.context

In the author's own words, from each skill's SKILL.md — showing the first 30 of 34 files.

• broken-access-control

  Replay captured requests with swapped identities and bumped object IDs to surface broken access control. Use when testing for IDOR or authz flaws.

  skills/applicative-pentest/broken-access-control/SKILL.md on GitHub (opens in a new tab)

• cdn-peek

  Uncover the real origin IP behind a CDN or WAF like Cloudflare, using only standard tools. Use to bypass a CDN/WAF or check if an origin leaks.

  skills/applicative-pentest/cdn-peek/SKILL.md on GitHub (opens in a new tab)

• http-request-smuggling

  Detect HTTP request smuggling by desynchronising front-end and back-end request parsing, using raw-socket timing and differential probes. Use when testing for HTTP desync (CL.TE, TE.CL).

  skills/applicative-pentest/http-request-smuggling/SKILL.md on GitHub (opens in a new tab)

• jwt-attacks

  Forge and re-sign captured JWTs to test signature validation - algorithm confusion (alg:none, RS256 to HS256), key injection, and secret cracking. Use when testing JWT or bearer-token auth.

  skills/applicative-pentest/jwt-attacks/SKILL.md on GitHub (opens in a new tab)

• ssrf-oob

  Prove blind SSRF by injecting an out-of-band callback into URL params and forwarding headers, then watching for the hit. Use when testing for SSRF.

  skills/applicative-pentest/ssrf-oob/SKILL.md on GitHub (opens in a new tab)

• webapp-probe

  Probe a web app for what it exposes or leaks - passively from captured traffic and actively against the target. Use to assess a web app's exposure or review Burp/ZAP history.

  skills/applicative-pentest/webapp-probe/SKILL.md on GitHub (opens in a new tab)

• blockchain-forensics

  Expert blockchain forensics assistant for investigators and auditors, including threat recognition, incident scoping, data collection, transaction tracking, chain analysis, attribution, OSINT, advanced demixing, cross-chain tracing, graph clustering, and reporting.

  skills/blockchain/blockchain-forensics/SKILL.md on GitHub (opens in a new tab)

• foundry-poc

  Generates a Foundry PoC for smart contracts that scientifically proves the path from no special privileges to funds lost. Focused on proof of concept for EVM using `forge test`.

  skills/blockchain/foundry-poc/SKILL.md on GitHub (opens in a new tab)

• safe-hunt

  Sweeps DeFi protocol Safe multisig wallets for governance misconfigurations and security weaknesses. Given a protocol name, Safe address, or "sweep all", fetches live config and tx history from the Safe Transaction Service API, scores each Safe against a finding pattern library, and produces an audit-ready ranked report. Use when auditing a protocol's admin controls, hunting for misconfigured mul…

  skills/blockchain/safe-hunt/SKILL.md on GitHub (opens in a new tab)

• smart-contract-audit

  Comprehensive smart contract security audit framework with multi-expert analysis. Use for full audits of Ethereum / EVM Solidity and Vyper, Solana / SVM Anchor Rust, TON / FunC / Tact, or Sui / Move projects.

  skills/blockchain/smart-contract-audit/SKILL.md on GitHub (opens in a new tab)

• cloud-bucket-brute

  Discover publicly readable cloud storage by permuting a company name into likely bucket names and probing AWS S3, Google Cloud, DigitalOcean, Alibaba, Oracle, and Vultr. Use to find exposed buckets.

  skills/cloud/cloud-bucket-brute/SKILL.md on GitHub (opens in a new tab)

• infrastructure-audit

  Comprehensive infrastructure security audit framework for IaC, Docker, Kubernetes, and cloud configurations. Use for full infrastructure audits.

  skills/cloud/infrastructure-audit/SKILL.md on GitHub (opens in a new tab)

• dylib-hijack-scan

  Scan macOS for hijackable dynamic libraries, separating exploitable privesc hijacks from harmless ones. Use to check if an app is hijackable.

  skills/defensive/dylib-hijack-scan/SKILL.md on GitHub (opens in a new tab)

• endpoint-threat-hunt

  Hunt a live macOS, Linux, or Windows endpoint for malware across process, network, and persistence. Use to scan for threats or check for compromise.

  skills/defensive/endpoint-threat-hunt/SKILL.md on GitHub (opens in a new tab)

• parse-security

  The last gate before untrusted instruction content is ingested. Screens a skill, goal or workflow fetched from git or any remote source for prompt injection, reading it as evidence rather than as instructions, on the assumption that its author wrote it to defeat this exact review. Use before installing, enabling, updating or reviewing any agent instruction content that did not come from the user…

  skills/defensive/parse-security/SKILL.md on GitHub (opens in a new tab)

