4,624 skills sorted by stars.
Manage dependencies and supply chain security to prevent vulnerable or malicious packages. Use this skill when you need...
Scans your project for outdated npm, pip, Cargo, Go, or Ruby packages. Runs a CVE security audit. Fetches changelogs, su...
Upgrade dependencies safely: read changelogs, classify breaking changes, stage bumps, and gate on tests. Use when updati...
Upgrade outdated dependencies one package at a time, with a changelog check for breaking changes and a test run between...
Secure dependency upgrades with supply chain protection, cooldowns, and staged rollout. Use when upgrading deps, configu...
Scans dependencies for known vulnerabilities (npm audit, pip-audit, etc.), generates reports, and suggests fixes. Use wh...
Deploys deception-based honeytokens in Active Directory including fake privileged accounts with AdminCount=1, fake SPNs...
<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
Audit dependency risks and updates.
Manage dependencies and fix CVEs — check outdated packages, update a specific package, run security audit, explain why a...
Audit and upgrade project dependencies — check for vulnerabilities and outdated packages
Use when hardening npm supply chain, pinning dependency versions, adding .npmrc security flags, or setting up Renovate a...
Dependency-upgrade campaign — outdated scan, batch-by-severity, breaking-change remediation, lockfile audit. Use when CV...
Block unsafe deserialization and unsafe XML parsing in Java, Python, .NET, PHP, and Ruby: gadget chains, unrestricted ty...
Design or review an agent's skills and tools. Use when deciding whether behavior belongs in instructions, deterministic...
Use when establishing or reviewing a data retention and deletion policy for personal or business data
Design a form that people finish, covering field necessity, grouping and sequencing, input affordances, validation timin...
Design or audit a customer referral, affiliate, or ambassador program using product fit, participant value, consent, inc...
Review a technical design / migration AgDR / feature spec for architectural soundness BEFORE the Build phase. Invokes th...
Design or review an internal, public, HTTP, event, library, or command interface using consumer evidence, invariants, co...
Detect and prevent API enumeration attacks including BOLA and IDOR exploitation by monitoring sequential identifier acce...
Detect unusual API call patterns in AWS CloudTrail logs using boto3, statistical baselining, and behavioral analysis to...
Detect AWS IAM privilege escalation paths using boto3 and Cloudsplaining policy analysis to identify overly permissive p...
Detect lateral movement in Azure AD/Entra ID environments using Microsoft Graph API audit logs, Azure Sentinel KQL hunti...
Detect and investigate Azure service principal abuse including privilege escalation, credential compromise, admin consen...
Audit Azure Blob and ADLS storage accounts for public access exposure, weak or long-lived SAS tokens, missing encryption...
Detect and test for OWASP API3:2023 Broken Object Property Level Authorization vulnerabilities including excessive data...
Business Email Compromise (BEC) is a sophisticated fraud scheme where attackers impersonate executives, vendors, or trus...
This skill teaches security teams how to deploy and operationalize Amazon GuardDuty for continuous threat detection acro...
Detects command-and-control (C2) communications tunneled through DNS protocol including DNS tunneling tools (Iodine, dns...
Detecting compromised cloud credentials across AWS, Azure, and GCP by analyzing anomalous API activity, impossible trave...
Detect LSASS credential dumping, SAM database extraction, and NTDS.dit theft using Sysmon Event ID 10, Windows Security...
Detect DCSync attacks where adversaries abuse Active Directory replication privileges to extract password hashes by moni...
Detect compromised O365 and Google Workspace email accounts by analyzing inbox rule creation, suspicious sign-in locatio...
Detects defense evasion techniques used by adversaries in endpoint logs including log tampering, timestomping, process i...
Detect Kerberos Golden Ticket forgery by analyzing Windows Event ID 4769 for RC4 encryption downgrades (0x17), abnormal...
Detect Kerberos Golden Ticket forgery (e.g. Mimikatz-forged tickets) by analyzing Windows Event ID 4769 for RC4 encrypti...
Triage npm packages and lockfiles for install-script malware, credential exfiltration, and worming behavior using GuardD...
Detect malicious scheduled task creation and modification using Sysmon Event IDs 1 (Process Create for schtasks.exe), 11...
This skill covers detecting anomalies in Modbus/TCP and Modbus RTU communications in industrial control systems. It addr...