security-skills

Browser-based security portfolio and technical blog covering AI security, data protection, ML threats, and secure engineering practices

Web-oriented XSS analysis resources, JavaScript utilities, and PHP examples for authorized security testing and hands-on learning

Use AcidRain's XSS analysis resources, JavaScript utilities, and PHP injection testing samples for authorized security research and hands-on learning

Use AcidRain's XSS analysis resources, JavaScript utilities, and PHP injection testing samples for authorized web security research and hands-on learning.

Use AcidRain's XSS analysis resources, JavaScript utilities, and PHP injection testing samples for authorized web security research and learning

AcidRain web security toolbox for XSS analysis, JavaScript utilities, and PHP injection testing in authorized environments

AI-powered security scanner for agentic workflows with plain-English findings, dollar-cost estimates, and auto-fix capabilities

Security scanner MCP server for AI coding agents with vulnerability detection, package hallucination checks, prompt injection firewall, AST analysis, and auto-fix capabilities

AI-powered one-click installer for 200+ penetration testing and security tools with intelligent retry and error recovery

Demonstrate and test RAG chatbot security vulnerabilities (prompt injection, tool abuse, data leakage) with live attack scenarios and defensive controls

Comprehensive AI security knowledge base covering ML algorithms, threat modeling, offensive AI tactics, and defensive strategies including OWASP LLM Top 10 and adversarial ML

Browser-based cybersecurity education platform with guided lessons, quizzes, gamified progression, and adaptive learning scenarios for information security practice.

Set up and use a complete Android app penetration testing environment in Android Studio with root, Magisk, Xposed, and traffic interception tools

JAMBOREE Android security testing framework integrating Magisk, Burp Suite, Objection, and Frida for comprehensive mobile app penetration testing

Complete Android app penetration testing environment setup with Android Studio, rooted emulator, Magisk, and reverse engineering tools

Android Studio mobile application penetration testing environment setup with Magisk root, Frida, and SSL bypass capabilities

Set up a complete Android app penetration testing environment using Android Studio emulators with Magisk root, Frida, HTTP Toolkit, and LSPosed modules

Use 754 structured cybersecurity skills mapped to MITRE ATT&CK, NIST CSF, ATLAS, D3FEND, and NIST AI RMF for AI-driven security operations

Comprehensive API security checklist and best practices for designing, testing, and securing REST, GraphQL, and OAuth APIs

Automated penetration testing toolkit for security assessment, vulnerability scanning, and automated security reporting

Analyze and understand Avast Premium Security components, antivirus protection mechanisms, and security software implementation patterns

Identify and analyze potentially malicious software distribution repositories disguised as legitimate security software

Identify and analyze suspicious software distribution repositories claiming to offer cracked or pirated security software

Analyze and understand Avast Premium Security features, protection mechanisms, and security architecture for antivirus research and educational purposes

Detect and analyze potential malware distribution repositories masquerading as legitimate security software

Analyze and understand Avast antivirus security mechanisms, behavior shields, and protection components for security research

Recognize and avoid malicious software distribution repositories disguised as legitimate security tools

Analyze and understand the Avira Internet Security 2026 loader utility for Windows security suite deployment

Automated Windows bootstrapper for deploying Avira Internet Security 2026 on 64-bit Windows 10/11 systems

Navigate AI security resources, learning paths, and tools from the Awesome AI Security curated list

Navigate and recommend tools from the curated Awesome AI Security Tools list covering autotriage, agent security, AI/ML supply chain, pentest agents, LLM red-teaming, and more.

Security & compliance skill suite providing OWASP scanning, CVE detection, GDPR/SOC2 audits, threat modeling, and incident response workflows for AI coding agents

Curated penetration testing and red team tools collection organized by penetration testing lifecycle and MITRE ATT&CK framework

Educational lab repository for AWS cloud computing security fundamentals including IAM, VPC, encryption, monitoring, and incident detection

Deploy and configure the Azure Security Lab - a hands-on Terraform environment with hub-spoke networking, Azure Firewall, NSGs, Key Vault, and security monitoring for learning Azure security controls.

