Навыков: 4 624. Сортировка по числу звёзд.
Run TimerMeet's security checks (bandit static analysis, pip-audit dependency scan) and review the hardening checklist b...
Convert a datetime between two IANA timezone identifiers
Security auditing and hardening for OpenClaw and system infrastructure.
Expert TISAX (Trusted Information Security Assessment Exchange) advisor for the automotive supply chain — the ENX/VDA as...
Develop lightweight native Python desktop utilities and tool dialogs using standard library Tkinter and ttk.
Configure TLS 1.3 cipher suites, zero-round-trip handshakes (0-RTT), X.509 certificate chains, and OCSP stapling.
Use when assessing the TLS configuration of a service you own or are authorized to test, or when decrypting your own cap...
Trail of Bits security skills analysis for Solidity contracts. Use for deep smart contract security review with invarian...
Analyze ERC20/ERC721/ERC1155 token implementations for non-standard behavior, fee-on-transfer mechanics, rebasing logic,...
On-chain token analysis — holder distribution, smart money tracking, risk scoring.
Score any crypto token using Buzz's 11-rule scoring engine. Zero LLM cost — pure rule-based analysis across liquidity, v...
Token security audit via GoPlus API
Use when the user wants to audit TON smart contracts for security vulnerabilities, scan FunC or Tact contracts for messa...
Use when a script worked and should outlive the session that wrote it.
Use when implementing authentication with Better Auth in a TypeScript/Next.js app (session strategy, providers, cookies,...
Design robust tool definitions, parameter schemas, error handling, and execution safety for tool-using LLMs.
Comprehensive guide to implementing permission systems for AI agent tools including RBAC, approval workflows, and securi...
Audit whether AEOS code and playbooks enforce Tool Router for every external action. Use when the user requests tool rou...
Review an agentic AI system for insecure tool calling, unsafe code or shell execution, excessive permissions, confirmati...
Audits and manages user access permissions across cloud services, SaaS applications, and internal systems to enforce lea...
Route an offensive or security-testing task to the one tool skill that fits it — Active Directory, web, reconnaissance,...
Drive Burp Suite for web/API testing — proxy history triage, Repeater, Intruder enumeration, Collaborator OOB, active sc...
Fuzz web targets with ffuf for content, parameter, and vhost discovery — FUZZ keyword placement in paths, query strings,...
Crack password hashes offline with hashcat (GPU) and John the Ripper (CPU) — hash-mode selection, attack modes (straight...
Expose CLI security tools to an AI agent through MCP servers — mcp-kali-server generic terminal bridge, MetasploitMCP, p...
Load this skill whenever the project contains tooltip components, hover- triggered informational popups, title attribute...
This skill should be used when the user asks to "identify web application vulnerabilities", "explain common security fla...
Provide a comprehensive, structured reference for the 100 most critical web application vulnerabilities organized by cat...
Run trace-mcp security, quality-gate, and antipattern checks before committing or opening a PR. Activate when the agent...
Run traceable Git workflows for an explicit invocation of this skill, checkpoint/baseline, consolidation/recovery, harde...
Preventive audit of conversion tracking across all configured ad platforms — Meta pixels + CAPI, Google Ads conversion a...
Letter of Credit & Trade Auditor. Scans bank LCs, bills of lading, and shipping manifests to eliminate discrepancy rejec...
Understand how the major bug-bounty platforms differ — scope rules, disclosure, triage, and reputation — so you play eac...
Structure and discipline for complex, multi-stage targets — where the path is a chain of several bugs across multiple ho...
Establish and enforce the authorization envelope before any testing — the scope rule that governs everything. Load FIRST...
Builds and queries multi-language source code graphs for security analysis. Includes pre-analysis passes for blast radiu...
Performs graph-assisted triage of a single security finding, SARIF result, weAudit annotation, suspicious function, or r...
Runs a Trailmark structural review gate over a branch, pull request, fix commit, release diff, or git ref range to detec...
Security-focused static analysis and code auditing skills from Trail of Bits. Includes CodeQL deep analysis, Semgrep sca...
Detects training and fine-tuning pipelines that ingest external data without integrity gating. Use when writing fine-tun...
Design legal compliance training program for the team
Guides maintenance of cross-border transfer registers, audit trails, and compliance documentation under GDPR Art. 30 and...
Use HTTPS for all endpoints, including internal services Use when implementing security best practices. Security categor...
Implement the stdio and Streamable HTTP transports to the negotiated revision. This skill packages
Technical Requirement Document (TRD) Authoring — Translates product requirements into engineering specifications with st...
Receive and verify Treezor webhooks. Use when setting up Treezor webhook handlers, debugging signature verification, or...