Plugins
11 plugins@nickgallick
Perlantir Fleet
Perlantir Fleet from nickgallick/perlantir-fleet.
34 skills · plugin
curated
Prepare Performance Review
Gather work evidence, analyze contributions, and draft a performance review.
3 skills · plugin
curated
Create Customer Persona
Create a customer persona by researching, synthesizing, and documenting user characteristics and behaviors.
3 skills · plugin
curated
Optimize Web Performance
Install this pack to optimize web performance by measuring and fixing Core Web Vitals.
9 skills · plugin
curated
Web Performance Audit and Optimize
Measure performance, identify bottlenecks, and apply fixes to improve Core Web Vitals.
9 skills · plugin
@nickgallick
Workspace
Workspace from nickgallick/perlantir-fleet.
20 skills · plugin
curated
Customer Discovery to Persona
Plan and conduct customer discovery interviews, summarize findings, and synthesize into actionable user personas.
5 skills · plugin
@flyfiref
Growth Companion
Growth Companion from FlyFireF/PersonalAgentAPP.
30 skills · plugin
curated
Web Performance Audit and Fix
Installs a pipeline to audit Core Web Vitals, analyze performance, and debug issues using DevTools.
10 skills · plugin
@nickgallick
Workspace Forge
Workspace Forge from nickgallick/perlantir-fleet.
13 skills · plugin
@nickgallick
Workspace Pixel
Workspace Pixel from nickgallick/perlantir-fleet.
11 skills · plugin
Results for “pe”
149 skills
mukul975 Performing Static Malware Analysis With Pe Studio
Performs static analysis of Windows PE malware samples using PEStudio to examine file headers, imports, strings, resources, and indicators without executing the binary.
24.6k · bundle
mukul975 Performing External Network Penetration Test
Conduct a comprehensive external network penetration test to identify vulnerabilities in internet-facing infrastructure using PTES methodology, reconnaissance, scanning, exploitation, and reporting.
24.6k · bundle
sakamoto-family-smile Perl Security
Secure Perl applications against injection, taint, and web vulnerabilities with validated patterns for input handling, file operations, process execution, and DBI queries.
0
mukul975 Analyzing Malicious PDF With Peepdf
Perform static analysis of malicious PDF documents using peepdf, pdfid, and pdf-parser to extract embedded JavaScript, shellcode, and suspicious objects.
24.6k · bundle
mukul975 Hunting For Persistence Mechanisms In Windows
Systematically hunt for adversary persistence mechanisms across Windows endpoints including registry, services, startup folders, and WMI subscriptions.
24.6k · bundle
tinh2 Pentest
Performs a static-analysis penetration test to find exploitable vulnerabilities, providing proof-of-concept payloads and fixes. Covers injection, XSS, authentication bypass, authorization flaws, path traversal, command injection, CSRF, SSRF, hardcoded secrets, and insecure deserialization, with a full attack surface.
13
More results
zhaoxuya520 Pentest Tools
Provides a comprehensive penetration testing toolchain with 20+ security tools (Nmap, Nuclei, SQLMap, FFUF, Hashcat, etc.) exposed via MCP servers for authorized vulnerability scanning, exploitation, and reporting.
12.8k · bundle
mukul975 Analyzing Persistence Mechanisms In Linux
Detect and analyze Linux persistence mechanisms including crontab entries, systemd service units, LD_PRELOAD hijacking, bashrc modifications, and authorized_keys backdoors using auditd and file integrity monitoring.
24.6k · bundle
mukul975 Hunting For Persistence Via Wmi Subscriptions
Hunt for adversary persistence through Windows Management Instrumentation event subscriptions by monitoring WMI consumer, filter, and binding creation events that execute malicious code triggered by system events.
24.6k · bundle
oyi77 Coding
Coordinates five specialized coding agents (linter, perf, refactor, security, test) to enforce quality gates across the development lifecycle, from lint enforcement through performance profiling, refactoring, security auditing, and test coverage.
10
mukul975 Auditing AWS S3 Bucket Permissions
Audit AWS S3 bucket permissions to identify publicly accessible buckets, overly permissive ACLs, misconfigured bucket policies, and missing encryption settings using AWS CLI, Prowler, and IAM Access Analyzer.
24.6k · bundle
mukul975 Performing Web Application Penetration Test
Systematically tests web applications for vulnerabilities following the OWASP Web Security Testing Guide (WSTG) methodology, covering authentication, authorization, input validation, session management, and business logic using Burp Suite and manual techniques.
24.6k · bundle
mukul975 Performing OAUTH Scope Minimization Review
Audits OAuth 2.0 permissions across identity providers to identify over-privileged third-party integrations, excessive API scopes, and unused token grants, enforcing least-privilege access.
24.6k · bundle
getsentry Skill Scanner
Scans agent skills for security issues including prompt injection, malicious scripts, excessive permissions, secret exposure, and supply chain risks.
