Plugins

10 plugins

Deep Research Report

For analysts and researchers needing comprehensive, evidence-backed reports with citations.

11 skills · plugin

Market Research Report

Install this pack to produce a decision-oriented market research report with competitive analysis, market sizing, and source attribution.

7 skills · plugin

Threat Intelligence Analysis

For threat analysts correlating IOCs, building campaign graphs, and producing intelligence reports.

9 skills · plugin

Reporting and summary skills for the Han suite. Turns feature specifications into plain-language stakeholder summaries (also called executive or business summaries) with diagrams, for sharing with non-technical stakeholders before implementation kicks off.

2 skills · plugin

Experimentation Pipeline

From hypothesis to impact reporting, this pack enables rigorous experimentation and evidence-based decisions.

4 skills · plugin

DotNet Test Quality Audit

Analyze .NET test suites for anti-patterns, maintainability issues, and assertion diversity, producing a severity-ranked report.

3 skills · plugin

Optimize Power BI Performance

Systematically diagnose and resolve performance issues in Power BI models, reports, and queries using a structured troubleshooting methodology.

3 skills · plugin

Market Sentiment Report

Install this pack to aggregate market-wide sentiment indicators including VIX, Put/Call ratio, Fear & Greed Index, and classify the regime.

3 skills · plugin

@brycewang-stanford

Twelve-skill bundle covering the NEJM clinical manuscript lifecycle: workflow router, clinical-significance fit, study design & trial registration, EQUATOR reporting guidelines, structured abstract, terse IMRAD writing, clinical statistics, clinical display items, clinical ethics & integrity, Vancouver/ICMJE references, submission preflight, and response to reviewers.

7 skills · plugin

Atlassian-facing extensions to the Han suite. Adds markdown-to-confluence, which publishes a local Markdown file to a user-specified Confluence page; project-documentation-to-confluence, which runs the han-documentation project-documentation skill and then publishes the result there; investigate-to-confluence, which runs the core investigate skill and publishes the resulting investigation report t

6 skills · plugin

Results for “report”

28 skills

Audits source code across C++, Android, iOS, and Web to classify files, detect embedded third-party libraries, and produce four-level verdicts with interactive HTML reports.

red-teaming-llms-with-garak

Run NVIDIA garak probe suites against an LLM endpoint to test for jailbreaks, prompt injection, data leakage, and toxic generation, then interpret the hit-rate report for triage and reporting.

24.6k · bundle

Sets up and runs OSS-Fuzz fuzzing harnesses locally, builds project images, and generates coverage reports.

Runs read-only exposure checks for security advisories and writes a structured local audit report.

performing-aws-account-enumeration-with-scout-suite

Enumerate AWS resources and identify misconfigurations using ScoutSuite to generate interactive security reports.

24.6k · bundle

implementing-vulnerability-sla-breach-alerting

Build automated alerting for vulnerability remediation SLA breaches with severity-based timelines, escalation workflows, and compliance reporting dashboards.

24.6k · bundle

More results

virustotal-automation

Automate VirusTotal threat intelligence operations through Composio's toolkit via Rube MCP, including file scanning, URL analysis, and report retrieval.

security-reviewer

Identifies security vulnerabilities, generates structured audit reports with severity ratings, and provides actionable remediation guidance for code, infrastructure, and cloud environments.

10.4k · bundle

performing-docker-bench-security-assessment

Audits Docker host and daemon configuration against the CIS Docker Benchmark, generating compliance reports with pass/fail/warn results and remediation steps.

24.6k · bundle

cloudflare-security-audit

Finds exploitable vulnerabilities in codebases through a structured multi-phase audit covering recon, hunting, validation, and reporting.

lucaspmarie-a11y

Reviews local branch changes for bugs, security vulnerabilities, and code quality issues, producing a prioritized report with severity ratings and concrete fixes.

performing-external-network-penetration-test

Conduct a comprehensive external network penetration test to identify vulnerabilities in internet-facing infrastructure using PTES methodology, reconnaissance, scanning, exploitation, and reporting.

