Навыков: 4 624. Сортировка по числу звёзд.
Use this when auditing Spotify or Apple Music playlists for fake streams, botted networks, or curator red flags. Protect...
Normative sufficiency conditions for Initial Boundary Conditions (IBCs) and the SOP for the cheap-tier boundary refineme...
Use during the testing phase of a web application bug bounty. Provides OWASP-aligned attack catalog, payload sources, an...
Configure Better Route 1.1 audit events and safe enrichment. Use when logging route outcomes, authenticated identity, ha...
Use Better Route 1.1 cryptographic helpers for secure random tokens, Hex/Base64/Base64URL encoding, strict Base64URL dec...
Configure Better Route 1.1 HMAC authentication for webhooks and server-to-server REST requests. Use when signing request...
Configure better-route 1.1 Resource action and field authorization. Use for ResourcePolicy::publicReadPrivateWrite, admi...
Resolve design decisions before implementation when requirements, contracts, or product trade-offs need clarification; s...
Amazon brand protection toolkit. Detect hijackers, counterfeits, and unauthorized sellers. Includes MAP violation monito...
eBay brand protection toolkit. Detect unauthorized sellers, counterfeits, and VeRO violations. Includes price monitoring...
Shopify/DTC brand protection toolkit. Detect counterfeit stores, unauthorized resellers, and trademark violations. Inclu...
TikTok Shop brand protection toolkit. Detect unauthorized sellers, counterfeit products, and affiliate abuse. Includes T...
Designing red team attack scenarios, threat models, MITRE ATT&CK/OWASP application, Purple Team exercises, and AI/LLM re...
Conducts structured post-breach remediation using a lessons learned framework covering root cause remediation, control g...
Banking interface for AI bots and automation. Get a bank account, issue a Mastercard, buy and sell crypto, send payments...
Security testing skill for A01:2025 Broken Access Control — the #1 OWASP risk for two consecutive cycles. Use this skill...
Detects missing ownership checks, broken role enforcement, and IDOR vulnerabilities that let users access other users' r...
Probe a site's authentication flow for redirect leaks, missing CSRF, weak session cookies, and OAuth misconfiguration; p...
Interact with the Binarly Transparency Platform (BTP) via CLI commands for uploading firmware, running scans, downloadin...
Adversarial hunt for reachable correctness, security, concurrency, persistence, and reliability bugs in code or diffs. U...
Bug bounty report triage, validation, and severity escalation. Use when the user provides a bug bounty report to validat...
Specialist bug and weakness hunter for any codebase: logic errors, edge cases, error handling, races, data integrity, co...
Write Bugcrowd-format reports — VRT (Vulnerability Rating Taxonomy) mapping, P1-P5 severity, impact-led writing, and Bug...
Bugcrowd-specific reporting tactics complementing report-writing: VRT category search-and-fallback strategy when no exac...
Turn a finished or nearly finished Skill, plugin, repository, micro-tool, research utility, or AI project into a credibl...
<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
This skill covers deploying Microsoft Sentinel as a cloud-native SIEM and SOAR platform for centralized security operati...
Implement a vulnerability aging dashboard and SLA tracking system to measure remediation performance against severity-ba...
Build a vulnerability exception and risk acceptance tracking system with approval workflows, compensating controls docum...
Builds a structured vulnerability scanning workflow using tools like Nessus, Qualys, and OpenVAS to discover, prioritize...
Use when implementing Kubernetes security patterns including RBAC, NetworkPolicies, Pod Security Standards, secrets mana...
Burp Suite Professional is an HTTP interception proxy with numerous security testing features. Use when testing web appl...
This skill should be used when the user asks to "intercept HTTP traffic", "modify web requests", "use Burp Suite for tes...
Execute comprehensive web application security testing using Burp Suite's integrated toolset, including HTTP traffic int...
Web application security testing using BurpSuite for proxy-based interception, scanning, and manual penetration testing...
Comprehensive business-logic blueprint for SaaS, ERP, e-commerce, and marketplace applications. Walks through every doma...
Hunt business logic flaws — race conditions, workflow state bypass, parameter pollution affecting logic, coupon/discount...
Application-level business logic security testing for any domain. Takes an understanding-first approach: map the intende...
Identify business-logic vulnerabilities that bypass intended workflows including race conditions, TOCTOU, double-spendin...
Crypto-native security scanner for Claude Code agent configurations. Scans for exposed private keys, insecure RPC endpoi...
Discovering and accessing unprotected pages, APIs, and administrative interfaces by enumerating URLs and bypassing authe...
Search for raw byte patterns (hex sequences, opcodes) in binary code. Use when looking for specific instruction sequence...