Find the perfect skill
AI Prompt Safety Review
Security
Comprehensive analysis of AI prompts for security risks, bias, vulnerabilities, and effectiveness, with improvement recommendations.
CIS OpenShift 1.2.27 API Server Client CA
Security
Ensure the --client-ca-file argument is set appropriately on the OpenShift API server to enable TLS client certificate authentication. Part of CIS Red Hat OpenShift Benchmark v1.9.0.
Web Fuzzing with ffuf
Security
Skill for performing web fuzzing using the ffuf tool.
Regular Patching of RDS Systems
Security
Ensure RDS instances and database engines are regularly updated to address vulnerabilities, following CIS AWS Database Benchmark v2.0.0 control 3.8.
Cloud Log Forensics with AWS Athena
Security
Leverage AWS Athena to query CloudTrail, VPC Flow Logs, S3 access logs, and ALB logs for forensic investigations. Includes DDL for partition projection and SQL queries for detecting unauthorized access and data exfiltration.
Spring Authorization Server
Security
Quick reference for building OAuth 2.1 and OpenID Connect providers with Spring Authorization Server: configuration, client registration, and flows.
Security Audit Triage
Security
Map pentest reports and CVEs to code, classify findings with evidence, assess API risk, and get prioritized fix scope. Read-only analysis before security fixes.
Dependency Audit and Security
Security
Analyze dependencies for vulnerabilities, license compliance, and supply-chain risks. Provide fixes and upgrade paths.
Secure Environment Variable Management
Security
Secure environment variable management to prevent secret exposure in sessions, terminals, logs, or git commits.
Firebase APK Security Scanner
Security
Scans Android APKs for Firebase security misconfigurations including open databases, storage buckets, authentication issues, and exposed cloud functions. Use for authorized mobile security audits.
Cyberpunk Hacking Mini-Game
Security
Play a cyberpunk hacking mini-game where you must crack a 4-digit code.
Scan Specific MCP Skill
Security
Scan a specific MCP skill by npm package name or GitHub URL for security threats.