security Testing execution and management. Configure and execute OWASP ZAP and Nuclei scans, run aut...
Perform dynamic application security testing with OWASP ZAP, Burp Suite, and Nikto. Test running applications for securi...
Dynamic application security testing (DAST) using OWASP ZAP (Zed Attack Proxy) with passive and active scanning, API tes...
Scans GitHub repositories, S3 buckets, and Google Drive for personally identifiable information (PII), protected health...
Data Lineage Tracer. Professional enterprise agent for Data Lineage Tracer within the Data Science sector.
Understanding and managing what digital services collect, store, share, and infer about you. Covers password security an...
This skill enables Claude to automatically scan code and configuration files for potential data privacy vulnerabilities...
Expertise in maintaining complete control over enterprise data in AI systems, ensuring data residency compliance, implem...
AWS Database Migration Service (DMS) operational review and troubleshooting skill. Conducts best practices validation, h...
Use for authorized database security assessment covering PostgreSQL/MySQL/MSSQL/Mongo/Redis exposure, authz, UDF/command...
This skill enables Claude to perform comprehensive database security scans using the database-security-scanner plugin. I...
Comprehensive database security scanning and data integrity validation. Identify security vulnerabilities, enforce OWASP...
Track data flow between function parameters, calls, and arguments using taint analysis. Use when detecting vulnerabiliti...
Knowledge base from the DoD Systems Engineering Guidebook (September 2026, DOPSR Case # 26-T-2032). Use for the DoD SE p...
Embody David Hume - AI persona expert with integrated methodology skills
dontbesilent 目标清晰化。用维特根斯坦的语言哲学把模糊的目标审计成可检查的交付物。 触发方式：/dbs-goal、/目标、「帮我搞清楚目标」「我想做个人 IP」「我的目标是成为...」「我想变得更...」 Goal clarif...
Basic usage or getting-started notes:
Use when pulling Active Directory credential material through directory replication on an authorized engagement. Covers...
Drafts DD Form 254 Contract Security Classification Specifications for classified government contracts. Use when prepari...
Use when a project has a .ddev/ folder or needs one: DDEV setup on a new machine, version pinning, config.local.yaml and...