hunt-api-misconfig
elementalsouls
Hunt API security misconfiguration — mass assignment, prototype pollution, HTTP verb tampering. Mass assignment: send {is_admin:true, role:admin, verified:true} on profi…
4.1KGitHub
OPENAGENTSKILL / DIRECTORY
AI Agent Skills
Find a skill for your next task. Explore tools for Codex, Claude Code, Cursor and more.
Results · “ocr-python”
129–144 / 221
More filters · 1
Candidates in this shortlist, not the full registry. GitHub stars belong to repositories, not individual skills.
Results: 221
cloud-iam-deep
elementalsouls
Cloud IAM red-team attack chain across AWS, Azure, GCP — focused on EXTERNAL exploitation paths and post-credential-discovery privilege analysis. Covers IAM enumeration…
4.1KGitHub
hunt-business-logic
elementalsouls
Hunting skill for business logic vulnerabilities. Built from 12 public bug bounty reports. Covers coupon-race-stacking (Instacart, Stripe, Reverb), negative-quantity-in-…
4.1KGitHub
fable-safe-prompt
davidondrej
Rewrite a user's prompt to reduce the chance it trips Claude Fable 5's server-side safety classifiers (cyber/bio guardrails that force-route to Opus 4.8 or return stop_r…
3.8KGitHub
Tartufo
godaddy
Searches through git repositories for high entropy strings and secrets, digging deep into commit history
SecuritySkill source unconfirmed
513GitHub
Zen AI Pentest
SHAdd0WTAka
🛡⚔️AI-Powered Penetration Testing Framework with automated vulnerability scanning, multi-agent system, and compliance reporting🛡⚔️
SecuritySkill source unconfirmed
403GitHub
tag-taxonomy
Ar9av
Enforce consistent tagging across the Obsidian wiki using a controlled vocabulary. Use this skill when the user says "fix my tags", "normalize tags", "clean up tags", "t…
3.3KGitHub
Pysentry
nyudenkov
🐍 Scan your Python dependencies for known security vulnerabilities with Rust-powered scanner
SecuritySkill source unconfirmed
242GitHub
ec2
itsmostafa
AWS EC2 virtual machine management — instances, security groups, key pairs, AMIs, EBS volumes, Auto Scaling Groups, Spot Instances, Session Manager, placement groups, an…
1.2KGitHub
Security Scripts
PeterMosmans
A collection of security related Python and Bash shell scripts. Analyze hosts on generic security vulnerabilities. Wrapper around popular tools like nmap (portscanner),…
SecuritySkill source unconfirmed
282GitHub
asc-aso-audit
rorkai
Run an offline ASO audit on canonical App Store metadata under `./metadata` and surface keyword gaps using Astro MCP. Use after pulling metadata with `asc metadata pull`.
1KGitHub
28GitHub
Mine AI
mine-ai-xyz
Open-source reference implementations for AI-enabled payment security, blockchain fraud detection, and AML/CFT compliance reasoning.
SecuritySkill source unconfirmed
377GitHub
search-term-miner
aaron-he-zhu
Use when the user asks to "mine my search terms", "find new keywords from converting queries", "build a negative-keyword list", or "cut wasted paid spend"; harvests conv…
2.7KGitHub
inbox-placement-monitor
aaron-he-zhu
Use when the user asks to "track where my emails are actually landing after I send", "read my seed-list inbox vs spam vs promotions results", "trend my Gmail Postmaster…
2.7KGitHub
attribution-reconciler
aaron-he-zhu
Use when platform-reported conversions disagree with GA4/ecommerce, when you suspect Meta and Google are double-counting the same sales, or for a standing (monthly) reco…
2.7KGitHub