container-escape-techniques
yaklang
Get host access from a misconfigured container.
Container security
Security skills for AI agents
These Skills look at software the way an attacker or an auditor would. The biggest groups review code for injection and broken access rules, probe systems in penetration tests and audit cloud accounts against best practices; smaller sets cover sign-in, malware analysis and forensics.
Sort by
Most installed
794 Skills
Showing Skills in Security.- 3.2k
- 3.2k
classical-cipher-analysis
yaklang
Identify and crack classical ciphers in CTFs.
Cryptanalysis
- 3.2k
tunneling-and-pivoting
yaklang
Reach internal networks through a pivot host.
Network security
- 3.2k
linux-security-bypass
yaklang
Find ways around Linux security restrictions.
Penetration testing
- 3.2k
prototype-pollution-advanced
yaklang
Test web app flaws for unwanted code execution.
Web security
- 3.2k
smart-contract-vulnerabilities
yaklang
Find hidden flaws in Solidity smart contracts.
Smart contract security
- 3.2k
stack-overflow-and-rop
yaklang
Build stack-overflow exploits for Linux binaries.
Binary exploitation
- 3.2k
lattice-crypto-attacks
yaklang
Recover weak keys and messages with lattice attacks.
Cryptanalysis
- 3.2k
sandbox-escape-techniques
yaklang
Find escape techniques for your sandbox type.
Security testing
- 3.2k
rsa-attack-techniques
yaklang
Recover plaintext from weak RSA encryption.
Cryptanalysis
- 3.2k
windows-lateral-movement
yaklang
Choose your next move between Windows hosts.
Penetration testing
- 3.2k
steganography-techniques
yaklang
Find hidden messages in images, audio, and text.
Digital forensics
- 3.2k
symmetric-cipher-attacks
yaklang
Find weak spots in symmetric encryption.
Cryptanalysis
- 3.2k
macos-security-bypass
yaklang
A field guide to testing macOS security barriers.
Penetration testing
- 3.2k
ntlm-relay-coercion
yaklang
Relay Windows logins to gain privileged access.
Penetration testing
RE - 3.2k
macos-process-injection
yaklang
Find a code injection route into macOS apps.
Security testing
- 3.2k
nosql-injection
yaklang
Find injection flaws in NoSQL-backed apps.
Application security
- 3.1k
upload-insecure-files
yaklang
Find security gaps beyond the file upload.
Application security
- 3.1k
unauthorized-access-common-services
yaklang
Find exploitable access in exposed server services.
Infrastructure security
+1 - 3.1k
reverse-shell-techniques
yaklang
Set up remote shells across Linux and Windows.
Penetration testing
3.1kghost-proxy
ghostsecurity
Capture HTTPS traffic for security testing.
Application security
RE
3kauth0
auth0
Build and troubleshoot your app’s Auth0 sign-in.
Application authentication
3kowasp-security
hoodini
Build web applications against common security flaws.
Application security
- 3k
ghost-bits-cast-attack
yaklang
Find Java injection paths hidden from filters.
Security testing
A Skill only gives the agent instructions and tools; it carries no permission of its own. Penetration testing and reverse engineering Skills are written for systems you own or are authorised to test, and the agent works with the access you give it.
A review reads the code or configuration and points out weaknesses. A penetration test runs the system and tries to exploit them, which shows whether a weakness can actually be used.
Tests check that the code does what it should; security Skills check what it should never do, such as letting one user read another's data. The two catch different mistakes.