Навыков: 4 624. Сортировка по числу звёзд.
AI/LLM red-team assessment using the OWASP LLM Top 10 (2025) + OWASP AI Testing Guide (AITG v1, Nov 2025) frameworks, pl...
Identifying, assessing, and mitigating risks in AI systems including bias, safety, privacy, security, and ethical concer...
Apply the AI SAFE² framework (Sanitize & Isolate · Audit & Inventory · Fail-Safe & Recovery · Engage & Monitor · Evolve...
Implement safety guardrails, red-teaming, and alignment evaluation for AI systems
Use when assessing AI/ML systems for prompt injection, jailbreak vulnerabilities, model inversion risk, data poisoning e...
Use when scanning for security vulnerabilities: SAST, dependency audit, secret detection, and SBOM generation with OWASP...
Security engineering for LLM applications and AI agents: OWASP Top 10 for LLM Applications (2025), OWASP MCP Top 10 (Bet...
Use when attacking an AI/ML system or model — prompt injection & jailbreaks (Crescendo, Skeleton Key, Best-of-N), RAG/ve...
Strategy, writing, experiment organization, evidence validation, reproducible result plotting, LaTeX engineering, rebutt...
Find every way users can break your AI before they do. Use when you need to red-team your AI, test for jailbreaks, find...
Offensive AI security testing and exploitation framework. Systematically tests LLM applications for OWASP Top 10 vulnera...
Produces a comprehensive, ready-to-review AI acceptable use policy document customized to your industry, regulatory requ...
Adversarial security audit playbook for Plutus V3 Aiken DEX contracts (threat model, invariants, findings, tests, tx rep...
Operator skill: run local Aiken build/test commands and capture evidence for the audit. Manual invoke only.
AI/ML model security testing and adversarial research capabilities. Generate adversarial examples, test model robustness...
Use for LAN, Wi-Fi, device networking, IoT telemetry, HTTP, MQTT, WebSockets, RTSP, robotics networking, secure binding,...
Use for internet-facing infrastructure, DNS, TLS, certificates, reverse proxies, cloud or VPS IAM, containers, firewalls...
Standard Operating Procedures for authorized red-team penetration testing, blue-team security auditing, skill guardian v...
Embody Alan Watts - AI persona expert with integrated methodology skills
Scans Algorand smart contracts for 11 common vulnerabilities including rekeying attacks, unchecked transaction fees, mis...
Audit Alibaba Cloud RAM users, groups, roles, and policies; review STS token lifecycle and scope; assess Resource Direct...
Expert skill for Allianz Skill
Consume Alpaca Broker API real-time event streams over Server-Sent Events (SSE) — account status, journal, transfer/fund...
Runs a 13-agent deep research pipeline for rigorous academic work on any topic across 7 modes (full research, quick brie...
Run the pre-launch checklist via parallel fan-out to specialist personas, then synthesize a go/no-go decision
Soul-Bound Keys and Soulchain for persistent agent identity, reputation, and messaging. The identity primitive for the a...
Use when the user wants to audit Amazon returns or Amazon-billed subscriptions, mentions a restocking fee, short or deni...
Use ONLY when reviewing Pull Requests authored by OTHER PEOPLE (peer review). It focuses on generating code review obser...
Conducts an adversarial stress-test and premortem analysis on technical proposals, architectures, or features before imp...
Multi-layer virus scanning for Aminet packages. Signature-based detection, heuristic hunk analysis, boot block scanning,...
Use to triage/audit IDA binaries: suspicious behavior, crypto/network, multi-table queries.
Statically scans the entire local Power Pages codebase for performance anti-patterns — unpaginated Power Pages lists, we...
Use when Claude Code permissions have accumulated in settings.local.json and you want to audit, consolidate, or clean up...
Detect dangerous ACL misconfigurations in Active Directory using ldap3 to identify GenericAll, WriteDACL, and WriteOwner...
Perform static analysis of Android APK malware samples using apktool for decompilation, jadx for Java source recovery, a...
Queries Azure Monitor activity logs and sign-in logs via azure-monitor-query to detect suspicious administrative operati...
Monitor Certificate Transparency logs using crt.sh and Certstream to detect phishing domains, lookalike certificates, an...
<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
Analyzes implementation quality, technical debt, and architectural patterns in existing codebases. Use when conducting c...
Performs runtime mobile security exploration of iOS applications using Objection, a Frida-powered toolkit that enables s...
Parses Kubernetes API server audit logs (JSON lines) to detect exec-into-pod, secret access, RBAC modifications, privile...
Statically analyzes macOS Mach-O malware: parsing the header and load commands, handling fat/universal binaries, reading...
Use Sysinternals Autoruns to systematically identify and analyze malware persistence mechanisms across registry keys, sc...