Checkov Action
bridgecrewio
This GitHub Action runs Checkov against infrastructure-as-code, open source packages, container images, and CI/CD configurations to identify misconfigurations, vulnerabi…
SecuritySkill source unconfirmed
307GitHub
OPENAGENTSKILL / DIRECTORY
AI Agent Skills
Find a skill for your next task. Explore tools for Codex, Claude Code, Cursor and more.
Results · “action”
1–16 / 29
More filters · 1
Candidates in this shortlist, not the full registry. GitHub stars belong to repositories, not individual skills.
Results: 29
Socid Extractor
soxoj
⛏️ The extraction engine behind Maigret: turn any profile URL into a structured OSINT record across 150+ sites
SecuritySkill source unconfirmed
1KGitHub
geo-report
zubair-trabzada
Generate a professional, client-facing GEO report combining all audit results into a single deliverable with scores, findings, and prioritized actions
10.1KGitHub
Shai Hulud 2.0 Detector
gensecaihq
Detect npm packages compromised in the Shai-Hulud 2.0 supply chain attack (Nov 2025). Scans for 790+ malicious packages, suspicious scripts, TruffleHog activity, SHA1HUL…
SecuritySkill source unconfirmed
140GitHub
Cloud Custodian
cloud-custodian
Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources
SecuritySkill source unconfirmed
6KGitHub
User Scanner
kaifcodec
🕵️♂️ (2-in-1) Email & Username OSINT suite for deep data extraction. Analyzes 240+ scan vectors (100+ email / 140+ username) for security research, investigations, and…
SecuritySkill source unconfirmed
2.2KGitHub
odl-pdf
opendataloader-project
Procedure for extracting structured data from PDFs with opendataloader-pdf (ODL) correctly: read the installed tool's own help to discover its current options, build the…
28.9KGitHub
FBI Tools
danieldurnea
🕵️ OSINT Tools for gathering information and actions forensics 🕵️
SecuritySkill source unconfirmed
2.5KGitHub
geo-compare
zubair-trabzada
Monthly delta tracking and progress reporting for GEO clients. Compares two GEO audits (baseline vs. current), calculates score improvements across all categories, track…
10.1KGitHub
geo-audit
zubair-trabzada
Full website GEO+SEO audit with parallel subagent delegation. Orchestrates a comprehensive Generative Engine Optimization audit across AI citability, platform analysis,…
10.1KGitHub
code-maturity-assessor
trailofbits
Systematic code maturity assessment using Trail of Bits' 9-category framework. Analyzes codebase for arithmetic safety, auditing practices, access controls, complexity,…
6.8KGitHub
algorand-vulnerability-scanner
trailofbits
Scans Algorand smart contracts for 11 common vulnerabilities including rekeying attacks, unchecked transaction fees, missing field validations, and access control issues…
6.8KGitHub
web-technique-to-skill
MengTo
Turn a visual or interaction technique you already built into a reusable web-design skill, by isolating the one mechanism that makes it work while reproducing its approv…
5.7KGitHub
hunt-dom
elementalsouls
Hunt client-side DOM vulnerabilities — DOM Clobbering (overwrite JS globals via HTML injection), PostMessage hijacking (missing origin check), Service Worker abuse (inte…
4.3KGitHub
apk-redteam-pipeline
elementalsouls
End-to-end Android APK red-team pipeline — automated APK acquisition (Play Store + apkpure + apkmirror fallback), jadx decompilation, secret/URL/JWT/Firebase grep, pinne…
4.1KGitHub
hunt-cloud-misconfig
elementalsouls
Hunt cloud / infrastructure misconfigurations. AWS: public S3 buckets (s3:GetObject anonymous), permissive bucket policies (PutObjectAcl public-write), exposed CloudFron…
4.1KGitHub