Security

zyrexnn Skill

Security payloads, bypass tables, wordlists, gf pattern names, always-rejected bug list, and conditionally-valid-with-chain table. Use when you need specific payloads for XSS/SSRF/SQLi/XXE/NoSQLi/command injection/SSTI/IDOR/path-traversal/HTTP smuggling/WebSocket/MFA bypass, or bypass techniques. Submittability and the always-rejected / what-NOT-to-submit decision are owned by triage-validation.

zyrexnn Skill

Performs whitebox static application security testing (SAST), code review, API route extraction, credential hunting, and vulnerability pattern detection in local repositories or GitHub codebases.

zyrexnn Skill

Hunt API security misconfiguration — mass assignment, prototype pollution, HTTP verb tampering. Mass assignment: send {is_admin:true, role:admin, verified:true} on profile/account/reset endpoints — server blindly applies. JWT signature/crypto forging (alg:none, key confusion, kid/jku) is owned by hunt-jwt-crypto; this skill covers only non-crypto JWT handling. Prototype pollution: __proto__ injection in JSON merge / Object.assign / lodash _.merge → polluted prototype reaches sink (RCE in Node, XSS in browser). HTTP verb: GET-bypass-CSRF, X-HTTP-Method-Override, TRACE enabled. Detection: API responses with extra fields, JWTs in headers (decode at jwt.io). CORS misconfiguration (reflect-any-origin, null origin, subdomain-regex bypass, postMessage) is owned by hunt-cors. Use when hunting API misconfigs, mass-assignment, prototype pollution (JWT crypto → hunt-jwt-crypto).

zyrexnn Skill

Hunting skill for race condition vulnerabilities. Built from 12 public bug bounty reports including modern HTTP/2 single-packet attack cases (James Kettle DEF CON 2023 "Smashing the State Machine"; RyotaK / Flatt Security 10,000-request first-sequence-sync expansion 2024). Covers coupon double-redemption, gift-card double-spend, MFA-OTP-validate race, account-create race, faucet/crypto token double-mint, email-activation race, vote/upvote inflation, password-reset token race, rate-limit bypass via concurrent requests. Use when hunting race conditions, TOCTOU bugs, MFA-bypass-via-timing.

zyrexnn Skill

Analyzes scan results and code flaws, formulates security hypotheses, generates deterministic PoCs, and eliminates false positives following the "No PoC, No Finding" standard.

zyrexnn Skill

Downloads client-side JavaScript bundles, searches for leaked API keys, tokens, hardcoded credentials, and hidden internal endpoints.

zyrexnn Bundle

Class-level playbook for external recon when the standard Go/unix toolchain is unavailable — Python-equivalent probing, DNS resolution, port scanning, CMS/git-server fingerprinting, anonymous repo enumeration, and verified finding write-ups. Use alongside or instead of recon/web2-recon pipelines when binaries are missing or probing needs custom logic.

zyrexnn Bundle

Authorized black-box web/API audit WITHOUT test accounts — unauth probing discipline, unauth-IDOR rounds using leaked IDs, JS-bundle-first attack surface mapping, non-destructive gates, and local report delivery conventions (no zip, follow sibling example folder). Use when asked to audit/pentest a target where you hold no credentials, and when writing the local report deliverable afterwards.

zyrexnn Bundle

Hunt non-ATO account-abuse vulnerabilities — logic flaws in authentication/account endpoints that cause harm without taking over another account. Covers: per-email account-lockout DoS (rate-limit keyed on victim email instead of IP), HTTP-method anomalies on auth routes (DELETE/PUT on /login returning success), password-reset fragility and error-handling leaks, and the missing-header/CORS triage that turns these from noise into rated findings. Use when testing login/register/forgot-password/MFA endpoints, reviewing auth flow resilience, or rating auth-logic bugs that are NOT full account takeover. Complements hunt-ato (which covers takeover paths only).

