4,624 skills sorted by stars.
<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
Testing web applications for Cross-Site Request Forgery vulnerabilities by crafting forged requests that exploit authent...
Kerberoasting is a post-exploitation technique that targets service accounts in Active Directory by requesting Kerberos...
Perform Kerberoasting, a post-exploitation technique that enumerates Active Directory service accounts with Service Prin...
Malware IOC extraction is the process of analyzing malicious software to identify actionable indicators of compromise in...
Automate OSINT collection using SpiderFoot REST API and CLI for target profiling, module-based reconnaissance, and struc...
Automate OSINT collection with the SpiderFoot REST API and CLI (sf.py/spiderfoot-cli) across 200+ modules, selecting sca...
Crafts and injects custom network packets using Scapy, hping3, and Nemesis during authorized security assessments to tes...
Conduct red team operations using the Covenant C2 framework for authorized adversary simulation, including listener setu...
Conducts red team operations using the Covenant C2 framework for authorized adversary simulation, covering listener setu...
Audit service accounts across enterprise infrastructure to identify orphaned, over-privileged, and non-compliant account...
Simulates SSL stripping attacks using sslstrip, Bettercap, and mitmproxy in authorized environments to test HSTS enforce...
Simulates SSL stripping / HTTPS downgrade attacks using sslstrip, Bettercap, and mitmproxy in authorized lab environment...
Repeat and compare AML/KYC/KYB checks for an existing relationship, document changes, refresh evidence and prepare human...
Analyze OpenClaw skill permissions and explain exactly what each permission allows. Identifies over-privileged skills an...
基于蓝鲸 IAM 的前端鉴权方案，包含 v-authority 指令实现、权限组件封装及无权限交互规范。
Diagnose permission issues across settings files (read-only analysis)
吏部权限矩阵与权限变更流程，定义各 Agent 权限等级、分配与审计规则
Guide for configuring Claude Code permissions effectively. Use when setting up security policies, configuring allow/deny...
Detects over-broad permission requests where a narrower permission or privacy-preserving alternative API is sufficient,...
Command approvals, tool policies, and exec security
Three-layer permission system (Team Roles + Plans + Quotas) for this Next.js application. Covers user roles, team roles,...
Uniswap Permit2 SDK for gasless token transfers in IndexedEx. Use when implementing swap/deposit/withdraw with signature...
Administer IT — monitor security and configure Workspace.
Embody Peter Cook - AI persona expert with integrated methodology skills
Author and audit PFC 5.0 FISH for asphalt cases, including def/end functions, globals and locals, callbacks, numbered hi...
Reviews and fixes a just-implemented phase of a multi-phase plan during a phase-orchestrator run. Use after a phase's im...
Email phishing analysis - headers, attachments, URLs
Project health audit and health check — architecture, performance, tests, dependencies, code quality. Use when assessing...
Bump outdated Hex deps — inventory, snapshot changelogs, update, fix breaks, split reviewable PRs (patches bundled, majo...
Assesses supplied daylight physical-security observations from authorized public vantage points at opaque site and contr...
Configure rigid body dynamics, ragdoll physics, custom collision response matrices, and spatial hash grids.
Conducts Privacy Impact Assessment for health data processing under GDPR Article 9, HIPAA, and sector-specific health pr...
Receive and verify Picqer webhooks. Use when setting up Picqer webhook handlers, debugging X-Picqer-Signature verificati...
Systematic repo-wide audit for personal information exposure — API keys, tokens, passwords, Windows paths, usernames, em...
Handling personally identifiable information under European and Australian privacy regulations.