24.6k · bundle

Provides a comprehensive penetration testing toolchain with 20+ security tools (Nmap, Nuclei, SQLMap, FFUF, Hashcat, etc.) exposed via MCP servers for authorized vulnerability scanning, exploitation, and reporting.

12.8k · bundle

implementing-vulnerability-management-with-greenbone

Deploy and operate Greenbone/OpenVAS vulnerability management using the python-gvm library to create scan targets, execute vulnerability scans, and parse scan reports via GMP protocol.

24.6k · bundle

entry-point-analyzer

Identifies state-changing entry points in smart contract codebases for security auditing. Detects externally callable functions that modify state, categorizes them by access level, and generates structured audit reports.

performing-threat-modeling-with-owasp-threat-dragon

Create data flow diagrams, identify threats using STRIDE and LINDDUN methodologies, and generate threat model reports for secure design review with OWASP Threat Dragon.

24.6k · bundle

wpegpt-analyzer

Automates reverse engineering of PE and ELF binaries by driving IDA with the WPeGPT plugin, producing structured reports on program purpose, network IoCs, suspicious functions, and vulnerability assessment.

detecting-sql-injection-via-waf-logs

Analyze WAF logs from ModSecurity, AWS WAF, or Cloudflare to detect SQL injection attack campaigns, classify injection types, and generate incident reports with OWASP classification.

24.6k · bundle

implementing-email-sandboxing-with-proofpoint

Configure Proofpoint Targeted Attack Protection (TAP) to detonate suspicious attachments and URLs in isolated sandboxes, integrate with email flow, analyze reports, and tune detection policies.

24.6k · bundle

analyzing-malware-sandbox-evasion-techniques

Detect sandbox evasion techniques in malware samples by analyzing timing checks, VM artifact queries, user interaction detection, and sleep inflation patterns from Cuckoo/AnyRun behavioral reports.

24.6k · bundle

agentskillexchange

owasp-zap-api-fuzzer

Automates REST API security testing using the OWASP ZAP Python SDK, running active scans, SQL injection probes, and XSS tests against OpenAPI specs with structured vulnerability reports.

Performs a full-stack security posture assessment with 0-100 risk scoring, scanning dependencies, code patterns, configuration, and data handling, then produces a prioritized report and routes to specialized skills.

Runs an evidence-first, read-only workflow over large codebases via an external JSONL REPL server, retrieving only minimal file slices and greps to produce cited architecture and audit reports.

analyzing-apt-group-with-mitre-navigator

Query MITRE ATT&CK data programmatically, map APT group TTPs to Navigator layers, create multi-layer overlays for gap analysis, and generate actionable intelligence reports for detection engineering teams.

24.6k · bundle

aeon-skill-security-scan

Audit installed SKILL.md files and companion scripts for shell injection, secret exfiltration, path traversal, prompt-override payloads, destructive commands, and obfuscation. Integrates with Bankr Safety Scores and produces delta reports against prior scans.

analyzing-malware-behavior-with-cuckoo-sandbox

Executes malware samples in Cuckoo Sandbox to observe runtime behavior including process creation, file system modifications, registry changes, network communications, and API calls. Generates comprehensive behavioral reports for malware classification and IOC extraction.

24.6k · bundle

analyzing-sbom-for-supply-chain-vulnerabilities

Parses Software Bill of Materials (SBOM) in CycloneDX and SPDX JSON formats to identify supply chain vulnerabilities by correlating components against the NVD CVE database via the NVD 2.0 API, building dependency graphs, calculating risk scores, and generating compliance reports.

24.6k · bundle

Provides a complete workflow for IDA Pro reverse engineering of binaries (PE, ELF, APK, DLL, SO, firmware) using bundled PowerShell scripts to manage the MCP server and open files, then leverages 72 MCP tools for survey, decompilation, cross-references, data-flow tracing, patching, and reporting.

12.8k · bundle