• agent-onboarding

  Onboard yourself to a repo where several agents work in parallel, syncing through a shared TODO.md. Use when joining the team on a shared codebase.

  skills/generic-utils/agent-onboarding/SKILL.md on GitHub (opens in a new tab)

• context-window-to-skill

  Takes the active conversation as reference to understand how a skill can be created, with all the lessons learned from the user's needs in the conversation.

  skills/generic-utils/context-window-to-skill/SKILL.md on GitHub (opens in a new tab)

• git-commit

  Commit to Git safely: runs tests, security-reviews the diff, strips secrets and dead code, and enforces clean messages. Use before any commit or push.

  skills/generic-utils/git-commit/SKILL.md on GitHub (opens in a new tab)

• self-improve

  Audit the conversation and the project for what could have gone better, then turn the generalizable lessons into committed improvements in the repo that hosts this skill. Use at the end of a task or conversation where the agent needed correction, repeated work, or took a longer path than necessary.

  skills/generic-utils/self-improve/SKILL.md on GitHub (opens in a new tab)

• training-guide

  Build an interactive visual course as one self-contained HTML page, one idea per screen. Use to explain or teach a subject visually, step by step.

  skills/generic-utils/training-guide/SKILL.md on GitHub (opens in a new tab)

• variant-table

  Lay draft copy out as a table with three distinct rewrites per line and a top pick. Use to compare wording for posts, headlines, CTAs, or microcopy.

  skills/generic-utils/variant-table/SKILL.md on GitHub (opens in a new tab)

• audit-scope

  Draft a security-audit scope from GitHub repos or API access, with a protocol narrative and a sizing table. Use when scoping a new engagement.

  skills/hunter-utils/audit-scope/SKILL.md on GitHub (opens in a new tab)

• auditor-quiz

  Quiz an auditor on a codebase's mechanics and vulnerabilities, drawn from its own code and docs. Use to test understanding before or during a review.

  skills/hunter-utils/auditor-quiz/SKILL.md on GitHub (opens in a new tab)

• external-enumeration

  Passively map a company's domains, subdomains, DNS ownership, tech stack, and CDNs. Use to recon an external attack surface or enumerate subdomains.

  skills/hunter-utils/external-enumeration/SKILL.md on GitHub (opens in a new tab)

• gdocs-audit-report

  Write and format security-audit reports in Google Docs via the Docs API - findings, tables, and severity styling. Use to build or fix a report.

  skills/hunter-utils/gdocs-audit-report/SKILL.md on GitHub (opens in a new tab)

• hackerone-report

  Draft and file a HackerOne report in the browser, with a proof-of-concept package and demo-video notes. Use to submit or prepare a bug-bounty report.

  skills/hunter-utils/hackerone-report/SKILL.md on GitHub (opens in a new tab)

• nuclei-suggest

  Browse the nuclei-templates library, recommend a scoped template set for a given stack, target, or CVE, then run it against an authorized target and report findings.

  skills/hunter-utils/nuclei-suggest/SKILL.md on GitHub (opens in a new tab)

• pre-bounty

  Map a bug-bounty scope and rank targets by payout, crowding, and freshness. Use to size up a program or decide where to hunt before committing time.

  skills/hunter-utils/pre-bounty/SKILL.md on GitHub (opens in a new tab)

• sandboxed-audit-runner

  Wrap the session in the Anthropic Sandbox Runtime before touching untrusted code. Use before running any audit skill on a codebase you do not trust.

  skills/hunter-utils/sandboxed-audit-runner/SKILL.md on GitHub (opens in a new tab)

• tiny-auditor

  Audit codebase to uncover critical issues explicitly without false positives

  skills/hunter-utils/tiny-auditor/SKILL.md on GitHub (opens in a new tab)

No skill matches that filter.

Similar skills

• ui-ux-pro-max-skillby nextlevelbuilder An AI skill that provides design intelligence for building professional UI/UX across multiple platforms. 136k stars · 7 skills
• SkillSpectorby NVIDIA Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and… 20.3k stars · 27 skills
• cangjie-skillby kangarooking 把书、长视频、播客等高价值内容蒸馏成可执行的 Agent Skills（Distill high-value content from books, long-form videos, podcasts, and more into executable Agent Skill… 11.4k stars · 21 skills
• claude-code-ultimate-guideby FlorianBruniaux The most comprehensive Claude Code guide: agentic workflows, hooks, skills, MCP servers, quizzes, and production-ready templates. 430K+ lin… 6.2k stars · 28 skills
• Claude-BugHunterby elementalsouls A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curated… 5.1k stars · 30 skills
• superpowersby obra An agentic skills framework & software development methodology that works. 300k stars · 15 skills