Find the perfect skill
Create Skill from Custom Approach
Security
Guide to save a successful custom security testing approach as a reusable skill, including steps for parameter definition, pattern extraction, and file creation.
Set root Ownership of BIND Config Files
Security
Ensure that all BIND configuration files are owned by root, except runtime files. This CIS benchmark audit and remediation helps prevent unauthorized modifications.
Regular Patching of RDS Systems
Security
Ensure RDS instances and database engines are regularly updated to address vulnerabilities, following CIS AWS Database Benchmark v2.0.0 control 3.8.
Export NIST OSCAL
Security
Export NIST OSCAL JSON from compliance evidence in ArangoDB graph. Supports NIST 800-171 and CMMC L2.
Python Sandbox Escape
Security
Provides techniques to escape restricted Python eval/exec environments, including basic command execution, class hierarchy traversal, and keyword bypasses using encoding or concatenation. Useful for penetration testing and CTF challenges involving Python jails or sandbox restrictions.
Scan MCP Skill
Security
Scan a specific MCP skill by npm package name or GitHub URL for security threats.
Scan a specific MCP skill
Security
Scan a specific npm package or GitHub URL for security issues in MCP skills.
NIST OSCAL JSON Export
Security
Export NIST OSCAL JSON compliance evidence from an ArangoDB graph. Supports NIST 800-171 and CMMC Level 2 frameworks.
Security Logging and Monitoring Failures Check
Security
Detects missing security event logs, logged secrets, and log injection. Use when writing logging code, audit trails, or any security-relevant events.
MEV Security
Security
Guide for MEV concepts, common attacks, mitigations, and how to organize MEV-related resources in README.md.
Perform Cryptographic Audit of Application
Security
Systematically review an application's use of cryptography to identify vulnerabilities like weak algorithms, hardcoded keys, and protocol misconfigurations.
Scan Specific MCP Skill
Security
Scan a specific MCP skill by npm package name or GitHub URL for security threats.