Updated 3mo ago
by instavm
security-skills
4000 security reports transformed to Skills you can use with Claude Code / Gemini CLI etc
88 GitHub stars (88)
+1 in 30 days
| Period | New stars |
|---|---|
| Oct 1 | 0 |
| Oct 2 | 0 |
| Oct 3 | 0 |
| Oct 4 | 0 |
| Oct 5 | 0 |
| Oct 6 | 0 |
| Oct 7 | 0 |
| Oct 8 | 0 |
| Oct 9 | 0 |
| Oct 10 | 0 |
| Oct 11 | 0 |
| Oct 12 | 0 |
| Oct 13 | 0 |
| Oct 14 | −1 |
| Oct 15 | 0 |
| Oct 16 | 0 |
| Oct 17 | 0 |
| Oct 18 | 0 |
| Oct 19 | 0 |
| Oct 20 | 0 |
| Oct 21 | 0 |
| Oct 22 | 0 |
| Oct 23 | 0 |
| Oct 24 | 0 |
| Oct 25 | 0 |
| Oct 26 | +1 |
| Oct 27 | 0 |
| Oct 28 | 0 |
| Oct 29 | 0 |
| Oct 30 | 0 |
| Oct 31 | 0 |
| Nov 1 | 0 |
| Nov 2 | 0 |
| Nov 3 | +1 |
| Nov 4 | 0 |
| Nov 5 | 0 |
| Nov 6 | 0 |
- 17 skills (17 skills found in its SKILL.md files)
- 12 forks (12 forks)
- 3mo ago last update (Last updated 3mo ago)
Install
Skills CLI
npx skills add instavm/security-skills
Asks which skills and agents to install. Just one: npx skills add instavm/security-skills --skill mitm-find-auth — add -g for every project.
Claude Code
git clone https://github.com/instavm/security-skillscp -r "security-skills/skills/mitm-find-auth" ~/.claude/skills/
Copies the mitm-find-auth skill into ~/.claude/skills/ for every project (use .claude/skills/ for one project). Repeat for the other skills listed below.
Plugin
/plugin marketplace add instavm/security-skills
Run inside Claude Code if the repository ships a plugin marketplace, then pick plugins from /plugin.
Skills can run code on your machine — read the SKILL.md first.
What it does
In the author's own words, from each skill's SKILL.md.
-
mitm-find-auth
Find authentication and session vulnerabilities. Use when user asks about auth bypass, session issues, login security, or token problems.
skills/mitm-find-auth/ on GitHub (opens in a new tab)SKILL.md -
mitm-find-bizlogic
Find Business Logic vulnerabilities in captured traffic. Use when user asks about payment bypass, race conditions, workflow abuse, or application logic flaws.
skills/mitm-find-bizlogic/ on GitHub (opens in a new tab)SKILL.md -
mitm-find-callback
Find payment callback and webhook vulnerabilities. Use when user asks about payment security, callback tampering, hash validation, or transaction manipulation.
skills/mitm-find-callback/ on GitHub (opens in a new tab)SKILL.md -
mitm-find-checksum
Find checksum and signature vulnerabilities. Use when user asks about hash validation, signature bypass, checksum manipulation, or cryptographic weaknesses.
skills/mitm-find-checksum/ on GitHub (opens in a new tab)SKILL.md -
mitm-find-enumerable
Find enumerable endpoints that leak data through iteration. Use when user asks about data scraping, bulk data access, or iterating through records.
skills/mitm-find-enumerable/ on GitHub (opens in a new tab)SKILL.md -
mitm-find-idor
Find IDOR (Insecure Direct Object Reference) vulnerabilities in captured traffic. Use when user asks about authorization issues, sequential IDs, or accessing other users' data.
skills/mitm-find-idor/ on GitHub (opens in a new tab)SKILL.md -
mitm-find-insecure
Find insecure configurations in HTTP traffic. Use when user asks about security headers, cookie security, CORS issues, or transport security.
skills/mitm-find-insecure/ on GitHub (opens in a new tab)SKILL.md -
mitm-find-otp
Find OTP implementation vulnerabilities. Use when user asks about OTP security, verification bypass, SMS security, or two-factor authentication issues.
skills/mitm-find-otp/ on GitHub (opens in a new tab)SKILL.md -
mitm-find-pii
Find PII (Personally Identifiable Information) leakage in API responses. Use when user asks about data exposure, privacy issues, or sensitive data in traffic.
skills/mitm-find-pii/ on GitHub (opens in a new tab)SKILL.md -
mitm-find-referer
Find Referer header leakage vulnerabilities. Use when user asks about URL leakage, third-party data exposure, or sensitive data in headers.
skills/mitm-find-referer/ on GitHub (opens in a new tab)SKILL.md -
mitm-find-secrets
Find leaked secrets, API keys, and credentials in traffic. Use when user asks about exposed keys, hardcoded secrets, or credential leakage.
skills/mitm-find-secrets/ on GitHub (opens in a new tab)SKILL.md -
mitm-find-sqli
Find SQL Injection vulnerabilities in captured traffic. Use when user asks about database security, injection attacks, or data extraction.
skills/mitm-find-sqli/ on GitHub (opens in a new tab)SKILL.md -
mitm-find-ssrf
Find SSRF (Server-Side Request Forgery) vulnerabilities in captured traffic. Use when user asks about URL fetching, webhooks, integrations, or internal network access.
skills/mitm-find-ssrf/ on GitHub (opens in a new tab)SKILL.md -
mitm-list-apis
List all APIs from mitmproxy traffic capture. Use when user asks to see APIs, endpoints, or wants an overview of captured HTTP traffic for a website or app.
skills/mitm-list-apis/ on GitHub (opens in a new tab)SKILL.md -
mitm-report
Generate a security vulnerability report. Use when user asks for a report, summary of findings, or formatted vulnerability documentation.
skills/mitm-report/ on GitHub (opens in a new tab)SKILL.md -
mitm-security-audit
Comprehensive security audit of mitmproxy traffic. Use when user wants to analyze captured HTTP traffic for vulnerabilities, or mentions pentesting, security testing, or vulnerability assessment.
skills/mitm-security-audit/ on GitHub (opens in a new tab)SKILL.md -
mitm-subdomains
Enumerate subdomains from captured traffic. Use when user asks about subdomain discovery, attack surface mapping, or domain reconnaissance.
skills/mitm-subdomains/ on GitHub (opens in a new tab)SKILL.md
No skill matches that filter.
Review before you install
A skill is a set of instructions and scripts your agent will follow, and it can run code on your machine. Read the SKILL.md and any scripts first — this listing is not a security review.
Similar skills
-
reaby morluto Reverse engineer anything with agents, from app behavior down to native binaries.
-
ECCby affaan-m The agent harness performance optimization system. Skills, instincts, memory, security, and research-first development for Claude Code, Cod…
-
andrej-karpathy-skillsby multica-ai A single CLAUDE.md file to improve Claude Code behavior, derived from Andrej Karpathy's observations on LLM coding pitfalls.
-
ponytailby DietrichGebert Makes your AI agent think like the laziest senior dev in the room. The best code is the code you never wrote.
-
difyby langgenius Build Agentic workflows, RAG pipelines, with rich AI model and tool support on one collaborative workspace. Deploy on cloud, VPC, or self-h…
-
ui-ux-pro-max-skillby nextlevelbuilder An AI skill that provides design intelligence for building professional UI/UX across multiple platforms.