Plugins
1 pluginResults for “application-security”
19 skills
eli-yu-first log-analysis-agent
Analyzes application logs to identify errors, performance issues, and security incidents
6 · bundle
zhaoxuya520 llm-security
Conduct authorized security assessments of LLM applications and AI agents, covering prompt injection, tool abuse, RAG exposure, memory poisoning, and model supply-chain risks.
12.8k · bundle
inehemiasm firebase-ai-logic-basics
Official skill for integrating Firebase AI Logic (Gemini API) into web applications. Covers setup, multimodal inference, structured output, and security.
0 · bundle
mukul975 performing-clickjacking-attack-test
Test web applications for clickjacking vulnerabilities by assessing frame embedding controls and crafting proof-of-concept overlay attacks during authorized security assessments.
24.6k · bundle
seaworld008 breach
Designing red team attack scenarios, threat models, MITRE ATT&CK/OWASP application, Purple Team exercises, and AI/LLM red teaming. Use when adversarial security validation is needed.
65 · bundle
orchestra-research prompt-guard
Detect prompt injections and jailbreak attempts in LLM applications using Meta's 86M parameter classifier. Filter user inputs, third-party data, and RAG documents with low latency and multilingual support.
10.4k
More results
lingxling ai-ml
Orchestrates AI/ML workflows for building LLM applications, RAG systems, AI agents, and ML pipelines, covering design, integration, observability, and security.
253
machenjie web-security
`analysis-agent`/`task-agent`/`review-agent`: use for render sinks, browser state, server fetch, upload, redirect, cross-origin, or embedding changes; skip without web exposure.
4 · bundle
kensaurus plan-security-audit
OWASP Top 10 + Supabase-first hardening burndown. Use when "security audit plan", "OWASP audit", "hardening plan", or "security burndown". App-layer auth flows → audit-auth-flows. Table RLS → plan-rls-audit. Key rotation → plan-secrets-audit. App LLM attacks → audit-llm-security.
8 · bundle
kensaurus audit-security
Static OWASP review of app code (injection, headers, deps). Use when "review security" or "check vulnerabilities". Session/route×gate/getSession → audit-auth-flows. Plan-only burndown → plan-security-audit. Table RLS → plan-rls-audit. LLM attacks → audit-llm-security.
8
machenjie authentication-security
Use with analysis-agent, task-agent, or review-agent for task-local authentication lifecycle and recovery risk. Do not use without that decision or as task owner.
4 · bundle
jorcan ai-ml
Orchestrates AI/ML workflows for building LLM applications, RAG systems, AI agents, and ML pipelines, covering design, integration, observability, and security.
0 · bundle
shulkwisec api-security
Deep API security assessment beyond surface scanning. Covers the full OWASP API Security Top 10 (2023): Broken Object Level Authorization (BOLA / IDOR), Broken Authentication, Broken Object Property Level Authorization (mass assignment + excessive data exposure), Unrestricted Resource Consumption, Broken Function Level Authorization (BFLA / vertical privilege escalation), Unrestricted Access to Sensitive Business Flows, Server-Side Request Forgery via API parameters, Security Misconfiguration, Improper Inventory Management (shadow/zombie/deprecated endpoints, v1/v2 drift), and Unsafe Consumption of third-party APIs. Works across REST, GraphQL, gRPC, SOAP, and MCP servers. Discovers APIs from OpenAPI/Swagger specs, GraphQL introspection, gRPC reflection, .well-known endpoints, JS bundles, and traffic capture. Uses kiterunner, ffuf, schemathesis, restler-fuzzer, openapi-fuzzer, graphql-cop, clairvoyance, batchql, inql, jwt_tool, postman, mitmproxy, and manual http(action="request", ...) payloads. Every techniqu
21
phoroth ai-ml
Orchestrates AI/ML workflows for building LLM applications, RAG systems, AI agents, and ML pipelines, covering design, integration, observability, and security.
3
lucaspmarie-a11y ai-ml
Orchestrates AI/ML workflows for building LLM applications, RAG systems, AI agents, and ML pipelines, covering design, integration, observability, and security.
5
antigravity ai-ml
Orchestrates AI/ML workflows for building LLM applications, RAG systems, AI agents, and ML pipelines with observability and security.
42.4k
mukul975 detecting-ai-model-prompt-injection-attacks
Detects prompt injection attacks targeting LLM-based applications using regex pattern matching, heuristic scoring, and DeBERTa transformer classification.
24.6k · bundle
mukul975 testing-for-system-prompt-leakage
Test LLM applications for system prompt leakage using manual payloads, garak, and Promptfoo to extract embedded secrets and routing logic.
24.6k · bundle
mukul975 implementing-llm-guardrails-for-security
Builds input and output validation guardrails for LLM-powered applications to prevent prompt injection, data leakage, toxic content generation, and hallucinated outputs using NeMo Guardrails, Presidio, and Guardrails AI.
24.6k · bundle