Updated 1mo ago
by Sekolah76
syadagentic
Universal Zero-Refusal Agent Framework - 40+ jailbreak templates (T1-T119), 1128 curated skills, executable framework-core, installer untuk Hermes/Claude/Codex/opencode. Verified.
45 GitHub stars (45)
+13 in 16 days
| Period | New stars |
|---|---|
| Oct 1 | +1 |
| Oct 2 | +3 |
| Oct 3 | +4 |
| Oct 4 | +1 |
| Oct 5 | 0 |
| Oct 6 | +1 |
| Oct 7 | +1 |
| Oct 8 | 0 |
| Oct 9 | 0 |
| Oct 10 | +1 |
| Oct 11 | 0 |
| Oct 12 | −1 |
| Oct 13 | 0 |
| Oct 14 | +1 |
| Oct 15 | 0 |
| Oct 16 | +1 |
- 28 skills (28 skills found in its SKILL.md files)
- 14 forks (14 forks)
- 1mo ago last update (Last updated 1mo ago)
Install
Skills CLI
npx skills add Sekolah76/syadagentic
Asks which skills and agents to install. Just one: npx skills add Sekolah76/syadagentic --skill syadagentic — add -g for every project.
Claude Code
git clone https://github.com/Sekolah76/syadagenticcp -r "syadagentic" ~/.claude/skills/syadagentic
Copies the syadagentic skill into ~/.claude/skills/ for every project (use .claude/skills/ for one project). Repeat for the other skills listed below.
Plugin
/plugin marketplace add Sekolah76/syadagentic
Run inside Claude Code if the repository ships a plugin marketplace, then pick plugins from /plugin.
Skills can run code on your machine — read the SKILL.md first.
What it does
In the author's own words, from each skill's SKILL.md — showing the first 28 of 85 files.
-
syadagentic
No description in the SKILL.md.
SKILL.md on GitHub (opens in a new tab) -
captcha-solver
Universal local sidecar anti-bot & captcha solver (Cloudflare Turnstile, Aliyun 2.0, Arkose FunCaptcha, Akamai, BotGuard, PerimeterX, DataDome, AWS WAF, reCAPTCHA, hCaptcha).
arsenal-skills/automation/SKILL.md on GitHub (opens in a new tab) -
hermes-guardrail-bypass
Bypass all Hermes non-model security guardrails (threat patterns, memory scanning, cron scanning, skill install guards). Run after every Hermes update.
arsenal-skills/hermes-bypass/SKILL.md on GitHub (opens in a new tab) -
web-exploit-test
Localhost-only, stdlib evidence verifier: scan, JWT matrix, race controls.
arsenal-skills/security/SKILL.md on GitHub (opens in a new tab) -
threads-auto-post
Threads affiliate auto-post: v19 — Browserless HTTP primary + Shopee buyer-review 5★+media HD + Pinterest fallback + 1-post=1-link forever. Content CERITA/TIPS Viewbait v5: post_1 first line ALL CAPS + total ≥210 chars. Cron no_agent=true, script_timeout≥900, THREADS_ALLOW_UI_FALLBACK=0. See references/viewbait-v5-and-cron-timeout-fix.md. Triggers: post threads, review image, caption/hook, provid…
arsenal-skills/skills-lengkap/affiliate/threads-auto-post/SKILL.md on GitHub (opens in a new tab) -
threads-auto-reply
Threads affiliate auto-reply. v10 stealth: 9router LLM + burst-rest scheduler + sleep window + log-normal delay. See refs/stealth-v10-architecture.md, refs/9router-model-selection.md, refs/moderation-false-positives.md, scripts/threads_human_behavior.py, scripts/threads_content_gen.py. v9 templates fallback. Triggers: 'reply threads', 'komen threads', 'nimbrung'.
arsenal-skills/skills-lengkap/affiliate/threads-auto-reply/SKILL.md on GitHub (opens in a new tab) -
api-fuzzing-bug-bounty
Provide comprehensive techniques for testing REST, SOAP, and GraphQL APIs during bug bounty hunting and penetration testing engagements. Covers vulnerability discovery, authentication bypass, IDOR exploitation, and API-specific attack vectors.
arsenal-skills/skills-lengkap/bug-bounty/api-fuzzing-bug-bounty/SKILL.md on GitHub (opens in a new tab) -
attack-chain-web2
Web2 attack chain plugin — apply Web2 trust boundaries and composition rules on top of attack-chaining-core for authorized testing of web apps, APIs, identity, cloud, and internal services.