zyrexnn Bundle

Assess deployments of New API / One API (and forks) — AI API routers / gateways ("Unified AI API gateway" SPAs) and their Midtrans-backed storefront subdomains (topup.* / shop.*). Covers target identification, JS-bundle route mining, the misleading /api/setup root_init guard, /api/status info disclosure, login rate-limiting checks, storefront payment-bypass PoC (Midtrans bind), coupon/redeem & IDOR-topup testing, and non-destructive PoC discipline.

zyrexnn Bundle

Class-level playbook for mining secrets from git history on self-hosted forges (Gitea/Gogs/GitLab) during authorized assessments — anonymous repo browsing enumeration, deleted-file recovery via deletion-commit parents, raw-blob URLs with `^` parent syntax, live read-only validation of leaked static keys, and the "removed later != fixed" remediation trap. Use when a target runs its own git server or when leaked credentials need impact proof.

zyrexnn Bundle

Workspace conventions for authorized security-engagement deliverables — canonical report location (/workspace/reports/<target>/), plain files not zip, follow-the-existing-format rule, report-aggregator overwrite trap, bypass-before-clear validation gate for negative claims, and Cloudflare UA pitfalls in PoC reproduction. Use at report-writing time or before declaring any control "secure".

zouyangxiaohao111 Skill

Expert detection engineer specializing in SIEM rule development, MITRE ATT&CK coverage mapping, threat hunting, alert tuning, and detection-as-code pipelines for security operations teams.

zouyangxiaohao111 Skill

Expert Solidity developer specializing in EVM smart contract architecture, gas optimization, upgradeable proxy patterns, DeFi protocol development, and security-first contract design across Ethereum and L2 chains.

applicate2628 Bundle

Auth, secrets, injection, exposure: merge gate.

practice019 Bundle

审计并修复整个 DSH 技能库：库级两级扫描（硬门禁 + 宽口径：frontmatter / name / CRLF / 引用可解析 / 机器路径 / 重复内容 / description 质量）加单技能纵深体检（frontmatter 残留键、description 双语、专有运行时残留、引用精度、技能内重复、嵌套注册性），自动归类已知误报，再按 epoch 循环逐个原子修复并复验。当用户要求审查技能、检查 skill 规范、技能库体检、修复 skill、批量修技能、skill 有没有问题、清理技能库时使用。 Audit and repair the entire DSH skill library: library-level hard gate plus wide scan, plus a per-skill deep check (leftover foreign frontmatter keys, bilingual description, foreign runtime residue, reference precision, intra-skill duplicates, nested-skill registration), auto-classify known false positives, then fix atomically one at a time in an epoch loop with re-verification. Use when the user asks to audit skills, check skill conventions, run a skill-library health check, repair skills, bulk-fix skills, or clean up the library.

practice019 Bundle

逆向工程与安全工作流的路由器：把逆向、漏洞利用、渗透测试、恶意样本、移动端、固件、浏览器自动化、文档与安全类任务分派到对应的专项技能。当任务跨模块、或不确定该走哪个逆向入口时使用。 Routes reverse engineering, exploitation, penetration testing, malware, mobile, firmware, browser automation, documentation, and security tasks to the appropriate specialist skill. Use when a task spans modules or the correct reverse-skill entrypoint is unclear.

practice019 Bundle

Use for authorized Android or iOS application reverse engineering and security testing, including APK or IPA analysis, runtime instrumentation, SSL pinning, and platform protection checks.

practice019 Bundle

固件 / IoT 渗透链。从拿到一坨 .bin / .img 开始，闭环走完逆向 → 提取 → 模拟 → 利用。 方法论遵循 OWASP FSTM 九阶段；工具链以 binwalk v3、unblob、EMBA、Firmadyne、AFL++ 为主。 适用场景：路由器/摄像头/智能家居固件审计、固件升级包逆向、IoT CVE 复现、嵌入式 0day 挖掘。 触发关键词：固件、firmware、IoT、binwalk、unblob、UART、JTAG、squashfs、UBI、JFFS2、Firmadyne、QEMU 全系统仿真、EMBA、固件渗透、路由器固件、嵌入式漏洞利用、bootloader、NVRAM、FAT、firmware analysis toolkit。

arnie016 Bundle

Audit and polish a GitHub-ready repository. Use when Codex needs to classify a rough project, choose the right README shape, and add only the minimum launch essentials needed for a clean shareable repo.

