Plugins
12 plugins@nivkazdan
Security
Security from nivkazdan/skills-agents-catalog.
16 skills · plugin
curated
Security
Security audits, vulnerability scanning and secure coding.
30 skills · plugin
curated
Code Security Review Pipeline
Audit code changes for bugs, security flaws, and quality issues before merging.
15 skills · plugin
@alirezarezvani
Engineering Team
32 engineering skills: architecture, frontend, backend, fullstack, QA, DevOps, security, AI/ML, data engineering, Playwright (9 sub-skills), self-improving agent, Stripe integration, TDD guide, tech stack evaluator, Google Workspace CLI, a11y audit (WCAG 2.2), Azure cloud architect, GCP cloud architect, security pen testing, Snowflake development, adversarial-reviewer, ai-security, cloud-security,
16 skills · plugin
@trailofbits
Static Analysis
Static analysis toolkit with CodeQL, Semgrep, and SARIF parsing for security vulnerability detection
3 skills · plugin
@trailofbits
Testing Handbook Skills
Skills from the Trail of Bits Application Security Testing Handbook (appsec.guide)
15 skills · plugin
curated
MCP Security Audit Pipeline
Audit MCP servers for secrets exposure, shell injection, and supply chain risks.
12 skills · plugin
curated
Secure Laravel Deployment
Installs a pipeline to harden, audit, verify, and enforce security for Laravel apps.
4 skills · plugin
curated
Secure Firebase Backend
Installs a pipeline to validate, plan, execute, and enforce Firebase security best practices.
7 skills · plugin
curated
PR Review Pipeline
Install this pack to review a PR with structured analysis, security scanning, and quality enforcement.
11 skills · plugin
curated
Bug Finding Pipeline
Install this pack to detect bugs, security issues, and logical errors in your branch changes.
9 skills · plugin
curated
Secure Spring Boot Service
Installs a pipeline to harden, audit, verify, and enforce security for Spring Boot services.
4 skills · plugin
Results for “security”
1,231 skills
mukul975 Building Adversary Infrastructure Tracking System
Build an automated system to track adversary infrastructure using passive DNS, certificate transparency, WHOIS data, and IP enrichment to map and monitor threat actor command-and-control networks.
24.6k · bundle
mukul975 Detecting Anomalies In Industrial Control Systems
Deploys anomaly detection for industrial control environments using machine learning models trained on OT network baselines, physics-based process models, and behavioral analysis of industrial protocol communications.
24.6k · bundle
mukul975 Implementing Fuzz Testing In Cicd With Aflplusplus
Integrate AFL++ coverage-guided fuzz testing into CI/CD pipelines to discover memory corruption, input handling, and logic vulnerabilities in C/C++ and compiled applications.
24.6k · bundle
diegosouzapw Zeno
Runs an evidence-first, read-only workflow over large codebases via an external JSONL REPL server, retrieving only minimal file slices and greps to produce cited architecture and audit reports.
54 · bundle
brycewang-stanford Ndss Workflow
Use when planning an NDSS submission calendar — choosing between the summer and fall cycles, backward-planning from the AoE deadline through early-reject, rebuttal, notification, camera-ready, and the Seoul symposium, and placing NDSS honestly inside the security big-four retargeting year.
1k
shulkwisec Codebase
Performs a white-box source code security review structured around OWASP ASVS 5.0, mapping attack surfaces, tracing data flows, and chaining into downstream penetration testing and threat modeling skills.
21 · bundle
kensaurus Audit Auth Flows
Read-only audit of app-layer auth — route×gate matrix, session lifecycle, OAuth, and provider traps (getSession vs getUser, middleware-as-only-gate, CVE-2025-29927). Use when "audit our auth", "check middleware protection". RLS → plan-rls-audit. OWASP checklist → audit-security.
8
casemark Pos License
Drafts Software and POS System License Agreements for proprietary software use between licensor and licensee. Covers license grants, financial terms, IP, PCI-DSS data security, SLAs, and termination. Use when drafting POS software licenses, SaaS subscriptions, franchise technology licenses, or software distribution agreements.
34
claude-dev-suite Bitcoin L2 Bitvm
BitVM, BitVM2, BitVM3: off-chain computation framework using optimistic challenge games on Bitcoin script. Foundation for trust-minimized bridges to L2s and PoS chains. USE WHEN: building trust-minimized bridges, understanding ZK rollup peg-out mechanisms, evaluating bridge security models.
28
adobe Technical Advisory
Provides advisory guidance for the Adobe Dispatcher Apache HTTP Server module and related HTTPD configuration in AEM 6.5 / AMS workflows, with public-doc citations and AMS-specific MCP verification plans.
142 · bundle
trailofbits Graph Evolution
Compares Trailmark code graphs at two source code snapshots to surface security-relevant structural changes that text diffs miss, such as new attack paths, blast radius growth, and privilege boundary modifications.
6k · bundle
mukul975 Containing Active Breach
Executes containment strategies to stop active adversary operations and prevent lateral movement during a confirmed security breach, using network segmentation, endpoint isolation, credential revocation, and access control modifications.
24.6k · bundle
mukul975 Red Teaming Llms With Garak
Run NVIDIA garak probe suites against an LLM endpoint to test for jailbreaks, prompt injection, data leakage, and toxic generation, then interpret the hit-rate report for triage and reporting.
24.6k · bundle
mukul975 Detecting Typosquatting Packages
Flag misspelled, brandjacked, and typosquatted package names across npm, PyPI, and crates.io before installation using edit-distance, keyboard-proximity, and known-target corpus matching with typomania, OSSGadget, and pypi-scan.
