Навыков: 4 624. Сортировка по числу звёзд.
Detect, analyze, and remediate OWASP A10:2025 — Mishandling of Exceptional Conditions in Python web applications (FastAP...
Identifies critical clauses and protections that should be in a contract but are missing, with urgency ratings and ready...
Use when the user runs /mithrandir, /mithrandir branch, /mithrandir <url>, /mithrandir comment <url>, or /mithrandir ble...
MITRE ATT&CK framework mapping and analysis
Use when answering factual or explanatory questions about the current project — codebase, architecture, conventions, wor...
Chief Security Officer mode. Infrastructure-first security audit: secrets archaeology, dependency supply chain, CI/CD pi...
Pack an EXTERNAL repository into a single AI-friendly file (markdown/xml/json). Use for third-party library analysis, se...
Multi-pass structural code review with adversarial analysis, scope-aware dispatch, adversarial persona passes, and force...
Reviews a GitHub PR with a single shallow correctness/security/breaking/AI-slop checklist and emits a verdict; optionall...
Validates an approved plan against 8 dimensions before Phase 3 begins. Catches incomplete acceptance criteria, missing d...
Enterprise-grade security expertise with production-ready patterns for OWASP Top 10 2021, zero-trust architecture, threa...
OWASP Top 10, SAST/DAST, dependency security, and secrets management.
Auth0 security specialist covering attack protection, multi-factor authentication, token security, sender constraining,...
Firebase Authentication specialist covering Google ecosystem, social auth, phone auth, and mobile-first patterns. Use wh...
REST/GraphQL API design patterns, error handling conventions, and input validation reference for backend development. Ag...
Cross-model audit convergence reference for the plan-auditor and sync-auditor agents. Documents how to invoke the `audit...
OWASP Top 10 security checklist, authentication patterns, input validation, and HTTP security headers reference. Agent-e...
Search-visibility and crawlability reference for web output: canonical URL discipline, per-page title and meta descripti...
Software supply-chain defensive security reference: SBOM generation and verification (SPDX / CycloneDX), dependency-conf...
Enterprise Skill for advanced development
SAST/DAST/SCA automation, CI/CD security pipelines, vulnerability management
Enterprise Encryption Security with AI-powered cryptographic architecture, Context7 integration, and intelligent encrypt...
Encryption patterns - AES-GCM, RSA, password hashing, envelope encryption
Android and iOS application security testing — static and dynamic analysis, APK/IPA inspection, OWASP MASVS/MASTG verifi...
Assess an Android app (static + dynamic). Load when the target is an APK/AAB, a mobile bug-bounty scope, or "test the an...
Reverse an Android APK end-to-end — jadx/apktool unpacking, manifest and smali analysis, rebuild-sign-install patching,...
Use when reviewing iOS (Swift), Android (Kotlin) or Flutter changes - token storage, ATS and cleartext config, TLS trust...
Mobile (Android) app recon and analysis — decompile APK, extract secrets, find hardcoded endpoints, exposed Firebase / A...
Mobile application security skill for implementing OWASP MASVS compliance, secure storage, certificate pinning, biometri...
<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
Guide for mobile game security on Android and iOS platforms. Use this skill when working with Android/iOS reverse engine...
Reverses and exploits mobile applications. Use when working with Android APK files, iOS IPA files, mobile app reversing,...
Expert in secure mobile coding practices specializing in input validation, WebView security, and mobile-specific securit...
Run a complete mobile application security assessment of an Android APK/AAB, iOS IPA, or their source, covering manifest...
Deploy a Modal function from a local Python file
List deployed Modal functions in the current workspace
Invoke a deployed Modal function with JSON arguments
Audits model-serving APIs, administrative and debug surfaces, vector stores, object storage, caches, workload identity,...
Secure the AI model supply chain with artifact signing, provenance attestation, SBOM workflows, dependency controls, and...
Security scanner for Moltbot skills. Scan GitHub repositories for vulnerabilities before installation.
Send real physical postcards anywhere in the world. Pay with x402 (USDC on Base), Stripe, or manual USDC transfer. No si...
Security audit - Scan for vulnerabilities and security issues (monggle)