arnie016 Bundle

A repo audit panel that turns a GitHub link into a crisp operating brief, risk pass, and next-step suggestion.

arnie016 Bundle

Audit macOS app Info.plist and entitlement files before build or release. Use when Codex needs to check bundle metadata, menu-bar app activation policy hints, permission usage strings, sandbox entitlements, or repo-wide plist hygiene without changing signing settings or project files.

arnie016 Bundle

Audit a local release folder for app bundles, packaged archives, release notes, and screenshots before you ship from the Mac. Use when Codex needs a deterministic packaging check instead of a manual Finder scavenger hunt.

jaygptpro Skill

Audit Amazon Payments report for fee errors. Finds incorrect FBA fulfillment fees (wrong size tier), missing referral fee credits on refunds, duplicate charges, and FBA storage discrepancies, and produces an FBA fee-discrepancy case packet per finding. Use when a user asks about Amazon fee errors, overcharged fees, wrong size tier, missing referral refunds, fee audit, or Payments report analysis. Trigger phrases: "fee audit", "overcharged", "wrong fee", "size tier error", "referral fee refund", "payments report", "FBA fee dispute". Works with zero tools. the user pastes Payments report rows.

jaygptpro Skill

Plan and write conversion-grade Amazon A+ Content (formerly called Enhanced Brand Content, renamed in 2019), including Premium A+ tier modules (video, carousel, interactive hotspots, larger comparison chart, Q&A) and the Brand Story carousel that runs across the catalog. Selects the right module layout, writes persuasive module copy, designs the comparison chart, and produces designer-ready image briefs. Use when a user asks to create, plan, improve, or audit A+ Content, Enhanced Brand Content, Premium A+, brand story modules, comparison charts, interactive A+ modules, A+ video, or the visual section below the bullet points on an Amazon listing. Trigger phrases include "A+ content", "EBC", "enhanced brand content", "brand story module", "comparison chart", "below the fold", "premium A+", "brand story", "A+ video", "interactive modules", "premium content". Works with zero tools. the user describes the product and pastes any existing copy.

halseyyang Bundle

Expert review, editing, and drafting of medical device registration, FDA submission, EU MDR technical documentation, clinical evaluation, risk management, standards compliance, labeling, IFU, software, cybersecurity, usability, PMS/PMCF, and client regulatory documents. Use when the user provides documents, excerpts, tables, protocols, reports, submissions, deficiency letters, reviewer questions, or draft claims and asks for professional comments, modification suggestions, redlines, gap analysis, writing, rewriting, translation-polishing, audit-style review, or document package preparation.

cdeistopened Skill

Generate, diagnose, and refine video/content hooks using Kallaway's frameworks. Four modes — archetype (6 variants), snapback (3-line formula), power-word (6-bucket construction), and diagnose (4-mistake audit + rewrite). Every hook passes through the same quality gate. Use when writing hooks for YouTube videos, Reels, newsletters, blog posts, or any content that needs to grab attention in the first 2 seconds.

practice019 Bundle

Review 阶段：合并前的质量门禁——代码评审、简化、安全加固、性能优化（对应 /review、/code-simplify、/webperf）。当要评审代码或做上线前质量把关时使用。 Review phase: quality gates before merge. Use when reviewing code, simplifying, hardening security, or optimizing performance (equivalent to /review, /code-simplify, /webperf).

