Find the perfect skill
BREAK Business Risk Enumeration & Avoidance Knowledge
Security
Query a knowledge base of business security risks, avoidance techniques, attack tools, threat actors, and real cases. Supports ID, keyword, and question-based search via a Bash script.
Firebase APK Security Scanner
Security
Scans Android APKs for Firebase misconfigurations: open databases, storage, auth issues, and cloud functions. For authorized security testing.
Containerized Security Auditing & Ethical Hacking
Security
Containerized security auditing and ethical hacking tools. All operations run in isolated Docker containers for safety.
API Gateway Access Log Analysis
Security
Detect API attacks like BOLA, credential scanning, and injection from gateway access logs using Python analysis.
Safety Audit
Security
Audit unsafe Rust code for memory safety, FFI lifetime violations, leaks, and Vulkan spec compliance.
Scan Specific MCP Skill
Security
Scans a specific MCP skill by npm package name or GitHub URL for security threats, providing plain-language consequences.
OSCAL Compliance Export
Security
Exports compliance evidence as NIST OSCAL JSON (NIST 800-171, CMMC L2) from an ArangoDB graph database, with validation and dry-run support.
Ensure service-account-private-key-file is set
Security
Ensure that the --service-account-private-key-file argument is set as appropriate for the controller manager in OpenShift, per CIS benchmark.
Eric Zimmerman Tools for Windows Artifact Analysis
Security
Learn to analyze Windows artifacts using Eric Zimmerman's open-source tools (KAPE, MFTECmd, PECmd) to examine registry hives, prefetch files, and event logs.
Windsurf Audit Logging
Security
Configure comprehensive audit logging for Windsurf Enterprise deployments to ensure compliance with SOC 2, ISO 27001, HIPAA, and more.
Testing for Broken Access Control
Security
Systematically testing web applications for broken access control vulnerabilities including privilege escalation, missing function-level checks, and insecure direct object references.
Scan Specific MCP Skill
Security
Analyze a specific MCP skill package for security threats using the ATR engine.