4,624 skills sorted by stars.
<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
Parse Office 365 Unified Audit Logs via Microsoft Graph API to detect email forwarding rule creation, inbox delegation,...
Scans code for security vulnerabilities, detects dangerous patterns, and ensures security decisions are documented. Use...
Analyzes UEFI bootkit persistence mechanisms including firmware implants in SPI flash, EFI System Partition (ESP) modifi...
Parse Apache and Nginx access logs to detect SQL injection attempts, local file inclusion, directory traversal, web scan...
Use when working with Wiz — wiz cloud security posture management. Covers cloud security posture analysis, vulnerability...
Evidence-gated diff review for PRs, branches, commit ranges, staged code changes, and merge readiness checks. Use when a...
Best practices for Android Intent security. Use this skill when auditing component configurations in AndroidManifest.xml...
Annual security report aggregation and analysis. USE WHEN annual reports, security reports, threat reports, industry rep...
Codify security hardening into reusable Ansible roles — CrowdSec IDS, fail2ban, auditd, Tailscale VPN, Semaphore UI, sco...
Use when audited OpenClaw conversations or outgoing Feishu/Slack/channel messages contain concrete business numbers such...
AUTHORIZED USE ONLY: This skill contains dual-use security techniques. Before proceeding with any bypass or analysis: >...
Understand anti-reversing, obfuscation, and protection techniques encountered during software analysis. Use when analyzi...
Provide comprehensive techniques for attacking Microsoft Active Directory environments. Covers reconnaissance, credentia...
Build secure, scalable authentication and authorization systems using industry-standard patterns and modern best practic...
Comprehensive AWS security posture assessment using AWS CLI and security best practices
Build content moderation applications using the Azure AI Content Safety SDK for Java.
Expert patterns for Clerk auth implementation, middleware, organizations, webhooks, and user sync Use when: adding authe...
Centralized 'Truth Engine' for cross-jurisdictional legal context (US, EU, CA) and contract scaffolding.
Use this skill to determine whether a task crosses an approval boundary and what should happen before any execution proc...
Use this skill to turn potentially sensitive technical material into a shareable, reviewable, public-safe form.
Implement AP2 challenge and step-up flows — 3DS2, OTP verification, redirect challenges, and trusted surface interaction...
Implement the AP2 risk signals framework — novel risk considerations for agentic payments, risk payload construction, tr...
Guides management of cross-border data transfers under Asia-Pacific regulatory frameworks including APEC CBPR, ASEAN Mod...
Guides APEC Cross-Border Privacy Rules system certification process including self-assessment against the APEC Privacy F...
Sharing records programmatically via Apex: Share objects, row cause, sharing recalculation, with/without sharing pattern...
Clerk managed authentication - ClerkProvider, middleware, pre-built components, hooks, server-side auth, organizations,...
Auth.js (NextAuth v5) authentication patterns - configuration, providers, session strategies, middleware, database adapt...
Apply when implementing API authentication: JWT tokens, session management, API keys, and auth middleware. Follows JWT B...
Эксперт по API аутентификации. Используй для OAuth 2.0, JWT, API keys, сессий, безопасности токенов и best practices.
Broken Object/Function Level Authorization in REST/JSON APIs (the #1 API risk). Load on any REST API with object ids in...
Automated API security testing starting from domains. Discovers REST, GraphQL, and SOAP APIs, reconstructs schemas, and...
Multi-layer security architecture for API bypass (superadmin/developer). Covers authentication layers, authorization, te...
外部APIとの統合設計パターンに関する専門知識。RESTful API、GraphQL、WebSocket等の統合設計と実装指針を提供します。Anchors:• 『RESTful Web APIs』（Leonard Richardson）/...
REST and GraphQL API design patterns, OpenAPI/Swagger specifications, versioning strategies, and authentication patterns...
Audit and maintain API credential security and rotation schedules.
Discover and fuzz API endpoints, methods, params, and versions systematically. Load when you have an API base but not it...
API endpoint fuzzing for discovering unexpected behaviors, crashes, and security vulnerabilities through malformed reque...
Provide comprehensive techniques for testing REST, SOAP, and GraphQL APIs during bug bounty hunting and penetration test...
This skill should be used when the user asks to "test API security", "fuzz APIs", "find IDOR vulnerabilities", "test RES...
Attack GraphQL APIs. Load on /graphql, /graphiql, /v1/graphql, a POST with {"query":"..."}, Apollo/Hasura/graphene stack...
Test gRPC / Protocol Buffers APIs — reflection, method enumeration, authz, and injection. Load on gRPC services (HTTP/2,...
API key generation, rotation, and management system
Mass assignment / auto-binding privilege escalation. Load when an API binds JSON directly to a model (Rails, Spring, Dja...
API design principles and decision-making.
Use when symfony api platform security