845 · bundle
mukul975 Auditing GCP Iam Permissions
Audits Google Cloud Platform IAM permissions to identify overly permissive bindings, primitive role usage, service account key proliferation, and cross-project access risks using gcloud CLI, Policy Analyzer, and IAM Recommender.
24.6k · bundle
mukul975 Performing Iot Security Assessment
Performs comprehensive security assessments of IoT devices and their ecosystems by testing hardware interfaces, firmware, network communications, cloud APIs, and companion mobile applications.
24.6k · bundle
mukul975 Performing GRAPHQL Security Assessment
Assess GraphQL API endpoints for introspection leaks, injection attacks, authorization flaws, and denial-of-service vulnerabilities during authorized security tests.
24.6k · bundle
mukul975 Analyzing Typosquatting Domains With Dnstwist
Detect typosquatting, homograph phishing, and brand impersonation domains using dnstwist to generate domain permutations and identify registered lookalike domains targeting your organization.
24.6k · bundle
mukul975 Performing Web Application Scanning With Nikto
Scan web servers and applications for vulnerabilities, misconfigurations, and outdated software using the Nikto open-source scanner.
24.6k · bundle
drnabeelkhan Security Threat Intelligence
Routes security, compliance, and threat-intelligence tasks to specialized sub-skills for threat modeling, penetration testing, incident response, and vulnerability scanning.
2 · bundle
mukul975 Performing Threat Hunting With Yara Rules
Scan files, directories, and memory dumps using YARA rules to identify malware families, suspicious patterns, and IOC matches.
24.6k · bundle
mukul975 Exploiting Ms17 010 Eternalblue Vulnerability
Exploits the MS17-010 (EternalBlue) vulnerability in Microsoft's SMBv1 implementation for authorized security testing, red team exercises, and penetration testing engagements.
24.6k · bundle
mukul975 Performing Security Headers Audit
Audits HTTP security headers including CSP, HSTS, X-Frame-Options, and cookie attributes to identify missing or misconfigured browser-level protections.
24.6k · bundle
alirezarezvani Pr Review Expert
Review GitHub PRs and GitLab MRs with structured analysis including blast radius, security scanning, test coverage delta, breaking change detection, and performance impact.
20.4k
mukul975 Performing Malware Triage With Yara
Rapidly classify malware samples against known family signatures using YARA rules, covering rule writing, scanning, and integration with analysis pipelines.
24.6k · bundle
zhaoxuya520 Attack Chain
Orchestrates multi-stage attack-path planning and execution across reconnaissance, initial access, privilege escalation, lateral movement, and impact assessment for authorized penetration testing.
12.8k · bundle
zhaoxuya520 Firmware Pentest
End-to-end firmware and IoT penetration testing pipeline following OWASP FSTM methodology. Extracts, emulates, and exploits router, camera, and smart-home firmware using binwalk, EMBA, Firmadyne, and AFL++.
12.8k · bundle
mukul975 Performing Yara Rule Development For Detection
Develop precise YARA rules for malware detection by identifying unique byte patterns, strings, and behavioral indicators in executable files while minimizing false positives.
24.6k · bundle
mukul975 Auditing Kubernetes Cluster Rbac
Audit Kubernetes RBAC configurations to identify overly permissive roles, wildcard permissions, dangerous bindings, service account abuse, and privilege escalation paths using kubectl, rbac-tool, KubiScan, and Kubeaudit.
24.6k · bundle
mukul975 Performing Csrf Attack Simulation
Test web applications for Cross-Site Request Forgery vulnerabilities by crafting forged requests that exploit authenticated user sessions during authorized security assessments.
24.6k · bundle
mukul975 Performing Malware Ioc Extraction
Analyze malicious software to extract actionable indicators of compromise including file hashes, network indicators, registry modifications, and embedded strings, formatted as STIX 2.1 indicators.
24.6k · bundle
wpeace-hch Wpegpt Analyzer
Automates reverse engineering of PE and ELF binaries by driving IDA with the WPeGPT plugin, producing structured reports on program purpose, network IoCs, suspicious functions, and vulnerability assessment.
93 · bundle
mukul975 Analyzing Uefi Bootkit Persistence
Analyzes UEFI bootkit persistence mechanisms including firmware implants, ESP modifications, Secure Boot bypass techniques, and UEFI variable manipulation. Covers detection of known bootkit families, forensic inspection, and integrity verification.
24.6k · bundle
mukul975 Analyzing Cobalt Strike Beacon Configuration
Extract and analyze Cobalt Strike beacon configuration from PE files and memory dumps to identify C2 infrastructure, malleable profiles, and operator tradecraft.
24.6k · bundle
mukul975 Deploying Tailscale For Zero Trust Vpn
Deploy and configure Tailscale as a WireGuard-based zero trust mesh VPN with identity-aware access controls, ACLs, and exit nodes for secure peer-to-peer connectivity.
24.6k · bundle
mukul975 Performing Serverless Function Security Review
Audit serverless functions across AWS Lambda, Azure Functions, and GCP Cloud Functions for overly permissive execution roles, insecure environment variables, injection vulnerabilities, and missing runtime protections.
24.6k · bundle