AI Agent Skills

Hunt API security misconfiguration — mass assignment, prototype pollution, HTTP verb tampering. Mass assignment: send {is_admin:true, role:admin, verified:true} on profi…

External SSL VPN / remote-access appliance attack matrix — Cisco ASA/AnyConnect, Fortinet FortiGate/FortiOS, Citrix NetScaler/ADC, Palo Alto GlobalProtect, Pulse Secure…

Hunt CI/CD pipeline vulnerabilities — GitHub Actions workflow injection (pull_request_target Pwnrequest + ${{ }}-into-shell), self-hosted runner poisoning, OIDC trust-po…

Hunt cloud / infrastructure misconfigurations. AWS: public S3 buckets (s3:GetObject anonymous), permissive bucket policies (PutObjectAcl public-write), exposed CloudFron…

Design and implementation guidance for distinctive landing pages, portfolios, product demos, and purposeful redesigns.

Create original visual art, posters, PNG assets, and PDF documents through a clear design philosophy.

Use Playwright to interact with and test local web applications, capture screenshots, debug UI behavior, and inspect browser logs.

Godot Expert Auditor: Aurelius. Exhaustive never-list enforcement and architectural slap-down for Godot 4.7 projects. Use when auditing signal decay, ObjectDB orphans, t…

Translate Figma designs into production-ready UI code with close visual fidelity and component-level detail.

Apply Anthropic official brand colors, typography, and visual standards to appropriate Anthropic-related artifacts.

Turn one topic into a narrated Vox-style paper-collage explainer or ad video, from script through captions.

Create a structured post-earnings equity research update with key metrics, estimate changes, charts, and thesis review.

当发现XML导入/SOAP/Office解析、序列化数据（Java/PHP/Python/.NET）、JSON深合并、yaml.load、不可信反序列化入口时调用。负责反序列化RCE链、XXE、原型污染、phpggc/ysoserial利用链构造与验证。

Abuse Active Directory object ACLs/DACLs for lateral movement and escalation — GenericAll, WriteDACL, GenericWrite, WriteOwner, AddMember, ForceChangePassword, and DCSyn…

Abuse an LLM agent's tools/functions — coerce it to call tools with attacker-chosen args for SSRF, RCE, data exfil, or privilege abuse. Load when the target is an agent…

Automate a real browser from the terminal for navigation, form filling, snapshots, screenshots, extraction, and UI-flow debugging.