Updated 2mo ago
by instavm
security-skills
4000 security reports transformed to Skills you can use with Claude Code / Gemini CLI etc
86 GitHub stars (86)
| Period | New stars |
|---|---|
| Oct 1 | 0 |
| Oct 2 | 0 |
| Oct 3 | 0 |
| Oct 4 | 0 |
| Oct 5 | 0 |
| Oct 6 | 0 |
| Oct 7 | 0 |
| Oct 8 | 0 |
| Oct 9 | 0 |
| Oct 10 | 0 |
| Oct 11 | 0 |
| Oct 12 | 0 |
| Oct 13 | 0 |
| Oct 14 | −1 |
| Oct 15 | 0 |
| Oct 16 | 0 |
- 17 skills (17 skills found in its SKILL.md files)
- 12 forks (12 forks)
- 2mo ago last update (Last updated 2mo ago)
Install
Skills CLI
npx skills add instavm/security-skills
Asks which skills and agents to install. Just one: npx skills add instavm/security-skills --skill mitm-find-auth — add -g for every project.
Claude Code
git clone https://github.com/instavm/security-skillscp -r "security-skills/skills/mitm-find-auth" ~/.claude/skills/
Copies the mitm-find-auth skill into ~/.claude/skills/ for every project (use .claude/skills/ for one project). Repeat for the other skills listed below.
Plugin
/plugin marketplace add instavm/security-skills
Run inside Claude Code if the repository ships a plugin marketplace, then pick plugins from /plugin.
Skills can run code on your machine — read the SKILL.md first.
What it does
In the author's own words, from each skill's SKILL.md.
-
mitm-find-auth
Find authentication and session vulnerabilities. Use when user asks about auth bypass, session issues, login security, or token problems.
skills/mitm-find-auth/SKILL.md on GitHub (opens in a new tab) -
mitm-find-bizlogic
Find Business Logic vulnerabilities in captured traffic. Use when user asks about payment bypass, race conditions, workflow abuse, or application logic flaws.
skills/mitm-find-bizlogic/SKILL.md on GitHub (opens in a new tab) -
mitm-find-callback
Find payment callback and webhook vulnerabilities. Use when user asks about payment security, callback tampering, hash validation, or transaction manipulation.
skills/mitm-find-callback/SKILL.md on GitHub (opens in a new tab) -
mitm-find-checksum
Find checksum and signature vulnerabilities. Use when user asks about hash validation, signature bypass, checksum manipulation, or cryptographic weaknesses.
skills/mitm-find-checksum/SKILL.md on GitHub (opens in a new tab) -
mitm-find-enumerable
Find enumerable endpoints that leak data through iteration. Use when user asks about data scraping, bulk data access, or iterating through records.
skills/mitm-find-enumerable/SKILL.md on GitHub (opens in a new tab) -
mitm-find-idor
Find IDOR (Insecure Direct Object Reference) vulnerabilities in captured traffic. Use when user asks about authorization issues, sequential IDs, or accessing other users' data.
skills/mitm-find-idor/SKILL.md on GitHub (opens in a new tab) -
mitm-find-insecure
Find insecure configurations in HTTP traffic. Use when user asks about security headers, cookie security, CORS issues, or transport security.
skills/mitm-find-insecure/SKILL.md on GitHub (opens in a new tab) -
mitm-find-otp
Find OTP implementation vulnerabilities. Use when user asks about OTP security, verification bypass, SMS security, or two-factor authentication issues.
skills/mitm-find-otp/SKILL.md on GitHub (opens in a new tab) -
mitm-find-pii
Find PII (Personally Identifiable Information) leakage in API responses. Use when user asks about data exposure, privacy issues, or sensitive data in traffic.
skills/mitm-find-pii/SKILL.md on GitHub (opens in a new tab) -
mitm-find-referer
Find Referer header leakage vulnerabilities. Use when user asks about URL leakage, third-party data exposure, or sensitive data in headers.
skills/mitm-find-referer/SKILL.md on GitHub (opens in a new tab) -
mitm-find-secrets
Find leaked secrets, API keys, and credentials in traffic. Use when user asks about exposed keys, hardcoded secrets, or credential leakage.
skills/mitm-find-secrets/SKILL.md on GitHub (opens in a new tab) -
mitm-find-sqli
Find SQL Injection vulnerabilities in captured traffic. Use when user asks about database security, injection attacks, or data extraction.
skills/mitm-find-sqli/SKILL.md on GitHub (opens in a new tab) -
mitm-find-ssrf
Find SSRF (Server-Side Request Forgery) vulnerabilities in captured traffic. Use when user asks about URL fetching, webhooks, integrations, or internal network access.
skills/mitm-find-ssrf/SKILL.md on GitHub (opens in a new tab) -
mitm-list-apis
List all APIs from mitmproxy traffic capture. Use when user asks to see APIs, endpoints, or wants an overview of captured HTTP traffic for a website or app.
skills/mitm-list-apis/SKILL.md on GitHub (opens in a new tab) -
mitm-report
Generate a security vulnerability report. Use when user asks for a report, summary of findings, or formatted vulnerability documentation.
skills/mitm-report/SKILL.md on GitHub (opens in a new tab) -
mitm-security-audit
Comprehensive security audit of mitmproxy traffic. Use when user wants to analyze captured HTTP traffic for vulnerabilities, or mentions pentesting, security testing, or vulnerability assessment.
skills/mitm-security-audit/SKILL.md on GitHub (opens in a new tab) -
mitm-subdomains
Enumerate subdomains from captured traffic. Use when user asks about subdomain discovery, attack surface mapping, or domain reconnaissance.
skills/mitm-subdomains/SKILL.md on GitHub (opens in a new tab)
No skill matches that filter.
Review before you install
A skill is a set of instructions and scripts your agent will follow, and it can run code on your machine. Read the SKILL.md and any scripts first — this listing is not a security review.
Similar skills
-
ECCby affaan-m The agent harness performance optimization system. Skills, instincts, memory, security, and research-first development for Claude Code, Cod…
-
reaby morluto Reverse engineer anything with agents, from app behavior down to native binaries.
-
andrej-karpathy-skillsby multica-ai A single CLAUDE.md file to improve Claude Code behavior, derived from Andrej Karpathy's observations on LLM coding pitfalls.
-
ponytailby DietrichGebert Makes your AI agent think like the laziest senior dev in the room. The best code is the code you never wrote.
-
ui-ux-pro-max-skillby nextlevelbuilder An AI skill that provides design intelligence for building professional UI/UX across multiple platforms.
-
graphifyby Graphify-Labs Turn any codebase, with its docs, SQL schemas, configs, and PDFs, into a queryable knowledge graph. A /graphify skill for Claude Code, Curs…