Навыки: Безопасность

Analyzes CVE reports and vulnerability scan results against your deployed infrastructure to determine actual exploitabil...

Generate vulnerability report generator operations. Auto-activating skill for Security Advanced. Triggers on: vulnerabil...

Research vulnerabilities in authorized targets through code analysis, reverse engineering, patch diffing, and fuzzing.

Review a repository or local folder for security vulnerabilities and produce a concise, evidence-based report. Use when...

Scan for specific vulnerabilities in dependencies and configurations

Scans codebases and dependencies for known vulnerabilities and security issues

Advanced vulnerability analysis principles.

Scan systems and dependencies for CVEs and security vulnerabilities. Use tools like Nessus, OpenVAS, and Qualys to ident...

This skill should be used when the user asks to "triage a vulnerability report", "assess a CVE", "evaluate a bug bounty...

Turn vulnerability notes, disclosure reports, PoCs, source code, or Codex Security findings into self-contained, sceptic...

Autonomous security vulnerability scanner for codebases. Detects secrets, XSS, missing security headers, auth issues, OW...

Draft, restructure, or audit specification-style technical reports using an independently expressed reference-only inter...

Deploy and operate web application firewalls — policy tuning, bot management, and virtual patching done right.

Waf Rule Creator - Auto-activating skill for Security Advanced.Triggers on: waf rule creator, waf rule creatorPart of th...

Deploy and tune Web Application Firewalls. Configure rules for OWASP Top 10 protection. Use when protecting web applicat...

Transaction governance layer for crypto wallet operations. 3-state evaluation: BLOCK / WARN / ALLOW with receipt. Schema...

Trade crypto tokens: swap, bridge across 14 chains. Manage wallets, agent tokens, and security policies.

Security engineer — IAM, secrets, threat modeling, hardening, auth, and supply chain security.

Security engineer — IAM, secrets, threat modeling, hardening, auth, and supply chain security. Use when asked to "review...

Audit whether a new wave of Anabasis runs improved on the wave it replaced. Pairs each run with its baseline of the same...

Build or audit WooCommerce virtual coupons resolved at runtime without a `shop_coupon` row. Covers `woocommerce_get_shop...

/============================================================================/

Complete PortSwigger deep-dive with exact payloads for every lab variant including zero-day techniques

Pentest a web app or website end to end — black-box testing of a live URL, staging environment, or local dev server that...

Lead web application penetration testing coordinator that orchestrates comprehensive security assessments by spawning sp...

(ePost) Use when working with authentication, sessions, OAuth providers, feature flags, or provider nesting

Integrate authentication and authorization flows with provider-specific setup and RBAC safeguards.

Attack JWT/session authentication. Load when auth uses a JWT (three base64url parts, header.payload.signature), Authoriz...

Legitimately acquire and KEEP an authenticated session (through MFA/OTP) so you can test the post-auth attack surface, a...

Trick a CDN/cache into storing a victim's authenticated response at a public URL, then read it. Load on "web cache decep...

Web cache poisoning & deception — get a shared cache to serve attacker content to other users, or trick it into caching...

Clickjacking / UI redress — frame a target so a victim's clicks hit hidden actions. Load when a page allows framing (no...

Reverse client-side request signing / obfuscated JS so you can replay and fuzz a protected API outside the browser. Load...

Exploit CORS misconfiguration to read cross-origin responses (data theft). Load when an API reflects Origin into Access-...

Get script to run despite a Content-Security-Policy — the step after finding an injection that CSP is blocking. Load whe...

Cross-Site Request Forgery — force a victim's browser to perform state-changing actions. Load on state-changing requests...

Inject into Neo4j Cypher queries to bypass auth, exfiltrate graph data, and reach SSRF/RCE. Load when user input reaches...

Overwrite a page's JavaScript variables using only injected HTML — no script needed. Load when a sanitizer allows tags/a...

Deep web exploitation beyond initial scanning. Covers SQLi (blind, OOB, second-order), NoSQL injection (MongoDB, operato...

Reverse engineer browser extensions (Chrome/Edge MV2/MV3, Firefox) for an authorized review: unpack .crx/.xpi, assess th...

Host header injection — abuse a trusted Host/X-Forwarded-Host to poison password-reset links, routing, and caches. Load...

Send the same parameter more than once so the WAF/validator and the backend disagree on which value wins — bypassing fil...

Insecure Direct Object Reference / broken access control on web objects. Load when a request references an object by id...

Defeat a second authentication factor — OTP/TOTP, SMS, push, or backup codes. Load when login has a 2FA/MFA step and you...

Attack OAuth 2.0 / OIDC / SSO flows for account takeover. Load on "Login with Google/GitHub", /authorize, /callback, red...

SSRF through link-preview / URL-unfurl / oEmbed features. Load when the app generates a preview card for a user-supplied...

Open redirect — abuse a redirect param to send users to attacker sites, and chain it (OAuth token theft, SSRF filter byp...

Use when pentesting a web application or API — injection, XSS/CSP, SSRF/cloud-metadata, HTTP desync & cache poisoning, S...