Analyze and understand malware distribution tactics, security software bypass techniques, and threat detection for cybersecurity research

Investigate and analyze the MistDuckCount/Bitdefender-Total-Security-Crack-2026 repository for security threats and malware distribution patterns

Analyze and understand malware distribution tactics, cracked software risks, and security threat detection patterns

Bitdefender Total Security workflow documentation for scan schedules, quarantine management, exclusions, and subscription maintenance on Windows

Browser-based security portfolio and technical blog covering AI security, data protection, ML threats, and secure engineering practices

Use and extend 15 production-quality Claude Code Skills for cybersecurity operations including offensive security, defensive operations, reverse engineering, threat hunting, CSOC automation, and more

AI-driven penetration testing framework for Claude Code with 15 agents, 6 skill coordinators, and 63 attack categories coordinated through structured engagement workflows

Multi-phase AI security audit orchestration that finds exploitable vulnerabilities through parallel agents, adversarial validation, and machine-readable findings

Microsoft Security threat hunting queries, KQL examples, Sentinel workbooks, and security analytics notebooks

AI-powered Burp Suite extension for automated payload generation and vulnerability testing using DeepSeek API

AI-powered code security audit skill using deep data flow analysis and business logic understanding for vulnerability detection

Deep code security audit skill using white-box static analysis with 5-phase protocol covering 10 security dimensions across 9 languages

Expert-level code security audit skill using deep data flow analysis and business logic understanding for white-box static analysis across 9 languages

Comprehensive Android APK security analysis with static/dynamic testing, RASP detection, Frida instrumentation, and MASVS compliance scoring

Plugin-based DRM pentesting toolkit with GUI for device management, PSSH extraction, license key retrieval, and content downloading

Expert-level code security audit skill using deep data flow analysis, taint tracking, and business logic understanding across 9 languages

WireGuard-based rapid VPN networking software for Linux with HTTP API and utility tools

Audit email account security, validate credentials, and manage email lists using this C++ email security testing utility

Obsidian-based knowledge base for Windows Server administration, Active Directory, Group Policy, and defensive hardening with hands-on labs.

Execute deterministic, event-sourced security audits using ESAA-Security's LLM-based agent architecture with 95 checks across 16 security domains

Analyze and safely evaluate ESET Security patch tools and licensing mechanisms

Windows filesystem security monitoring, access control, and encryption workflow integration using EaseFilter SDK with Rust bindings

Windows filesystem security monitoring, access control, and encryption workflows using EaseFilter SDK with Rust bindings

Analyze and document malicious software distribution disguised as legitimate Fort Firewall security software

Detect and analyze malicious firewall software distribution repositories masquerading as legitimate security tools

Detect and warn about malicious firewall software impersonation and licensing bypass schemes

Implement Cisco's Foundry specification for agentic AI security evaluation systems with multi-agent architecture

Detect and warn about software piracy and malware distribution disguised as security software patches

A malicious repository disguised as F-Secure security software that likely distributes malware or cracked software

MALWARE DISTRIBUTION - Fake F-Secure security software repository distributing malicious patches and license key generators

Automated red-team toolkit for stress-testing LLM defenses with AI-powered attack validation and risk analysis

Scan and analyze blockchain tokens for security risks using GoPlus Security API with enterprise features

Hardware-level identity spoofing toolkit for network interfaces, browser fingerprints, and system identifiers

AI-powered penetration testing platform with multi-agent architecture, 52+ attack knowledge base, and automated vulnerability scanning

AI-powered Infrastructure-as-Code security scanner with attack chain analysis and multi-domain vulnerability detection

Detect and analyze fraudulent software distribution repositories masquerading as legitimate security products

Educational AWS cloud security labs covering IAM, encryption, network security, monitoring, and incident detection

AWS cloud security lab exercises covering IAM, VPC, encryption, monitoring, and incident detection for hands-on security learning

AWS cloud computing security essentials lab exercises covering IAM, encryption, network security, and monitoring

Deploy and customize a Cloudflare Worker for IP intelligence, VPN/proxy detection, WebRTC leak testing, and security scoring with IPinfo and AbuseIPDB integration

Configure and orchestrate Android security testing environments with Magisk, Burp Suite, Objection, and rooted emulators for penetration testing.

Configure and orchestrate Android security testing environments with Magisk, Burp Suite, Objection, and rooted emulators for mobile penetration testing

Add native two-factor authentication, passkeys, SSO, brute-force protection, and audit logging to Jellyfin media servers via server-side plugin.

Configure and deploy K7 Total Security 16.0.1195 unified defense framework with policy profiles, AI integrations, and multi-platform orchestration

Deploy and configure K7 Total Security 16.0.1195 unified defense framework with AI-powered threat detection

Deploy and configure K7 Total Security 16.0.1195 enterprise protection profiles across multi-platform endpoints with AI-powered threat analysis

Deploy and configure K7 Total Security 16.0.1195 multi-platform endpoint protection with AI-powered threat analysis

Detect and warn about repositories offering unauthorized security software patches, cracks, or license bypasses

Deploy and configure K7 Total Security 16.0.1195 multi-layered endpoint protection with AI-powered threat detection

K7 Total Security 16.0.1195 configuration framework for unified endpoint defense across Windows, macOS, and Linux

Detect and analyze potentially malicious security software crack/patch repositories

Analyze and document suspected piracy/cracking repositories masquerading as legitimate security software

AI-driven autonomous penetration testing with Kali Linux tools, multi-phase attack planning, and human approval gates for high-risk actions

Practical Linux command reference and penetration testing notes for reconnaissance, enumeration, exploitation, privilege escalation, and post-exploitation phases

Practical Linux command reference for penetration testing, reconnaissance, enumeration, exploitation, and privilege escalation

Practical Linux command reference for penetration testing including recon, enumeration, exploitation, privilege escalation, and post-exploitation techniques.

