zakirkun
- 224 skills
- 0 followers
- 13 hours ago last updated
- ▌ Guardian CLI · zakirkun bundleAn enterprise-grade, AI-powered penetration testing automation CLI tool. Orchestrates multiple specialized AI agents (Planner, ToolAgent, Analyst, Reporter) backed by 4 AI providers (OpenAI, Claude, Gemini, OpenRouter) and 19 integrated security tools through YAML-defined workflows. Produces professional Markdown, HTML, or JSON security reports with full evidence capture and traceability.
- ▌ Prd Project · zakirkunDrafts and refines product requirement documents (PRD) for software projects—problem statement, goals, personas, scope, functional/non-functional requirements, user stories, acceptance criteria, risks, and rollout. Use when the user asks for a PRD, product requirements, feature specification, scope doc, "what to build," prioritization framing, or before breaking work into implementation tasks.
- ▌ Using UI Stack · zakirkunEnforce a configuration-driven design system when generating UI. Ensures consistent spacing, colors, typography, dark mode, interactions, and accessibility across all AI-generated components.
- ▌ Best Of N Solving · zakirkunSolve a hard problem by trying multiple approaches in parallel using isolated git worktrees. Each attempt runs in its own branch, and the best solution is selected. Use for complex refactors, tricky bugs, or architectural decisions where multiple strategies could work.
- ▌ Saving Workspace Context · zakirkunAutomatically persist useful context — research, decisions, learnings, templates — to workspace files so knowledge survives across conversations.
- ▌ Architecture Decision Records · zakirkunDocument technical decisions as Architecture Decision Records (ADRs) with context, options considered, and rationale.
- ▌ Ctf · zakirkunCTF methodology with optional Deep Eye on lab targets you own. Use for CTF, HTB, picoCTF, web/pwn/rev/crypto/forensics, /ctf. Educational only.
- ▌ Pentest · zakirkunAuthorized penetration testing with Deep Eye (this repo). Use for pentest, penetration test, vulnerability assessment, web/API/mobile scan, OWASP testing, /pentest. Requires written authorization. Never scan unauthorized targets.
- ▌ Red Team · zakirkunRed team / adversary simulation with Deep Eye for web/API footholds. Use for red team, adversary simulation, ATT&CK mapping, kill chain, /red-team. Authorized engagements only.
- ▌ Blue Team · zakirkunBlue team defense using Deep Eye outputs for detection engineering, IR content, and hardening. Use for blue team, SOC, SIEM, detection engineering, threat hunting, IR triage, hardening, /blue-team.
- ▌ Bug Bounty · zakirkunBug bounty workflow using Deep Eye for recon/scan and high-signal report writing (HackerOne/Bugcrowd). Use for bug bounty, VDP, HackerOne, Bugcrowd, bounty report, /bug-bounty. Only in-scope program assets.
- ▌ Security Ops · zakirkunRouter for Deep Eye agent skills: pentest, bug-bounty, red-team, blue-team, ctf. Use for security ops, mixed intent, offensive vs defensive choice.
- ▌
- ▌
- ▌
- ▌
- ▌
- ▌
- ▌
- ▌
- ▌
- ▌
- ▌
- ▌ Hardcoded Database Connection String · zakirkun bundleDetects database connection strings with embedded credentials hardcoded in source code.
- ▌ Arp Spoofing Defense Missing · zakirkun bundleDetects network configurations and code patterns that are vulnerable to ARP spoofing attacks.
- ▌ Missing Or Ignored Dependency Lockfile · zakirkun bundleDetects projects where lockfiles are missing or ignored in version control, allowing non-deterministic builds with potentially different dependency versions.
- ▌ Internal API Documentation Exposure · zakirkun bundleDetects internal API documentation, admin endpoints, and developer tools accidentally exposed in production.
- ▌ Broken Function Level Authorization · zakirkun bundleDetects API endpoints that perform privileged operations without verifying the caller has the required role or permission.
- ▌ Workflow Step Bypass · zakirkun bundleDetects multi-step workflows where step validation relies on client-side state or is insufficiently enforced server-side.
- ▌ Unsafe Messagepack Deserialization · zakirkun bundleDetects MessagePack deserialization configured to allow arbitrary object construction.
- ▌ Exposed Build Artifacts And Debug Files · zakirkun bundleDetects build artifacts, debug information, and development files committed to version control or accessible in production.
- ▌ Sensitive Data In Logs · zakirkun bundleDetects passwords, tokens, credit card numbers, and other sensitive data written to log files.
- ▌ Missing Data Retention Policy Implementation · zakirkun bundleDetects data storage without associated TTL, expiry, or cleanup mechanisms, indicating missing data retention policy.
- ▌ Mass Enumeration Data Harvesting · zakirkun bundleDetects API endpoints that expose lists without pagination limits, enabling automated data harvesting.
- ▌ PHP Insecure Deserialization Unserialize · zakirkun bundleDetects PHP unserialize() called on user-controlled input, enabling object injection and remote code execution.
- ▌ Github Actions Command Injection · zakirkun bundleDetects GitHub Actions workflow files that interpolate untrusted event data into run steps, enabling CI/CD pipeline injection.