24.6k · bundle
mukul975 Exploiting Broken Link Hijacking
Discover and exploit broken link hijacking vulnerabilities by identifying references to expired domains, decommissioned cloud resources, and dead external services that can be claimed by an attacker.
24.6k · bundle
mukul975 Performing Dns Tunneling Detection
Detects DNS tunneling by computing Shannon entropy of DNS query names, analyzing query length distributions, inspecting TXT record payloads, and identifying high subdomain cardinality using scapy for packet capture analysis.
24.6k · bundle
mukul975 Testing Oauth2 Implementation Flaws
Tests OAuth 2.0 and OpenID Connect implementations for security flaws including authorization code interception, redirect URI manipulation, CSRF in OAuth flows, token leakage, scope escalation, and PKCE bypass.
24.6k · bundle
mukul975 Detecting Lateral Movement With Zeek
Analyze Zeek network logs to detect lateral movement techniques including SMB admin share access, DCE/RPC remote service creation, NTLM account spray, Kerberos anomalies, and large internal data transfers.
24.6k · bundle
mukul975 Orchestrating LLM Attacks With Pyrit
Automate multi-turn adversarial conversations against LLM agents using Microsoft PyRIT, including Crescendo and Tree-of-Attacks-with-Pruning (TAP) attack chains with scorer feedback loops.
24.6k · bundle
mukul975 Investigating Phishing Email Incident
Investigate phishing email incidents from initial user report through header analysis, URL/attachment detonation, impacted user identification, and containment actions using SOC tools like Splunk, Microsoft Defender, and sandbox analysis platforms.
24.6k · bundle
mukul975 Deploying Active Directory Honeytokens
Deploys deception-based honeytokens in Active Directory, including fake privileged accounts, SPNs for Kerberoasting detection, decoy GPOs with cpassword traps, and deceptive BloodHound paths, with monitoring for Windows Security Event IDs.
24.6k · bundle
mukul975 Detecting Bluetooth Low Energy Attacks
Detects and analyzes Bluetooth Low Energy (BLE) security attacks including sniffing, replay attacks, GATT enumeration abuse, and Man-in-the-Middle interception using Ubertooth One, nRF52840, bleak, and crackle.
24.6k · bundle
mukul975 Implementing Network Segmentation For Ot
Design and implement network segmentation in Operational Technology environments using VLANs, industrial firewalls, data diodes, and software-defined networking, following the Purdue Model and IEC 62443 standards.
24.6k · bundle
mukul975 Implementing Zero Trust Dns With Nextdns
Configure NextDNS as a zero trust DNS filtering layer with encrypted resolution, threat intelligence blocking, privacy protection, and organizational policy enforcement across all endpoints.
24.6k · bundle
mukul975 Monitoring Scada Modbus Traffic Anomalies
Monitors Modbus TCP traffic on SCADA and ICS networks to detect anomalous function code usage, unauthorized register writes, and suspicious communication patterns using deep packet inspection with pymodbus, Scapy, and Zeek.
24.6k · bundle
mukul975 Implementing Mobile Application Management
Deploys Mobile Application Management (MAM) policies to protect enterprise data on managed and unmanaged mobile devices through app-level controls including data loss prevention, selective wipe, app configuration, and containerization.
24.6k · bundle
mukul975 Performing Dynamic Analysis Of Android App
Performs runtime dynamic analysis of Android applications using Frida, Objection, and ADB to observe behavior, intercept function calls, modify runtime values, and identify vulnerabilities missed by static analysis.
24.6k · bundle
mukul975 Implementing Patch Management For Ot Systems
Establish a structured patch management program for OT/ICS environments, covering vendor compatibility testing, risk-based prioritization, staged deployment, rollback procedures, and compensating controls for unpatchable systems.
24.6k · bundle
mukul975 Performing Wireless Network Penetration Test
Execute a wireless network penetration test to assess WiFi security by capturing handshakes, cracking WPA2/WPA3 keys, detecting rogue access points, and testing wireless segmentation using Aircrack-ng and related tools.
24.6k · bundle
mukul975 Configuring Snort Ids For Intrusion Detection
Installs, configures, and tunes Snort 3 intrusion detection system to monitor network traffic for malicious activity using custom and community rulesets, preprocessors, and alert output plugins on authorized network segments.
24.6k · bundle
mukul975 Verifying Build Provenance With Slsa Sigstore
Verify signed artifacts and SLSA build provenance with Sigstore cosign and slsa-verifier, enforce keyless OIDC identity, and apply SLSA Build levels to harden the software supply chain.
24.6k · bundle
mukul975 Implementing Dragos Platform For Ot Monitoring
Deploy and configure the Dragos Platform for OT network monitoring, leveraging industrial protocol parsers, threat detection analytics, and asset visibility to protect ICS environments.
24.6k · bundle
mukul975 Detecting T1548 Abuse Elevation Control Mechanism
Detect abuse of elevation control mechanisms including UAC bypass, sudo exploitation, and setuid/setgid manipulation by monitoring registry modifications, process elevation flags, and unusual parent-child process relationships.
24.6k · bundle
mukul975 Implementing Ot Network Traffic Analysis With Nozomi
Deploy Nozomi Networks Guardian sensors for passive OT network traffic analysis to achieve asset visibility, threat detection, and vulnerability assessment across industrial control systems.
24.6k · bundle
mukul975 Performing GCP Penetration Testing With Gcpbucketbrute
Enumerate and audit GCP storage buckets and IAM policies using GCPBucketBrute and gcloud CLI to identify privilege escalation paths and overly permissive access.
24.6k · bundle
mukul975 Implementing Container Image Minimal Base With Distroless
Reduce container attack surface by building application images on Google distroless base images that contain only the application runtime with no shell, package manager, or unnecessary OS utilities.
24.6k · bundle