dinglebear-ai Bundle

Create a sourced investigation, audit, benchmark, comparison, incident-analysis, or research report in the personal knowledge base. Use when the user says "write a report", "document the investigation", "capture the audit", "summarize the benchmark", or needs conclusions that are broader than a session or maintenance log. This skill writes a report from observed evidence and never performs unrelated remediation, commits, or publishes it.

dinglebear-ai Bundle

Audit the current Git checkout, open worktrees, local branches, stale or merged cleanup candidates, merge readiness, conflicts, PR/CI/test state, blockers, and safest merge order. Use when the user asks for repo status, branch/worktree cleanup candidates, stale branch review, conflict investigation, merge readiness, or what must be done before open branches can merge.

dinglebear-ai Bundle

Drive Microsoft Sysinternals CLI tools on a remote Windows machine over SSH — list/kill processes (pslist, pskill), inspect open handles (handle), audit autoruns (autorunsc), check TCP/UDP connections (tcpvcon), verify file signatures + VirusTotal (sigcheck), audit permissions (accesschk), find alt data streams (streams), measure disk usage (du), check who's logged in (psloggedon), and run remotely (psexec). Use whenever the user wants kernel-level handle inspection, signed-binary process control under EDR, autorun forensics, file signature verification, security/permission audits, or anything from Mark Russinovich's suite. Sibling to the nircmd / NirSoft skill — prefer Sysinternals when the answer needs Microsoft-signed tooling (works under stricter AV, deeper system access) or covers kernel handles, autoruns, or signature/permission audits. Defaults to `ssh steamy-wsl` and `C:\tools\sysinternals\`; override via `SYSINTERNALS_HOST` and `SYSINTERNALS_DIR` env vars.

dinglebear-ai Bundle

Use this skill when the user asks to check source files against the monolith policy, find oversized files, audit Rust function size, run a whole-repo monolith report, or verify staged changes stay under file/function size limits.

dinglebear-ai Bundle

Measure repositories or homelab configuration against canonical standards, distinguish documented policy from actual enforcement, produce a drift report, and optionally reconcile explicitly selected gaps. Use when the user says "align standards", "audit repo standards", "check fleet drift", "standardize the Rust repos", or asks whether repositories match the policies in the knowledge base. Default to audit mode. Apply changes only when the user explicitly requests implementation.

dinglebear-ai Bundle

Create, scaffold, develop, test, and package every supported Unraid plugin architecture: (1) an Unraid OS/webGUI plugin distributed as a .plg with dynamix .page UI, PHP/bash backend, flash-safe persistence, and reproducible packaging; or (2) an Unraid API plugin distributed as a NestJS/npm peer-dependency package exporting adapter and ApiModule/CliModule; or (3) a coordinated hybrid with classic host lifecycle plus API/GraphQL functionality. Use when a user asks to create, scaffold, develop, review, audit, explain, migrate, package, test, repair, or troubleshoot an Unraid plugin implementation; build a .plg; add an Unraid Settings page or host service; create an Unraid API plugin; extend @unraid/api; inspect an existing plugin's architecture or build workflow; or coordinate a hybrid plugin. Do not use for Community Applications metadata, listing, moderation, or submission alone; use submit-unraid-community-app after the plugin itself works.

dinglebear-ai Bundle

Create a factual homelab maintenance record for live infrastructure, hosts, services, networking, storage, security, deployments, upgrades, migrations, repairs, audits, and routine operations. Use when the user says "write a maintenance log", "log this homelab work", "document the deployment", "record this repair", or when wrap-session routes a session containing live operational changes. This skill writes the maintenance artifact only and never commits, pushes, deploys, restarts, or changes infrastructure.

kai-cli Bundle

Structured OSINT investigations — people lookup, company intel, investment due diligence, entity/threat intel, domain recon, organization research using public sources with ethical authorization framework. USE WHEN OSINT, due diligence, background check, research person, company intel, investigate, company lookup, domain lookup, entity lookup, organization lookup, threat intel, discover OSINT sources.