- ▌ IOS Url Scheme Hijacking · zakirkun bundleDetects iOS custom URL scheme handling that processes sensitive data without sender verification.
- ▌ Missing Network Timeout Configuration · zakirkun bundleDetects HTTP clients and network connections without timeout configuration, enabling slowloris and resource exhaustion attacks.
- ▌ Thread Unsafe Singleton Pattern · zakirkun bundleDetects singleton implementations that are not thread-safe and can result in multiple instances being created under concurrent access.
- ▌ Artifact Integrity Verification Missing · zakirkun bundleDetects download and execution of artifacts without cryptographic hash or signature verification.
- ▌ Negative Quantity Amount Manipulation · zakirkun bundleDetects shopping cart and transaction logic that accepts negative quantities or amounts, enabling credit manipulation.
- ▌ Insecure JSON Deserialization With Type Polymorphism · zakirkun bundleDetects JSON deserialization configurations that allow polymorphic type instantiation, enabling object injection attacks.
- ▌ Unsafe YAML Deserialization · zakirkun bundleDetects YAML parsing using unsafe loaders that execute arbitrary Python or Ruby code embedded in YAML.
- ▌ IOS Sensitive Data In Nslog Os Log · zakirkun bundleDetects sensitive data passed to NSLog, print, or os_log that ends up in device logs accessible via Xcode/Console.
- ▌ User Tracking Without Consent · zakirkun bundleDetects user tracking mechanisms deployed without checking for consent, including session recording, heatmaps, and behavioral analytics.
- ▌ Dangerous Package Lifecycle Scripts · zakirkun bundleDetects npm/pip package lifecycle scripts that download and execute code, a common malicious package technique.
- ▌ Price Manipulation Vulnerability · zakirkun bundleDetects e-commerce logic that trusts client-submitted prices instead of server-side calculation.
- ▌ Certificate Pinning Bypass · zakirkun bundleDetects network configurations and code patterns that disable or bypass certificate pinning, weakening TLS security.
- ▌ GRAPHQL Field Level Injection · zakirkun bundleDetects GraphQL resolvers vulnerable to injection through unsanitized field arguments and dynamic query construction.
- ▌ Non Atomic Counter Increment Race Condition · zakirkun bundleDetects concurrent counter increments and decrements without atomic operations or mutex protection.
- ▌ Sensitive Data In Nsuserdefaults · zakirkun bundleDetects storage of sensitive information in NSUserDefaults which is unencrypted and accessible in device backups.
- ▌ Atomicity Violation · zakirkun bundleDetects code sequences that must be atomic but are not protected by synchronization, allowing interleaving that violates invariants.
- ▌ Double Checked Locking Anti Pattern · zakirkun bundleDetects broken double-checked locking implementations that create race conditions in singleton initialization.
- ▌ Unpinned Dependency Versions · zakirkun bundleDetects dependencies specified with loose version constraints that may install different code between builds.
- ▌ IOS Binary Protection Missing · zakirkun bundleDetects iOS app configurations missing binary hardening features like ASLR, stack canaries, and ARC.
- ▌ NPM Dependency Confusion Attack · zakirkun bundleDetects package.json configurations vulnerable to dependency confusion attacks where internal package names could be hijacked via public npm registry.
- ▌ Python Pip Dependency Confusion · zakirkun bundleDetects Python package configurations vulnerable to dependency confusion attacks through PyPI.
- ▌ Race Condition In Purchase Financial Transaction · zakirkun bundleDetects financial transaction code that can be exploited via concurrent requests to exceed balance limits or purchase limits.
- ▌ Net Binaryformatter Deserialization · zakirkun bundleDetects use of BinaryFormatter, SoapFormatter, and NetDataContractSerializer which are insecure for untrusted data.
- ▌ Python Pickle Shelve Extended Deserialization · zakirkun bundleDetects extended use of pickle, shelve, and marshal for deserializing untrusted data beyond basic patterns.
- ▌ Expression Language Injection El Injection · zakirkun bundleDetects user-controlled input evaluated by Java EL, Spring SpEL, Thymeleaf, or JSP Expression Language.
- ▌ Java Insecure Deserialization Objectinputstream · zakirkun bundleDetects Java ObjectInputStream.readObject() on untrusted data, enabling remote code execution via gadget chains.
- ▌ Business Logic Privilege Escalation · zakirkun bundleDetects application logic that allows users to escalate their own privileges or roles through manipulated requests.
- ▌ Insufficient Business Logic Input Validation · zakirkun bundleDetects missing or inadequate server-side validation of business-critical fields that could be manipulated.
- ▌ Cross Site Scripting Xss Detection · zakirkun bundleDetects DOM-based Cross-Site Scripting (XSS) vulnerabilities in JavaScript
- ▌ Cross Site Request Forgery Csrf · zakirkun bundleDetects web forms and state-changing endpoints that lack CSRF token protection.
- ▌ Server Side Request Forgery Ssrf · zakirkun bundleDetects HTTP requests made with user-controlled URLs, potentially allowing internal network access.
