Garud
R0X4R
An automation tool that scans sub-domains, sub-domain takeover, then filters out XSS, SSTI, SSRF, and more injection point parameters and scans for some low hanging vuln…
SecuritySkill source unconfirmed
809GitHub
OPENAGENTSKILL / DIRECTORY
AI Agent Skills
Find a skill for your next task. Explore tools for Codex, Claude Code, Cursor and more.
Results · “test-automation-java”
33–48 / 351
More filters · 1
Candidates in this shortlist, not the full registry. GitHub stars belong to repositories, not individual skills.
Results: 351
117GitHub
Claude Bug Bounty
shuvonsec
AI-powered bug bounty hunting from your terminal - recon, 20 vuln classes, autonomous hunting, and report generation. All inside Claude Code.
3.5KGitHub
hunt-cicd
elementalsouls
Hunt CI/CD pipeline vulnerabilities — GitHub Actions workflow injection (pull_request_target Pwnrequest + ${{ }}-into-shell), self-hosted runner poisoning, OIDC trust-po…
4.1KGitHub
build-game-map-editor
MengTo
Build, extend, or audit production-linked browser map editors for Three.js and isometric games. Use when Codex needs to create a private director view, derive a versione…
5.9KGitHub
Buildware Tools
v4lkyr0
Buildware-Tools is an all-in-one multitool for security research and automation.
SecuritySkill source unconfirmed
449GitHub
Inql
doyensec
InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integr…
SecuritySkill source unconfirmed
1.8KGitHub
Fuxploider
almandin
File upload vulnerability scanner and exploitation tool.
SecuritySkill source unconfirmed
3.3KGitHub
Web Application Security Testing
Masriyan
OWASP Top 10 testing, injection vulnerability detection, API security assessment, authentication testing, and web vulnerability reporting for authorized assessments
397GitHub
Openghost
VAIBHAVSING
OpenGhost is an Agent Skill for authorized web app penetration testing: Enter lab url paste credential your agent and wait everything does with help of openghost
37GitHub
analytics
coreyhaines31
When the user wants to set up, improve, or audit analytics tracking and measurement. Also use when the user mentions "set up tracking," "GA4," "Google Analytics," "conve…
46.6KGitHub
Wpscan
wpscanteam
WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via contact@wpsca…
SecuritySkill source unconfirmed
9.7KGitHub
266GitHub
Wazuh
wazuh
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
SecuritySkill source unconfirmed
16.3KGitHub
brooks-health
hyhmrright
Combined codebase health dashboard that scores a project across all four quality dimensions — PR quality, architecture, tech debt, and test quality — in a single pass, d…
1.4KGitHub
brooks-sweep
hyhmrright
Full-sweep mode: runs a unified analysis across all quality dimensions — code decay, architecture, tech debt, and test quality — then applies fixes directly to the codeb…
1.4KGitHub