vuln-scout

In the author's own words, from each skill's SKILL.md — showing the first 30 of 35 files.

• AI/ML Attack Surface

  This skill should be used when the user asks about "AI security", "ML pipeline attacks", "prompt injection", "model deserialization", "unsafe model loading", "Jupyter injection", "LLM security", or needs to identify AI/ML-specific vulnerabilities in codebases that use machine learning frameworks.

  vuln-scout/skills/ai-ml-attacks/SKILL.md on GitHub (opens in a new tab)

• Business Logic Analysis

  This skill should be used when the user asks about "business logic", "workflow vulnerability", "trust boundary", "state machine", "authorization bypass", "multi-step process", "workflow bypass", "application logic flaw", or needs to identify business logic vulnerabilities during whitebox security review.

  vuln-scout/skills/business-logic/SKILL.md on GitHub (opens in a new tab)

• Cache Poisoning

  This skill should be used when the user asks about "cache poisoning", "web cache deception", "CDN cache", "proxy cache", "nginx cache", "varnish", "cache key manipulation", "response caching", or needs to find cache-related vulnerabilities during whitebox security review.

  vuln-scout/skills/cache-poisoning/SKILL.md on GitHub (opens in a new tab)

• Cloud-Native Security

  This skill should be used when the user asks about "cloud security", "AWS security", "GCP security", "Azure security", "Kubernetes security", "IMDS", "instance metadata", "S3 bucket policy", "IAM", "serverless security", "Lambda security", "container security", "cloud misconfiguration", "SSRF to cloud metadata", or needs to identify cloud-native security issues during whitebox security review.

  vuln-scout/skills/cloud-native/SKILL.md on GitHub (opens in a new tab)

• Compliance Mapping

  This skill should be used when the user asks about "compliance mapping", "PCI-DSS", "HIPAA", "SOC 2", "NIST CSF", "regulatory requirements", "compliance report", or needs to map security findings to compliance framework requirements.

  vuln-scout/skills/compliance-mapping/SKILL.md on GitHub (opens in a new tab)

• cpg-analysis

  This skill should be used when the user asks about "Code Property Graph", "CPG analysis", "Joern queries", "CPGQL", "data flow verification", "taint tracking with Joern", "semantic code analysis", or needs to understand how CPG-based verification works for vulnerability detection.

  vuln-scout/skills/cpg-analysis/SKILL.md on GitHub (opens in a new tab)

• cross-component

  This skill should be used when analyzing multi-service architectures, frontend-backend interactions, microservices, or when looking for vulnerabilities that span multiple components. Use when the user asks about "cross-component", "frontend to backend", "service interaction", "internal service access", or "multi-service vulnerabilities".

  vuln-scout/skills/cross-component/SKILL.md on GitHub (opens in a new tab)

• Cryptographic Failures

  This skill should be used when the user asks about "cryptographic failures", "weak encryption", "hardcoded secrets", "insecure random", "MD5", "SHA1", "weak hashing", or needs to find crypto-related vulnerabilities during whitebox security review.

  vuln-scout/skills/cryptographic-failures/SKILL.md on GitHub (opens in a new tab)

• Dangerous Functions

  This skill should be used when the user asks about "dangerous functions", "security sinks", "what functions are dangerous in PHP/Java/Python", "find vulnerable functions", "code execution functions", "command injection sinks", "SQL injection functions", or needs to identify security-sensitive functions in source code during whitebox security review.

  vuln-scout/skills/dangerous-functions/SKILL.md on GitHub (opens in a new tab)

• Data Flow Tracing

  This skill should be used when the user asks to "trace data flow", "follow user input", "source to sink analysis", "track variable", "find input sources", "taint analysis", or needs to understand how user-controlled data flows through an application during whitebox security review.

  vuln-scout/skills/data-flow-tracing/SKILL.md on GitHub (opens in a new tab)

• Exception Handling Vulnerabilities

  This skill should be used when the user asks about "XXE", "XML External Entity", "error handling", "exception disclosure", "stack trace exposure", "improper error handling", or needs to find exception-related vulnerabilities during whitebox security review.