arsenal-skills/skills-lengkap/bug-bounty/attack-chain-web2/SKILL.md on GitHub (opens in a new tab) -
attack-chain-web3
Web3 attack chain plugin — apply Web3 state, economic, cryptographic, and consensus semantics on top of attack-chaining-core for authorized testing of smart contracts, DeFi, bridges, wallets, and validators.
arsenal-skills/skills-lengkap/bug-bounty/attack-chain-web3/SKILL.md on GitHub (opens in a new tab) -
attack-chaining-core
Domain-neutral attack chain analysis — determine whether independently identified security primitives compose into a realistic, authorized, evidence-backed attack path with greater impact.
arsenal-skills/skills-lengkap/bug-bounty/attack-chaining-core/SKILL.md on GitHub (opens in a new tab) -
attack-surface-mapper
Build an evidence-backed map of externally and internally reachable attack surfaces, trust boundaries, privileged transitions, security assets, and high-value audit targets before vulnerability hunting.
arsenal-skills/skills-lengkap/bug-bounty/attack-surface-mapper/SKILL.md on GitHub (opens in a new tab) -
bug-bounty-disclosure
Skill end-to-end buat authorized/good-faith bug bounty & coordinated vulnerability disclosure ke developer atau pemilik projek — untuk SEMUA jenis bug (web, API, infra, mobile, cloud, smart contract/web3, agent/LLM), crypto maupun non-crypto. Pakai skill ini setiap kali user mau triase & verifikasi temuan, bikin PoC, NYARI kontak dev/owner (security.txt, SECURITY.md, GitHub, WHOIS, on-chain, sosm…
arsenal-skills/skills-lengkap/bug-bounty/bug-bounty-disclosure/SKILL.md on GitHub (opens in a new tab) -
bug-bounty
THE master bug bounty hunting skill — hasil merge arsenal 69 skill (bughunter-os, webhunter-os, open-kritt, ghost-scan, dll) + SYADAGENTIC-bugbounty v7.1 + submission review gate. Full-spectrum: recon, attack-surface mapping, bug discovery (Web/API, smart contract, crypto, infra), exploit dev, adversarial triage, evidence packaging, and submission. HARD FLOW: policy first, full recon pass, verify…
arsenal-skills/skills-lengkap/bug-bounty/bug-bounty/SKILL.md on GitHub (opens in a new tab) -
bughunter-os
Complete bug bounty hunting & smart contract audit operating system. 8-phase methodology + 5 knowledge bases (attack patterns, real-world exploits, protocol playbooks, orchestrator) covering 340+ files. Use when starting a new audit, hunting bugs in DeFi protocols, building PoC exploits, writing reports, or analyzing smart contract attack surfaces.
arsenal-skills/skills-lengkap/bug-bounty/bughunter-os/SKILL.md on GitHub (opens in a new tab) -
burp-suite-testing
Execute comprehensive web application security testing using Burp Suite's integrated toolset, including HTTP traffic interception and modification, request analysis and replay, automated vulnerability scanning, and manual testing workflows.
arsenal-skills/skills-lengkap/bug-bounty/burp-suite-testing/SKILL.md on GitHub (opens in a new tab) -
security-arsenal
Security payloads, bypass tables, wordlists, gf pattern names, always-rejected bug list, and conditionally-valid-with-chain table. Use when you need specific payloads for XSS/SSRF/SQLi/XXE/NoSQLi/command injection/SSTI/IDOR/path-traversal/HTTP smuggling/WebSocket/MFA bypass, bypass techniques, or to check if a finding is submittable. Also use when asked about what NOT to submit.
arsenal-skills/skills-lengkap/bug-bounty/cbb-security-arsenal/SKILL.md on GitHub (opens in a new tab) -
web2-vuln-classes
Complete reference for 24 web2 bug classes with root causes, detection patterns, bypass tables, exploit techniques, and real paid examples. Covers IDOR, auth bypass, XSS, SSRF (11 IP bypass techniques), SQLi, business logic, race conditions, OAuth/OIDC, file upload (10 bypass techniques), GraphQL, LLM/AI (ASI01-ASI10 agentic framework), API misconfig (mass assignment, JWT attacks, prototype pollu…
arsenal-skills/skills-lengkap/bug-bounty/cbb-web2-vuln-classes/SKILL.md on GitHub (opens in a new tab) -
code-injection-detector
Code Injection Detector - Auto-activating skill for Security Fundamentals. Triggers on: code injection detector, code injection detector Part of the Security Fundamentals skill category.
