Security Skills
Discover the best AI skills in the Security category.
178 skills
Security Audit Scanner
Security
Analyzes code to detect OWASP Top 10 vulnerabilities.
OWASP Security Checklist
Security
Generates application security checklists based on the OWASP Top 10.
Threat Model Generator
Security
Generates threat model documents with STRIDE analysis.
Implementing Secure Multi-Party Computation
Security
Implementation guide for secure multi-party computation enabling privacy-preserving analytics across organizations. Covers secret sharing, garbled circuits, frameworks like MP-SPDZ, and GDPR alignment.
Dependency Vulnerability Scanning
Security
Scans project dependencies across ecosystems to identify known vulnerabilities, generates SBOMs, and suggests automated remediation. Helps during security audits or for supply chain compliance and risk assessment.
Broken Object Level Authorization (BOLA/IDOR)
Security
Use when hunting Broken Object Level Authorization (BOLA) or Insecure Direct Object Reference (IDOR) vulnerabilities in APIs or web applications.
Regularly Patch RDS Database Systems
Security
Ensure that Amazon RDS database instances are regularly updated and patched to address security vulnerabilities and maintain system integrity.
Malware Static Analysis
Security
Perform static analysis and triage of suspicious files without execution. Extract hashes, strings, metadata, PE/ELF headers, URLs, and indicators.
Writing a Malware Analysis Report
Security
Structures a clear, actionable malware analysis report covering summary, sample identity, capabilities, IOCs, ATT&CK mapping, and detection guidance.
Vulnerability Scanning with Tekton and Trivy
Security
Generate a Tekton Task that uses Trivy to scan a container image for critical and high vulnerabilities, failing the pipeline if any are found. The task takes the image name as a parameter and runs the trivy command with exit code 1. Useful for integrating vulnerability scanning into CI/CD pipelines built with Tekton.
SSRF Detection and Exploitation
Security
Detects and exploits Server-Side Request Forgery (SSRF) vulnerabilities. Use when the target has URL parameters, remote file loading, webhooks, PDF generation, or URL preview features. It can probe internal networks, read local files via file protocol, attack internal services like Redis, and access cloud metadata endpoints (AWS, GCP, Azure, etc.).
Python Jail Escape
Security
Techniques to escape Python sandbox restrictions. Use in restricted eval/exec environments, sandbox escapes, or jail challenges.