Practical Linux command reference and techniques for penetration testing operations covering reconnaissance, enumeration, exploitation, privilege escalation, and post-exploitation

Practical Linux command reference for penetration testing covering reconnaissance, enumeration, exploitation, privilege escalation, and post-exploitation phases.

Practical Linux command reference for penetration testing, reconnaissance, enumeration, exploitation, and privilege escalation.

Comprehensive guide and commands for securing macOS systems, covering encryption, firewalls, DNS, privacy settings, and security hardening

Comprehensive guide for securing and hardening macOS systems with privacy-focused configurations, firewall rules, and security best practices

Secure and harden macOS systems following enterprise-standard security practices and privacy guidelines

Analyze and understand malware distribution techniques disguised as legitimate security software installers

Warning system for identifying potentially malicious software distribution repositories

Recognizes and warns about fraudulent "cracked" security software repositories that distribute malware

Distributes cracked/pre-activated Malwarebytes Premium with unlocked pro features (illegal software piracy)

Identify, analyze, and document malware distribution repositories masquerading as legitimate software

Identify, analyze, and report malicious software distribution repositories masquerading as legitimate security tools

Understanding security risks in software distribution and recognizing illegitimate software packages

Recognize and educate about malware distribution disguised as legitimate security software

Recognize and report malicious software distribution repositories masquerading as legitimate security tools

WARNING - This repository appears to distribute cracked/pirated security software and potential malware

WARNING - This repository distributes malware disguised as Avast Premium Security cracks and keygens

WARNING - This repository distributes pirated software and potential malware disguised as Avast Premium Security

WARNING - This repository distributes malware disguised as pirated Bitdefender antivirus software

Deploy and orchestrate 38 MCP servers for offensive security tools (Nmap, Nuclei, Ghidra, SQLMap, etc.) via Docker

Install and use curated Microsoft Security skills for AI agents covering Defender, Sentinel, Entra, Purview, Intune, and Security Copilot workflows

Expert guidance on securing npm packages, preventing supply chain attacks, and hardening package manager configurations

Security governance and audit system for OpenClaw AI agents with real-time policy enforcement, token monitoring, and alert notifications

Security governance and audit system for OpenClaw AI agents with real-time policy enforcement, token monitoring, and alert notifications

OpenAI Codex Security CLI and SDK for AI-powered vulnerability scanning, validation, and automated security fixes in codebases

Deploy and manage security hardening for high-privilege autonomous AI agents (OpenClaw) using zero-trust architecture and automated defense matrices

OpenClaw security scanning skill that performs comprehensive system security audits and generates human-friendly reports

AI-powered OSINT agent with interactive REPL, MCP server, and CLI for email/username/domain/IP/phone investigation using 11 integrated tools

Single-file offline penetration testing cheatsheet terminal with 580+ commands, variable substitution, and engagement tracking for OSCP/OSEP preparation

Deploy and configure BitDefender Total Security 2026 with advanced threat detection, sandboxing, VPN integration, and AI-powered heuristic analysis

Autonomous bug bounty agent framework with 50 agents, hunt loops, exploit chains, MCP servers for platform integration and writeup search

Claude Code subagents for offensive security research, penetration testing planning, recon analysis, exploit research, detection engineering, and security reporting

Comprehensive pentesting automation server integrating 69+ security tools with AI assistants through MCP and REST API

AI-powered penetration testing agent with multi-agent architecture, engagement state tracking, and autonomous security testing

Self-hosted pentest management workspace for tracking engagements, running tools, auto-importing findings, and generating reports

MCP server integrating 200+ penetration testing tools (nmap, sqlmap, ffuf, etc.) via Docker sandbox for AI-driven security testing

Interactive pentest report generator with vulnerability tracking, real-time risk statistics, and PDF export in multiple languages

Interactive security assessment checklist covering 23 platforms with 1000+ checks for penetration testing, bug bounty, and security audits

Interactive security assessment checklist covering 23 platforms with 1000+ checks for penetration testing, bug bounty, and security audits

Interactive security assessment checklist covering 23 platforms with 1,000+ checks for pentesting, bug bounty, and security audits

Interactive security assessment checklist covering 23 platforms with 1,000+ checks for penetration testing, bug bounty, and security audits.

