jndi-injection
yaklang
Test Java apps for JNDI injection weaknesses.
Application security
Security skills for AI agents
These Skills look at software the way an attacker or an auditor would. The biggest groups review code for injection and broken access rules, probe systems in penetration tests and audit cloud accounts against best practices; smaller sets cover sign-in, malware analysis and forensics.
Sort by
Most installed
794 Skills
Showing Skills in Security.- 3.3k
- 3.3k
active-directory-acl-abuse
yaklang
Turn Active Directory permissions into admin access.
Security testing
AD+1 - 3.3k
clickjacking
yaklang
Check if hidden clicks can trigger account actions.
Web security
- 3.3k
http2-specific-attacks
yaklang
Find HTTP/2 flaws beyond basic request smuggling.
Web security testing
- 3.3k
saml-sso-assertion-attacks
yaklang
Find assertion trust flaws in SAML sign-ins.
SSO security testing
- 3.3k
active-directory-kerberos-attacks
yaklang
Plan Kerberos attacks on Active Directory.
Security testing
AD - 3.3k
hash-attack-techniques
yaklang
Find the right hash attack for your CTF challenge.
Cryptanalysis
3.3kc-review
trailofbits
Find native-code security flaws with structured coverage.
Code security
- 3.3k
linux-privilege-escalation
yaklang
Find a path from a Linux shell to root access.
Penetration testing
- 3.3k
active-directory-certificate-services
yaklang
Find paths to admin access through AD certificates.
Penetration testing
AD+1 - 3.3k
arbitrary-write-to-rce
yaklang
Find a path from memory writes to code execution.
Binary exploitation
- 3.3k
ai-ml-security
yaklang
Find security weaknesses in your AI systems.
AI security
- 3.3k
dns-rebinding-attacks
yaklang
Test browser access to hidden internal services.
Penetration testing
- 3.3k
prototype-pollution
yaklang
Find prototype pollution in JavaScript apps.
Application security
- 3.3k
defi-attack-patterns
yaklang
Spot attack risks in decentralized finance.
DeFi security
- 3.3k
dangling-markup-injection
yaklang
Capture page secrets without running JavaScript.
Web security
- 3.2k
network-protocol-attacks
yaklang
Capture credentials from weak network protocols.
Network security
AD - 3.2k
windows-av-evasion
yaklang
A guide to running Windows tools past antivirus.
Security testing
- 3.2k
xslt-injection
yaklang
Find injection flaws in XML transform endpoints.
Application security
- 3.2k
email-header-injection
yaklang
Find injection and spoofing flaws in your emails.
Email security
- 3.2k
type-juggling
yaklang
Find weak PHP checks that let wrong secrets pass.
Security assessment
- 3.2k
linux-lateral-movement
yaklang
Find routes from one Linux host to others.
Penetration testing
SY - 3.2k
windows-privilege-escalation
yaklang
Find paths from a Windows shell to admin access.
Security testing
- 3.2k
memory-forensics-volatility
yaklang
Find malware traces in Windows and Linux memory.
Memory forensics
A Skill only gives the agent instructions and tools; it carries no permission of its own. Penetration testing and reverse engineering Skills are written for systems you own or are authorised to test, and the agent works with the access you give it.
A review reads the code or configuration and points out weaknesses. A penetration test runs the system and tries to exploit them, which shows whether a weakness can actually be used.
Tests check that the code does what it should; security Skills check what it should never do, such as letting one user read another's data. The two catch different mistakes.