Trajan
praetorian-inc
A multi-platform CI/CD vulnerability detection and attack automation tool for identifying security weaknesses in pipeline configurations.
SecuritySkill source unconfirmed
163GitHub
OPENAGENTSKILL / DIRECTORY
AI Agent Skills
Find a skill for your next task. Explore tools for Codex, Claude Code, Cursor and more.
Results · “actions-injection”
1–16 / 24
More filters · 1
Candidates in this shortlist, not the full registry. GitHub stars belong to repositories, not individual skills.
Results: 24
Commix
commixproject
Automated All-in-One OS Command Injection Exploitation Tool
SecuritySkill source unconfirmed
5.8KGitHub
Crlfuzz
dwisiswant0
A fast tool to scan CRLF vulnerability written in Go
SecuritySkill source unconfirmed
1.5KGitHub
Poutine
boostsecurityio
poutine, a supply chain vulnerability scanner for build pipelines
SecuritySkill source unconfirmed
477GitHub
Shai Hulud 2.0 Detector
gensecaihq
Detect npm packages compromised in the Shai-Hulud 2.0 supply chain attack (Nov 2025). Scans for 790+ malicious packages, suspicious scripts, TruffleHog activity, SHA1HUL…
SecuritySkill source unconfirmed
140GitHub
Cloud Custodian
cloud-custodian
Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources
SecuritySkill source unconfirmed
6KGitHub
hunt-cicd
elementalsouls
Hunt CI/CD pipeline vulnerabilities — GitHub Actions workflow injection (pull_request_target Pwnrequest + ${{ }}-into-shell), self-hosted runner poisoning, OIDC trust-po…
4.1KGitHub
competition-agent-cloud
zhaoxuya520
Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for AI-agent, prompt-injection, MCP or toolchain, cloud, container, CI/CD, and supply-chain…
33.7KGitHub
FBI Tools
danieldurnea
🕵️ OSINT Tools for gathering information and actions forensics 🕵️
SecuritySkill source unconfirmed
2.5KGitHub
ai-security
alirezarezvani
Use when assessing AI/ML systems for prompt injection, jailbreak vulnerabilities, model inversion risk, data poisoning exposure, or agent tool abuse. Covers MITRE ATLAS…
25.1KGitHub
geo-report
zubair-trabzada
Generate a professional, client-facing GEO report combining all audit results into a single deliverable with scores, findings, and prioritized actions
10.1KGitHub
AI & LLM Security
Masriyan
LLM and AI application security testing — prompt injection, jailbreak resistance, OWASP LLM Top 10 (2025), RAG and agent/tool-use security, model supply chain, and AI re…
397GitHub
security-audit
omnigent-ai
Audit a codebase or directory for security issues (hardcoded secrets, injection, unsafe deserialization, weak crypto, authz gaps) and produce a structured findings repor…
9.6KGitHub
hunt-ato
elementalsouls
Hunt account takeover taxonomy — 9 distinct paths to ATO, plus chains. Paths: (1) password reset flaws (host-header injection redirects token, predictable/numeric token,…
4.1KGitHub
hunt-cache-poison
elementalsouls
Hunting skill for cache poison vulnerabilities. Built from 10 public bug bounty reports including X-Forwarded-Host poisoning, X-HTTP-Method-Override / GCS cache, reflect…
4.1KGitHub
hunt-auth-bypass
elementalsouls
Hunting skill for auth bypass vulnerabilities. Built from 12 public bug bounty reports across SAML XSW / parser-differential (GitHub Enterprise CVE-2025-25291/25292), SA…
4.1KGitHub