Plugins

12 plugins

Privacy Data Protection Skills

Privacy Data Protection Skills from mukul975/Privacy-Data-Protection-Skills.

100 skills · plugin

@snoodleboot-io

Prompticorn from snoodleboot-io/prompticorn.

2 skills · plugin

Produkthaftung und Produktrecht: Produktsicherheit, GPSR, ProdHaftG, deliktische Produzentenhaftung, Right to Repair, Software-/OTA-Updates, digitale Produktlebenszyklen, Rückruf, Marktüberwachung und Launch-Review.

3 skills · plugin

Planning & Product

PRDs, roadmaps, OKRs, discovery and product strategy.

23 skills · plugin

Product Idea to PRD

For product managers to structure and validate a new product concept.

11 skills · plugin

Product Manager Skills

Product Manager Skills from deanpeters/Product-Manager-Skills.

56 skills · plugin

Praxis from ConcertoNotes/codex-plugins.

7 skills · plugin

@alirezarezvani

13 product skills with 17 Python tools: product manager toolkit (RICE, PRDs), agile product owner, product strategist, UX researcher, UI design system, competitive teardown, landing page generator, SaaS scaffolder, product analytics, experiment designer, product discovery, roadmap communicator, code-to-prd, research summarizer, apple-hig-expert.

10 skills · plugin

Launch on Product Hunt

Launch a product on Product Hunt by researching, preparing assets, and executing the launch playbook.

3 skills · plugin

Presets from amplifthq/oh-my-dsh.

4 skills · plugin

Execution and product management skills: PRDs, OKRs, roadmaps, sprints, pre-mortems, stakeholder maps, user stories, prioritization frameworks, and more.

16 skills · plugin

Prediction Market Arbitrage

Compare Polymarket probabilities with options-implied probabilities to find arbitrage opportunities.

4 skills · plugin

Results for “pr”

232 skills

Protocol Reverse

Authorized reverse engineering of custom binary protocols, Protobuf/gRPC, WebSocket frames, and PCAP-driven protocol recovery with structured workflow and tooling.

12.8k · bundle

Testing Prompt Injection In RAG Pipelines

Probe RAG applications for prompt injection via poisoned retrieved context and embedding manipulation.

24.6k · bundle

Testing For System Prompt Leakage

Test LLM applications for system prompt leakage using manual payloads, garak, and Promptfoo to extract embedded secrets and routing logic.

24.6k · bundle

Detecting Process Hollowing Technique

Detect process hollowing (T1055.012) by analyzing memory-mapped sections, hollowed process indicators, and parent-child process anomalies in EDR telemetry.

24.6k · bundle

Implementing Epss Score For Vulnerability Prioritization

Integrate FIRST's Exploit Prediction Scoring System (EPSS) API to prioritize vulnerability remediation based on real-world exploitation probability within 30 days.

24.6k · bundle

Detecting T1055 Process Injection With Sysmon

Detect process injection techniques (T1055) including classic DLL injection, process hollowing, and APC injection by analyzing Sysmon events for cross-process memory operations, remote thread creation, and anomalous DLL loading patterns.

24.6k · bundle

More results

Detecting Indirect Prompt Injection

Detect and defend against prompt injection hidden in documents, web pages, and images consumed by an agent.

24.6k · bundle

Triaging Vulnerabilities With Ssvc Framework

Triage and prioritize vulnerabilities using CISA's Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree framework to produce actionable remediation priorities.

24.6k · bundle

Detecting AWS Iam Privilege Escalation

Identify AWS IAM privilege escalation paths by analyzing policies for dangerous permission combinations and least-privilege violations using boto3 and Cloudsplaining-style analysis.

24.6k · bundle

Detecting Privilege Escalation In Kubernetes Pods

Detect and prevent privilege escalation in Kubernetes pods by monitoring security contexts, capabilities, and syscall patterns with Falco and OPA policies.

24.6k · bundle

Continuous LLM Red Teaming With Promptfoo

Wire Promptfoo and DeepTeam into CI/CD for automated regression red-teaming of LLM apps against OWASP LLM Top 10 and OWASP Agentic presets, failing the build when jailbreak or injection vulnerabilities regress.

24.6k · bundle

Implementing Cloud Workload Protection

Monitors cloud workloads for runtime threats by checking process lists, network connections, file integrity, and resource utilization anomalies on EC2 and GCE instances.

24.6k · bundle

Exploiting Prototype Pollution In Javascript

Detect and exploit JavaScript prototype pollution vulnerabilities on both client-side and server-side applications to achieve XSS, RCE, and authentication bypass through property injection.

24.6k · bundle

Implementing Email Sandboxing With Proofpoint

Configure Proofpoint Targeted Attack Protection (TAP) to detonate suspicious attachments and URLs in isolated sandboxes, integrate with email flow, analyze reports, and tune detection policies.

