Opa Envoy Plugin
open-policy-agent
A plugin to enforce OPA policies with Envoy
SecurityReview before use
358GitHub
OPENAGENTSKILL / DIRECTORY
AI Agent Skills
Find a skill for your next task. Explore tools for Codex, Claude Code, Cursor and more.
Browse all public registry entries, one page at a time. Counts include resources; MCP-only resources are omitted from displayed skills. Listing is not a safety or compatibility guarantee.
Full directory
Page 14 · 16 shown · 1,516 public entries
More filters · 1
Results: 1516
hunt-csrf
elementalsouls
Hunting skill for csrf vulnerabilities. Built from 15 public bug bounty reports including modern variants — SameSite=Lax sibling-subdomain bypass (Argo CD CVE-2024-22424…
SecurityClaude Code
4.3KGitHub
Counter Osint Guide En
soxoj
Comprehensive Counter OSINT and privacy guide (initially for CIS countries)
SecurityReview before use
353GitHub
ui-test
browserbase
AI-powered adversarial UI testing via the browse CLI. Analyzes git diffs to test only what changed, or explores the full app to find bugs. Tests functional correctness,…
3.7KGitHub
TheScrapper
champmq
Scrape emails, phone numbers and social media accounts from a website.
SecurityReview before use
352GitHub
hunt-cache-poison
elementalsouls
Hunting skill for cache poison vulnerabilities. Built from 10 public bug bounty reports including X-Forwarded-Host poisoning, X-HTTP-Method-Override / GCS cache, reflect…
SecurityClaude Code
4.1KGitHub
Omnisci3nt
spyboy-productions
Omnisci3nt is an open-source web reconnaissance and intelligence tool for extracting deep technical insights from domains, including subdomains, SSL certificates, expose…
SecurityReview before use
352GitHub
apk-redteam-pipeline
elementalsouls
End-to-end Android APK red-team pipeline — automated APK acquisition (Play Store + apkpure + apkmirror fallback), jadx decompilation, secret/URL/JWT/Firebase grep, pinne…
SecurityClaude Code
4.1KGitHub
hunt-api-misconfig
elementalsouls
Hunt API security misconfiguration — mass assignment, prototype pollution, HTTP verb tampering. Mass assignment: send {is_admin:true, role:admin, verified:true} on profi…
4.1KGitHub
ipollowork-maintainable-code
Devin-AXIS
Mandatory iPolloWork code-change gate for modern, minimal, performant, reuse-first implementation and clean repository ownership. Use whenever AI creates, edits, deletes…
SecurityClaude Code
4.5KGitHub
research-grants
brycewang-stanford
Write competitive research proposals for NSF, NIH, DOE, DARPA, and Taiwan NSTC. Agency-specific formatting, review criteria, budget preparation, broader impacts, signifi…
SecurityClaude Code
3.7KGitHub
hunt-auth-bypass
elementalsouls
Hunting skill for auth bypass vulnerabilities. Built from 12 public bug bounty reports across SAML XSW / parser-differential (GitHub Enterprise CVE-2025-25291/25292), SA…
SecurityClaude Code
4.1KGitHub
hunt-dom
elementalsouls
Hunt client-side DOM vulnerabilities — DOM Clobbering (overwrite JS globals via HTML injection), PostMessage hijacking (missing origin check), Service Worker abuse (inte…
SecurityClaude Code
4.3KGitHub
hunt-cicd
elementalsouls
Hunt CI/CD pipeline vulnerabilities — GitHub Actions workflow injection (pull_request_target Pwnrequest + ${{ }}-into-shell), self-hosted runner poisoning, OIDC trust-po…
4.1KGitHub
hunt-cloud-misconfig
elementalsouls
Hunt cloud / infrastructure misconfigurations. AWS: public S3 buckets (s3:GetObject anonymous), permissive bucket policies (PutObjectAcl public-write), exposed CloudFron…
SecurityClaude Code
4.1KGitHub
Ward
Eljakani
Security scanner built for Laravel, detects misconfigurations, vulnerabilities, and exposed secrets with a beautiful TUI.
SecurityBlocked
323GitHub
External platform skills
Browse external directory →Owner-curated external sources. Not filtered by the scores or compatibility controls above; excluded from GitHub rankings and automatic installation.
RedSkill · 流白Livo · 1.0.0
p5.js animations: rain, branches & swallows →
Describe a rain curtain, growing flowering branches or a flock of swallows. This RedSkill package adapts three p5.js templates into sketch.js code with custom colors, density and speed.
Noncommercial use only · Local runtime recording · Use on the source platform