security-audit
omnigent-ai
Audit a codebase or directory for security issues (hardcoded secrets, injection, unsafe deserialization, weak crypto, authz gaps) and produce a structured findings repor…
9.6KGitHub
OPENAGENTSKILL / DIRECTORY
AI Agent Skills
Find a skill for your next task. Explore tools for Codex, Claude Code, Cursor and more.
Results · “ocr-python”
97–112 / 211
More filters · 1
Candidates in this shortlist, not the full registry. GitHub stars belong to repositories, not individual skills.
Results: 211
980GitHub
IKy
kennbroorg
OSINT Project. Collect information from a mail. Gather. Profile. Timeline.
SecuritySkill source unconfirmed
963GitHub
design-information-prep
SeanJ1ang
Extract evidence-grounded project facts from user-provided design attachments, identify missing information, and prepare the exact written fields required by supported d…
1KGitHub
c2pa-metadata
indranilbanerjee
Embed a C2PA provenance manifest into an AI-generated marketing asset (PNG, JPG, WebP, GIF, TIFF, MP4, MOV, WebM, MP3, WAV, PDF) via scripts/embed-c2pa.py — produces a s…
787GitHub
H4X Tools
vil
A modular, terminal-based toolkit for OSINT, reconnaissance, and scraping - built in Python, runs on Linux and Windows.
SecuritySkill source unconfirmed
792GitHub
hunt-ato
elementalsouls
Hunt account takeover taxonomy — 9 distinct paths to ATO, plus chains. Paths: (1) password reset flaws (host-header injection redirects token, predictable/numeric token,…
4.1KGitHub
apk-redteam-pipeline
elementalsouls
End-to-end Android APK red-team pipeline — automated APK acquisition (Play Store + apkpure + apkmirror fallback), jadx decompilation, secret/URL/JWT/Firebase grep, pinne…
4.1KGitHub
hunt-auth-bypass
elementalsouls
Hunting skill for auth bypass vulnerabilities. Built from 12 public bug bounty reports across SAML XSW / parser-differential (GitHub Enterprise CVE-2025-25291/25292), SA…
4.1KGitHub
hunt-cicd
elementalsouls
Hunt CI/CD pipeline vulnerabilities — GitHub Actions workflow injection (pull_request_target Pwnrequest + ${{ }}-into-shell), self-hosted runner poisoning, OIDC trust-po…
4.1KGitHub
Araa Search
Extravi
A privacy-respecting, ad-free, self-hosted Google metasearch engine with strong security that offers full API support and utilizes Qwant for images, and DuckDuckGo for a…
SecuritySkill source unconfirmed
329GitHub
solana-vulnerability-scanner
trailofbits
Scans Solana programs for 6 critical vulnerabilities including arbitrary CPI, improper PDA validation, missing signer/ownership checks, and sysvar spoofing. Use when aud…
6.8KGitHub
audit-context-building
trailofbits
Understand a codebase before looking for bugs in it - what each function assumes, what it guarantees, and what it depends on elsewhere. Use when starting an audit, threa…
6.8KGitHub
c-review
trailofbits
Performs comprehensive C/C++ security review for memory corruption, integer overflows, race conditions, and platform-specific vulnerabilities. Use when auditing native C…
6.8KGitHub
algorand-vulnerability-scanner
trailofbits
Scans Algorand smart contracts for 11 common vulnerabilities including rekeying attacks, unchecked transaction fees, missing field validations, and access control issues…
6.8KGitHub
panel-review
trailofbits
Reviews a code target by launching a panel of specialist auditor agents and merging their reports. Use when asked to run a panel review.
6.9KGitHub