- ▌ Zip Slip Archive Path Traversal · zakirkun bundleDetects insecure ZIP/TAR extraction that does not validate entry paths, allowing directory traversal outside the extraction target.
- ▌ Regular Expression Denial Of Service Redos · zakirkun bundleDetects catastrophically backtracking regular expressions applied to user-controlled input, causing CPU-intensive denial of service.
- ▌ Insecure File Upload · zakirkun bundleDetects file upload handlers that lack extension validation, MIME type checking, or store files in web-accessible directories.
- ▌ Reverse Tabnapping · zakirkun bundleDetects anchor tags with target="_blank" without rel="noopener noreferrer", allowing opened pages to manipulate the opener.
- ▌ Mfa 2fa Bypass Vulnerabilities · zakirkun bundleDetects insecure multi-factor authentication implementations that can be bypassed.
- ▌ Weak Cryptography Detection · zakirkun bundleDetects use of weak or deprecated cryptographic algorithms
- ▌ Debug Mode Enabled In Production · zakirkun bundleDetects debug mode enabled in production configurations, exposing stack traces, internal paths, and sensitive configuration details.
- ▌ Clickjacking Missing Frame Protection · zakirkun bundleDetects missing X-Frame-Options or Content-Security-Policy frame-ancestors directives.
- ▌ Missing API Rate Limiting · zakirkun bundleDetects sensitive API endpoints without rate limiting, enabling resource exhaustion, credential stuffing, and enumeration attacks.
- ▌
- ▌ Unvalidated Redirects And Forwards · zakirkun bundleDetects HTTP redirects to user-controlled URLs, enabling phishing and server-side request forgery.
- ▌
- ▌ Deprecated Unprotected API Versions · zakirkun bundleDetects old API versions that may lack current security controls and deprecated endpoints still accessible in production.
- ▌ Infrastructure As Code Security Issues · zakirkun bundleDetects security misconfigurations in Terraform, Pulumi, and CloudFormation templates including overly permissive resources and disabled security features.
- ▌ Weak Cipher Algorithm Usage · zakirkun bundleDetects use of broken or weak symmetric encryption algorithms (DES, 3DES, RC4, Blowfish, ECB mode).
- ▌ Weak Random Number Generation · zakirkun bundleDetects the use of PRNGs (Pseudo-Random Number Generators) that are not cryptographically secure.
- ▌ Memory Leak · zakirkun bundleDetects common memory leak patterns including unreleased heap allocations, unclosed file handles, and missing deallocation in error paths.
- ▌ Mass Assignment · zakirkun bundleDetects frameworks binding raw HTTP payload bodies directly to database models or internal objects without field allow-lists.
- ▌ Swagger Openapi Documentation Exposed In Production · zakirkun bundleDetects Swagger UI, Redoc, or OpenAPI documentation endpoints accessible without authentication in production.
- ▌ API Key Exposed In Url · zakirkun bundleDetects API keys and tokens passed as URL query parameters, which are logged in server logs, browser history, and Referer headers.
- ▌ JSON Web Token JWT Weaknesses · zakirkun bundleDetects insecure JWT implementations, such as accepting 'none' algorithms or using hardcoded secrets.
- ▌ Hardcoded Iv Nonce · zakirkun bundleDetects static or hardcoded Initialization Vectors (IV) or nonces in symmetric encryption, breaking confidentiality.
- ▌ Insecure Rsa Configuration · zakirkun bundleDetects RSA usage with insufficient key sizes, PKCS#1 v1.5 padding (vulnerable to padding oracle), or direct message encryption without hybrid scheme.
- ▌ Insecure Tls Configuration · zakirkun bundleDetects insecure TLS settings including disabled certificate verification, outdated protocol versions, and weak cipher suites.
- ▌ Weak Hashing Algorithms · zakirkun bundleDetects the use of cryptographically weak hashing algorithms like MD5 and SHA1.
- ▌ Hardcoded Ip Addresses And Hostnames · zakirkun bundleDetects internal IP addresses, localhost references, and hardcoded hostnames that indicate misconfiguration or information disclosure.
- ▌ Wild Pointer Uninitialized Pointer · zakirkun bundleDetects uninitialized or dangling pointer usage that can lead to arbitrary memory access.
- ▌ Pii Personally Identifiable Information In Logs · zakirkun bundleDetects Personally Identifiable Information (PII) such as email addresses, phone numbers, and SSNs being written to log files.
- ▌ Web Cache Poisoning · zakirkun bundleDetects applications that include unvalidated request headers or parameters in cached responses, enabling cache poisoning attacks.
- ▌ Dangling Markup Injection · zakirkun bundleDetects HTML injection that, even without script execution, can exfiltrate page content via dangling attributes and tags.
- ▌ Insecure Deserialization · zakirkun bundleDetects deserialization of untrusted data which can lead to Remote Code Execution.
- ▌ Jsonp Injection · zakirkun bundleDetects JSONP endpoints that reflect user-controlled callback names without validation, enabling XSS.
- ▌ GRAPHQL Security Issues · zakirkun bundleDetects insecure GraphQL configurations including enabled introspection, unbounded query depth, and missing authentication on resolvers.