Find the perfect skill
Testing for Broken Access Control
Security
Systematically test web applications for broken access control vulnerabilities including privilege escalation and insecure direct object references.
Slack Channel Access Control
Security
Manage Slack channel access control for Claude Code sessions: approve pairing codes, set DM policy, maintain allowlist, and opt channels in or out.
Scan a Specific MCP Skill
Security
Security audit of a single MCP package by npm name or GitHub URL, with plain-language findings.
Security Analyzer
Security
Comprehensive security vulnerability analysis for codebases and infrastructure. Scans dependencies, containers, cloud IaC, and detects secrets exposure. Fetches live CVE data, calculates risk scores, and generates phased remediation plans.
Firebase APK Security Scanner
Security
Scans Android APKs for Firebase misconfigurations like open databases, storage, auth issues, and exposed cloud functions. For authorized security research only.
Vercel Enterprise RBAC
Security
Configure Vercel enterprise SSO, role-based access control, and organization management. Implement SAML/OIDC integration and permission middleware.
Pre-Install Package Verification
Security
Verifies the existence and reputation of packages before installation. Prevents slop-squatting attacks by checking registries and blocking suspicious packages.
Web Fuzzing with ffuf
Security
Skill for performing web fuzzing using the ffuf tool.
Security PR Reviewer
Security
Security-focused review of an actual diff (PR, branch, commit): hunts authn/authz gaps, injection, secrets, SSRF, mass assignment, and reports severity-ranked findings with evidence and remediation.
Containerized Security & Ethical Hacking
Security
Security auditing and ethical hacking tools running in isolated Docker containers. Enables network scanning, static analysis, and controlled exploit execution.
OWASP Security Checker
Security
Audit code against OWASP Top 10 vulnerabilities including XSS, SQL injection, CSRF, and authentication flaws.
Shannon: Autonomous AI Pentester
Security
Autonomous AI pentester for web apps and APIs. Analyzes source code, identifies attack vectors, and executes real exploits to prove vulnerabilities.