security-ownership-map
openai
Find ownership gaps in security-sensitive code.
Security ownership
794 Skills
Showing Skills in Security.security-ownership-map
openai
Find ownership gaps in security-sensitive code.
Security ownership
business-logic-vulnerabilities
yaklang
Find security gaps in payments and account flows.
Application security
xss-cross-site-scripting
yaklang
Find the XSS path your filters missed.
Web security
platform-dataspace-access-configure
forcedotcom
Configure who can access Salesforce Data Cloud.
Access management
api-sec
yaklang
Route each API security issue to the right test track.
API security
trailmark-structural
trailofbits
Find security audit priorities in your code.
Security auditing
graph-evolution
trailofbits
Find security changes your code diffs miss.
Security review
ssrf-server-side-request-forgery
yaklang
Find where server URL fetching exposes internal systems.
Application security
aws-sdk-java-v2-secrets-manager
giuseppe-trisciuoglio
Keep Java app secrets in AWS Secrets Manager.
Secrets management
aws-sdk-java-v2-kms
giuseppe-trisciuoglio
Add KMS-backed encryption to your Java apps.
Application security
vector-forge
trailofbits
Crypto test cases that cover missed code paths.
Cryptographic testing
skill-scanner
getsentry
Check agent skills for risks before installing.
Security review
authbypass-authentication-flaws
yaklang
Find weak spots in your login and account recovery.
Authentication security
device-integrity
dpearson2699
Protect your app's APIs with device verification.
App security
hack
yaklang
A disciplined route from scope to verified findings.
Security testing
waf-bypass-techniques
yaklang
Find ways past a web app's firewall blocks.
Web security testing
websocket-security
yaklang
Find security gaps in real-time app connections.
Application security
healthcheck
openclaw
Check your OpenClaw host before locking it down.
Host security
better-auth
giuseppe-trisciuoglio
Add Better Auth login to NestJS and Next.js.
Authentication development
jwt-oauth-token-attacks
yaklang
Find exploitable weaknesses in token trust and OAuth flows.
Web application security
api-recon-and-docs
yaklang
Map an API’s hidden endpoints, schemas, and versions.
API security testing
ghost-validate
ghostsecurity
Know whether a security finding is real and why.
Vulnerability validation
idor-broken-object-authorization
yaklang
Find broken authorization before attackers do.
Application security
ghost-report
ghostsecurity
One prioritized view of your repository's security risks.
Security reporting
A Skill only gives the agent instructions and tools; it carries no permission of its own. Penetration testing and reverse engineering Skills are written for systems you own or are authorised to test, and the agent works with the access you give it.
A review reads the code or configuration and points out weaknesses. A penetration test runs the system and tries to exploit them, which shows whether a weakness can actually be used.
Tests check that the code does what it should; security Skills check what it should never do, such as letting one user read another's data. The two catch different mistakes.