  vuln-scout/skills/exception-handling/SKILL.md on GitHub (opens in a new tab)

• Exploit Techniques

  This skill should be used when the user asks to "write an exploit", "create PoC", "develop proof of concept", "exploit script", "automate exploitation", "build exploit", or needs guidance on developing working exploits during whitebox security review.

  vuln-scout/skills/exploit-techniques/SKILL.md on GitHub (opens in a new tab)

• framework-patterns

  This skill should be used when the user asks about "framework vulnerabilities", "Next.js security", "Flask security", "Django security", "Rails security", "Spring security", "GraphQL security", "Server Actions", "render_template_string", "SSTI patterns", "redirect SSRF", "mass assignment", "actuator exposure", "SpEL injection", "introspection", or needs to identify framework-specific vulnerabilit…

  vuln-scout/skills/framework-patterns/SKILL.md on GitHub (opens in a new tab)

• Logging Failures

  This skill should be used when the user asks about "logging failures", "log injection", "insufficient logging", "audit logging", "security logging", "CWE-117", or needs to find logging-related vulnerabilities during whitebox security review.

  vuln-scout/skills/logging-failures/SKILL.md on GitHub (opens in a new tab)

• Mixed-Language Monorepos

  This skill should be used when the user is auditing a "polyglot monorepo", "multi-language codebase", "microservices with different languages", "Go + Python + TypeScript", or any codebase with services written in different programming languages. Provides strategies for cross-service security analysis and unified threat modeling.

  vuln-scout/skills/mixed-language-monorepos/SKILL.md on GitHub (opens in a new tab)

• Mobile Android Whitebox Audit

  Use this skill when the user is auditing a decompiled Android application — directory structure includes `jadx_out/` / `apktool_out/`, files end in `.smali` / are jadx-renamed to `defpackage/*.java`, or the conversation mentions an APK / xAPK / `com.example.*` package. Covers the high-signal vulnerability classes vuln-scout detects in decompiled APKs and the conventions for running the unified mo…

  vuln-scout/skills/mobile-android/SKILL.md on GitHub (opens in a new tab)

• Mobile iOS Whitebox Audit

  Use this skill when the user is auditing an iOS application — directory contains `.ipa`, `Info.plist`, `*.swift`, `*.m`, `*.mm`, or an `xcodeproj`. Also activates when the conversation mentions WKWebView, NSURLSession, Keychain, App Transport Security, or any `com.apple.*` / `bundleidentifier`-style iOS package name.

  vuln-scout/skills/mobile-ios/SKILL.md on GitHub (opens in a new tab)

• Mobile Payment Tokenization Patterns

  Use this skill when reviewing mobile code that handles card data, payment tokenization, or third-party payment SDK integrations (Braintree, Stripe, Adyen, Google Pay, Apple Pay, FirstData-style iframe encryptors). The skill catalogues the high-signal attack patterns vuln-scout detects in mobile payment flows — server-controlled tokenization URLs, JavaScript-injection-into-WebView card-data exfilt…

  vuln-scout/skills/mobile-payments/SKILL.md on GitHub (opens in a new tab)

• nextjs-react

  This skill should be used when the user asks about "Next.js security", "React security", "Server Components", "Server Actions", "Route Handlers", "RSC vulnerabilities", "SSR security", or needs comprehensive Next.js/React security analysis during whitebox security review.

  vuln-scout/skills/nextjs-react/SKILL.md on GitHub (opens in a new tab)

• OWASP Category Mapping

  Use this skill when the user asks for OWASP Top 10 mapping, CWE alignment, or standards-oriented reporting. The directory name stays `owasp-2025` for backward compatibility, but external reports should use official OWASP Top 10 names.

  vuln-scout/skills/owasp-2025/SKILL.md on GitHub (opens in a new tab)

• OWASP API Security Top 10

  This skill should be used when the user asks about "API security", "OWASP API Top 10", "BOLA", "broken object level authorization", "API authentication", "mass assignment", "GraphQL security", "gRPC security", "rate limiting", "API abuse", "REST API vulnerabilities", or needs to identify API-specific security issues during whitebox security review.

  vuln-scout/skills/owasp-api-top10/SKILL.md on GitHub (opens in a new tab)