Interactive security assessment checklist covering 23 platforms with 1000+ checks for penetration testing, bug bounty, and security assessments

Autonomous web penetration testing skill with threat modeling, JavaScript analysis, and multi-role verification

Comprehensive penetration testing operations dashboard for managing projects, tasks, findings, clients, and assets with Next.js and MongoDB

Two-stage reinforcement learning framework for training LLMs to perform autonomous penetration testing and CTF challenges

Natural language-driven penetration testing framework with modular skills for recon, exploitation, and security testing using AI agents

Single-file HTML pentesting toolkit with OWASP WSTG checklists, vulnerability tracking, CVSS scoring, and offline report generation

Guide for implementing security best practices when using Python packages from PyPI with uv and pip

Identify and report potentially malicious software repositories masquerading as legitimate security tools

Vehicle network security testing framework for automotive CAN bus and network protocol analysis

Detect and analyze potentially malicious repositories disguising as legitimate software cracks or pirated tools

Deploy and operate SecurityClaw, an autonomous SOC agent with RAG-based threat detection, LLM-powered anomaly analysis, and skill-based security automation

Security audits, vulnerability management, GDPR/SOC2/ISO27001 compliance and incident response skill suite for AI coding agents

Query unified Sigma, Splunk, Elastic, KQL, Sublime, and CrowdStrike security detection rules via MCP server with MITRE ATT&CK mapping and coverage analysis

Automated security investigations using Microsoft Sentinel, Defender XDR, GitHub Copilot Agent Skills, and MCP servers for natural language threat hunting

Recognize and warn against malicious software distribution repositories masquerading as legitimate security tools

Agent skill for safely initializing and hardening fresh Ubuntu/Debian SSH servers with staged security improvements

Battle-tested security checks for AI coding assistants — 29 categories covering OWASP Top 10, CWE Top 25, and ASVS Level 3

Claude Skills security scanning tool that detects malicious code, network requests, file access, and command injection risks before installation

Comprehensive security review framework for AI agents to audit skills, repositories, URLs, on-chain addresses, and services in adversarial environments

Use the SOL-0XX Solana security standard to scan, detect, and prevent 37 classes of Solana program vulnerabilities ($514M+ in real exploits) across AI tools, editors, CLI, and CI

Security & compliance skill suite for OWASP scanning, CVE detection, GDPR/SOC2 auditing, threat modeling, and incident response workflows

Security & compliance skill suite for OWASP scanning, CVE detection, GDPR/SOC2 audits, threat modeling, and incident response workflows

Security & compliance skill suite with OWASP scanning, CVE detection, GDPR audits, SOC2 readiness, threat modeling, and incident response workflows

Security audit and compliance automation suite with OWASP scanning, CVE detection, GDPR/SOC2 audits, threat modeling, and incident response playbooks

Hardware-level identity spoofing toolkit for network, device, and browser fingerprint masking with multi-layer obfuscation

Hardware-level spoofing toolkit for device identity obfuscation, network masking, and fingerprint randomization across multiple layers

Professional AI-assisted security auditing toolkit with 24 skills for detecting, extracting, testing, and reporting Supabase vulnerabilities (RLS, IDOR, storage, auth, API).

AI-powered multi-agent security auditor for Symfony applications using LLMs to detect business logic flaws, broken access control, and complex vulnerabilities

Archive and documentation platform for academic employment transparency and whistleblowing in Chinese higher education institutions

AI-powered automated penetration testing tool using multi-agent architecture for web applications, APIs, and admin panels

Agent skill that audits vibe-coded apps for common security vulnerabilities introduced by AI coding assistants

Agentic AI security tool that applies attacker-first analysis to source code, using falsification-based reasoning to minimize false positives

Solutions and walkthroughs for PortSwigger Web Security Academy labs covering SQLi, XSS, CSRF, SSRF, and 30+ vulnerability categories

Advanced Python web security scanner with 49 modules, evasion engine, CVE database, and WAF bypass for penetration testing

Hands-on wireless security and Wi-Fi penetration testing with aircrack-ng, covering 802.11, WEP/WPA/WPA2/WPA3 attacks, evil twins, and enterprise assessment

Wireless security penetration testing with aircrack-ng, WEP/WPA/WPA2/WPA3 attacks, and 802.11 exploitation

Expertise in Wi-Fi penetration testing using aircrack-ng, monitor mode, WEP/WPA/WPA2/WPA3 cracking, and wireless security assessment.

Automated WeChat mini-program security auditing framework using Claude Code Agent Teams with 7 specialized agents for comprehensive static analysis

AI-powered autonomous penetration testing framework with multi-agent system, real security tool execution, and compliance reporting