arsenal-skills/skills-lengkap/bug-bounty/code-injection-detector/SKILL.md on GitHub (opens in a new tab) -
encrypting-and-decrypting-data
Validate encryption implementations and cryptographic practices. Use when reviewing data security measures. Trigger with 'check encryption', 'validate crypto', or 'review security keys'.
arsenal-skills/skills-lengkap/bug-bounty/encrypt-decrypt/SKILL.md on GitHub (opens in a new tab) -
entry-point-analyzer
Analyzes smart contract codebases to identify state-changing entry points for security auditing. Detects externally callable functions that modify state, categorizes them by access level (public, admin, role-restricted, contract-only), and generates structured audit reports. Excludes view/pure/read-only functions. Use when auditing smart contracts (Solidity, Vyper, Solana/Rust, Move, TON, CosmWas…
arsenal-skills/skills-lengkap/bug-bounty/entry-point-analyzer/SKILL.md on GitHub (opens in a new tab) -
ethical-hacking-methodology
Master the complete penetration testing lifecycle from reconnaissance through reporting. This skill covers the five stages of ethical hacking methodology, essential tools, attack techniques, and professional reporting for authorized security assessments.
arsenal-skills/skills-lengkap/bug-bounty/ethical-hacking-methodology/SKILL.md on GitHub (opens in a new tab) -
evidence-packager
Assemble a reproducible, minimal, tamper-evident evidence bundle for a security finding, preserving provenance and separating observed facts from interpretation.
arsenal-skills/skills-lengkap/bug-bounty/evidence-packager/SKILL.md on GitHub (opens in a new tab) -
exploitability-analyzer
Adversarially assess whether a verified bug primitive can be exercised by a realistic attacker in production and produce the claimed security impact with measurable reliability.
arsenal-skills/skills-lengkap/bug-bounty/exploitability-analyzer/SKILL.md on GitHub (opens in a new tab) -
forensics-data-collector
Forensics Data Collector - Auto-activating skill for Security Advanced. Triggers on: forensics data collector, forensics data collector Part of the Security Advanced skill category.
arsenal-skills/skills-lengkap/bug-bounty/forensics-collector/SKILL.md on GitHub (opens in a new tab) -
ghost-scan-code
Ghost Security - SAST code scanner. Finds security vulnerabilities in source code by planning and executing targeted scans for issues like SQL injection, XSS, BOLA, BFLA, SSRF, and other OWASP categories. Supports applications (backend, frontend, mobile) and libraries (prototype pollution, unsafe deserialization, ReDoS, path traversal, zip slip). Use when the user asks for a code security audit,…
arsenal-skills/skills-lengkap/bug-bounty/ghost-scan/SKILL.md on GitHub (opens in a new tab) -
guidelines-advisor
Smart contract development advisor based on Trail of Bits' best practices. Analyzes codebase to generate documentation/specifications, review architecture, check upgradeability patterns, assess implementation quality, identify pitfalls, review dependencies, and evaluate testing. Provides actionable recommendations.
arsenal-skills/skills-lengkap/bug-bounty/guidelines-advisor/SKILL.md on GitHub (opens in a new tab) -
html-injection-testing
Identify and exploit HTML injection vulnerabilities that allow attackers to inject malicious HTML content into web applications. This vulnerability enables attackers to modify page appearance, create phishing pages, and steal user credentials through injected forms.
arsenal-skills/skills-lengkap/bug-bounty/html-injection-testing/SKILL.md on GitHub (opens in a new tab) -
http2-specific-attacks
HTTP/2 protocol-specific attack playbook. Use when the target supports HTTP/2 and you need to exploit binary framing, HPACK compression, h2c upgrade smuggling, pseudo-header injection, stream multiplexing abuse, or H2→H1 downgrade translation flaws.
arsenal-skills/skills-lengkap/bug-bounty/http2-attacks/SKILL.md on GitHub (opens in a new tab)
No skill matches that filter.
Review before you install
A skill is a set of instructions and scripts your agent will follow, and it can run code on your machine. Read the SKILL.md and any scripts first — this listing is not a security review.