• postmessage-xss

  Detect postMessage handlers that trust unvalidated origins or write attacker-controlled data to dangerous DOM sinks.

  vuln-scout/skills/postmessage-xss/SKILL.md on GitHub (opens in a new tab)

• Sandbox Escapes

  This skill should be used when the user asks about "sandbox escape", "vm escape", "template injection to RCE", "SSTI exploitation", "vm2 bypass", "restricted execution bypass", "sandbox breakout", or needs to identify sandbox escape and template engine exploitation techniques during whitebox security review.

  vuln-scout/skills/sandbox-escapes/SKILL.md on GitHub (opens in a new tab)

• Secret Scanning

  This skill should be used when the user asks about "secret scanning", "find secrets", "hardcoded credentials", "leaked API keys", "git history secrets", "credential scanning", "detect passwords in code", or needs to identify secrets and credentials in source code or git history during whitebox security review.

  vuln-scout/skills/secret-scanning/SKILL.md on GitHub (opens in a new tab)

• Security Misconfiguration

  This skill should be used when the user asks about "security misconfiguration", "default credentials", "debug mode", "security headers", "exposed endpoints", "TLS configuration", or needs to find configuration-related vulnerabilities during whitebox security review.

  vuln-scout/skills/security-misconfiguration/SKILL.md on GitHub (opens in a new tab)

• Sensitive Data Leakage

  Detect ANY credential/secret flowing to ANY output sink. Use when asked about "credential leakage", "secret logging", "sensitive data exposure", "CWE-532", "password in logs", "token exposure", or security logging issues.

  vuln-scout/skills/sensitive-data-leakage/SKILL.md on GitHub (opens in a new tab)

• Threat Modeling

  This skill should be used when the user asks about "threat model", "STRIDE", "data flow diagram", "attack surface", "threat analysis", "security architecture", "component threats", "trust boundaries", "technology decomposition", or needs systematic threat identification during whitebox security review.

  vuln-scout/skills/threat-modeling/SKILL.md on GitHub (opens in a new tab)

• Vulnerability Patterns

  This skill should be used when the user asks about "vulnerability patterns", "how to find SQL injection", "XSS patterns", "command injection techniques", "OWASP vulnerabilities", "common web vulnerabilities", "exploitation patterns", or needs to understand how specific vulnerability classes work during whitebox security review.

  vuln-scout/skills/vuln-patterns/SKILL.md on GitHub (opens in a new tab)

• vulnerability-chains

  This skill should be used when the user asks about "vulnerability chains", "chained exploits", "multi-step attacks", "SSRF to RCE", "pivot attacks", or needs to identify how vulnerabilities in different components can be combined during whitebox security review.

  vuln-scout/skills/vulnerability-chains/SKILL.md on GitHub (opens in a new tab)

• Workspace Discovery

  This skill should be used when the user asks to "detect workspaces", "find packages", "list monorepo packages", "workspace structure", "monorepo analysis", or needs to identify workspace/package boundaries in a codebase for focused security analysis.

  vuln-scout/skills/workspace-discovery/SKILL.md on GitHub (opens in a new tab)

No skill matches that filter.

Similar skills

• ponytailby DietrichGebert Makes your AI agent think like the laziest senior dev in the room. The best code is the code you never wrote. 164k stars · 6 skills
• marketingskillsby coreyhaines31 Marketing skills for Claude Code and AI agents. CRO, copywriting, SEO, analytics, and growth engineering. 54.9k stars · 30 skills
• autoharnessby tigerless-labs Autoharness — a self-learning skill layer for Claude Code — distills skills from your real sessions, updates them as you work, and prunes t… 11.1k stars · 1 skill
• harnessby revfactory A meta-skill that designs domain-specific agent teams, defines specialized agents, and generates the skills they use. 9.2k stars · 2 skills
• universal-modderby rehan-remade Point Claude at any game. Skills, tools and the fal MCP that let Claude Code mod almost any PC game you own: recon, reverse engineering, fa… 7.9k stars · 9 skills
• terminal-browserby zenbu-labs A real browser inside your terminal 3.9k stars · 1 skill