diagram-design
cathrynlavery
Create branded architecture, IT current-state, flowchart, sequence, state machine, ER/data model, timeline, swimlane, quadrant, radar/spider, polar chart (polar/radial l…
24.2KGitHub
OPENAGENTSKILL / DIRECTORY
AI Agent Skills
Find a skill for your next task. Explore tools for Codex, Claude Code, Cursor and more.
Results · “vulnerability-research”
33–48 / 144
More filters · 1
Candidates in this shortlist, not the full registry. GitHub stars belong to repositories, not individual skills.
Results: 144
Nuclei
projectdiscovery
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle tren…
SecuritySkill source unconfirmed
29.2KGitHub
security-audit
omnigent-ai
Audit a codebase or directory for security issues (hardcoded secrets, injection, unsafe deserialization, weak crypto, authz gaps) and produce a structured findings repor…
9.6KGitHub
differential-review
trailofbits
Performs security-focused differential review of code changes. Adapts analysis depth to codebase size, uses git blame for context, calculates blast radius by counting ca…
6.9KGitHub
secure-workflow-guide
trailofbits
Guides through Trail of Bits' 5-step secure development workflow. Runs Slither scans, checks special features (upgradeability/ERC conformance/token integration), generat…
6.8KGitHub
audit-prep-assistant
trailofbits
Prepares codebases for security review using Trail of Bits' checklist. Helps set review goals, runs static analysis tools, increases test coverage, removes dead code, en…
6.8KGitHub
.Context
forefy
AI Agent Skills for Security Auditing to generate triaged, industry grade report findings, code locations, pocs, attacker story flow graphs and more
129GitHub
ipollowork-maintainable-code
Devin-AXIS
Mandatory iPolloWork code-change gate for modern, minimal, performant, reuse-first implementation and clean repository ownership. Use whenever AI creates, edits, deletes…
4.5KGitHub
Osv Scanner
Vulnerability scanner written in Go which uses the data provided by https://osv.dev
SecuritySkill source unconfirmed
10.6KGitHub
cloud-iam-deep
elementalsouls
Cloud IAM red-team attack chain across AWS, Azure, GCP — focused on EXTERNAL exploitation paths and post-credential-discovery privilege analysis. Covers IAM enumeration…
4.1KGitHub
fintel-data
himself65
Query Fintel (fintel.io) institutional market intelligence via the REST API at https://api.fintel.io/v1 with FINTEL_API_KEY (X-API-KEY header), or the official MCP serve…
3.3KGitHub
golang-pkg-go-dev
samber
Golang package and module documentation and exploration via `godig`, a pkg.go.dev API client (CLI + MCP server) — package docs, API references, symbols, code examples, a…
3.1KGitHub
code-review
oceanbase
Review seekdb pull requests and diffs for high-signal correctness, resource-lifetime, concurrency, current-version state-consistency, credential-exposure, workflow-secur…
2.9KGitHub
4.3KGitHub
thinking-red-team
tjboudreaux
For authorized security review of code, auth, or APIs you control, model the attacker, map the attack surface, and report only findings with a reproducible exploit path…
1.3KGitHub
Automated Security Helper
awslabs
ASH is an extensible, open source SAST, SCA, and IaC security scanner orchestration engine.
SecuritySkill source unconfirmed
657GitHub