24.6k · bundle

Laravel Security

Secure Laravel applications with best practices for authentication, authorization, Eloquent safety, CSRF, XSS prevention, API security, and deployment configurations.

Detecting Process Injection Techniques

Detects and analyzes process injection techniques used by malware, including classic DLL injection, process hollowing, APC injection, thread hijacking, and reflective loading, using memory forensics, API monitoring, and behavioral analysis.

24.6k · bundle

Performing OAUTH Scope Minimization Review

Audits OAuth 2.0 permissions across identity providers to identify over-privileged third-party integrations, excessive API scopes, and unused token grants, enforcing least-privilege access.

24.6k · bundle

Aeon Skill Security Scan

Audit installed SKILL.md files and companion scripts for shell injection, secret exfiltration, path traversal, prompt-override payloads, destructive commands, and obfuscation. Integrates with Bankr Safety Scores and produces delta reports against prior scans.

Detecting Privilege Escalation Attempts

Detect privilege escalation attempts including token manipulation, UAC bypass, unquoted service paths, kernel exploits, and sudo/doas abuse across Windows and Linux.

24.6k · bundle

Builds and queries multi-language source code graphs for security analysis, including blast radius, taint propagation, privilege boundaries, and entry point enumeration.

Prioritizing Vulnerabilities With Cvss Scoring

Calculate CVSS scores, interpret vector strings, and prioritize vulnerabilities using CVSS alongside EPSS and CISA KEV for effective risk-based remediation.

24.6k · bundle

Detecting AI Model Prompt Injection Attacks

Detects prompt injection attacks targeting LLM-based applications using regex pattern matching, heuristic scoring, and DeBERTa transformer classification.

24.6k · bundle

Performing Cve Prioritization With Kev Catalog

Integrate the CISA Known Exploited Vulnerabilities catalog with EPSS and CVSS to prioritize CVE remediation based on real-world exploitation evidence.

24.6k · bundle

Pr Review Expert

Review GitHub PRs and GitLab MRs with structured analysis including blast radius, security scanning, test coverage delta, breaking change detection, and performance impact.

Implementing Ddos Mitigation With Cloudflare

Configure Cloudflare DDoS protection with managed rulesets, rate limiting, WAF rules, Bot Management, and origin protection to mitigate volumetric, protocol, and application-layer attacks.

24.6k · bundle

sakamoto-family-smile

Production Audit

Audits a codebase for production readiness using local evidence, scoring ship/block risk and listing concrete fixes without sending repo data to external services.

Performing S7comm Protocol Security Analysis

Analyze Siemens S7comm and S7CommPlus protocol traffic to identify vulnerabilities such as replay attacks, integrity bypass, unauthorized CPU stop commands, and program download manipulation in SIMATIC S7 PLCs.

24.6k · bundle

Defending Llms With Guardrails

Deploy Llama Guard, NeMo Guardrails, and LLM Guard as runtime input/output scanners to block jailbreaks, prompt injection, and toxic content in production LLM applications.

24.6k · bundle

Detecting Living Off The Land With Lolbas

Detect abuse of legitimate Windows binaries (LOLBins) like certutil, regsvr32, mshta, and rundll32 using process telemetry, Sigma rules, and parent-child process analysis.

24.6k · bundle

Performing Cryptographic Audit Of Application

Systematically reviews an application's use of cryptographic primitives, protocols, and key management to identify vulnerabilities such as weak algorithms, insecure modes, hardcoded keys, insufficient entropy, and protocol misconfigurations.

24.6k · bundle

Red Teaming Llms With Garak

Run NVIDIA garak probe suites against an LLM endpoint to test for jailbreaks, prompt injection, data leakage, and toxic generation, then interpret the hit-rate report for triage and reporting.

24.6k · bundle

Detecting T1548 Abuse Elevation Control Mechanism

Detect abuse of elevation control mechanisms including UAC bypass, sudo exploitation, and setuid/setgid manipulation by monitoring registry modifications, process elevation flags, and unusual parent-child process relationships.

24.6k · bundle

orchestra-research

Detect prompt injections and jailbreak attempts in LLM applications using Meta's 86M parameter classifier. Filter user inputs, third-party data, and RAG documents with low latency and multilingual support.

Implementing API Abuse Detection With Rate Limiting

Implement API abuse detection using token bucket, sliding window, and adaptive rate limiting algorithms to prevent DDoS, brute force, and credential stuffing attacks.

24.6k · bundle

Implementing Next Generation Firewall With Palo Alto

Configure and deploy Palo Alto Networks next-generation firewalls with App-ID, User-ID, zone-based policies, SSL decryption, and threat prevention profiles for enterprise network security.

24.6k · bundle

Django Security

Secure Django applications against common vulnerabilities with production-ready settings, authentication, authorization, and input validation.