api-authorization-and-bola
yaklang
Find broken access controls in your APIs.
API security testing
Security skills for AI agents
These Skills look at software the way an attacker or an auditor would. The biggest groups review code for injection and broken access rules, probe systems in penetration tests and audit cloud accounts against best practices; smaller sets cover sign-in, malware analysis and forensics.
Sort by
Most installed
794 Skills
Showing Skills in Security.- 3.4k
- 3.4k
api-auth-and-jwt-abuse
yaklang
Find weak token trust and authentication boundaries.
API security testing
- 3.4k
auth-sec
yaklang
Find the right test for login and access flaws.
Authentication security
- 3.4k
401-403-bypass-techniques
yaklang
Turn denied paths into a systematic bypass test.
Web security
3.4ksecurity-alert-triage
elastic
Investigate security alerts and document cases.
Security operations
- 3.4k
injection-checking
yaklang
Find the right tests for unsafe input handling.
Application security
- 3.4k
kubernetes-pentesting
yaklang
Find paths from Kubernetes pods to cluster control.
Penetration testing
+2 - 3.4k
cors-cross-origin-misconfiguration
yaklang
Find cross-origin leaks in authenticated APIs.
API security
- 3.4k
security-detection-rule-management
elastic
Cut false alarms in Elastic Security rules.
Security detection
- 3.4k
recon-for-sec
yaklang
Find where to test a new application's security.
Security reconnaissance
- 3.4k
ios-pentesting-tricks
yaklang
Find security weaknesses in your iOS apps.
Mobile security
- 3.4k
llm-prompt-injection
yaklang
Find prompt-injection weaknesses in AI apps.
AI application security
- 3.4k
business-logic-vuln
yaklang
Find security gaps in multi-step business workflows.
Application security
- 3.4k
csrf-cross-site-request-forgery
yaklang
Find CSRF gaps in your web app's defenses.
Web application security
- 3.4k
heap-exploitation
yaklang
Heap exploit techniques matched to your glibc.
Binary exploitation
- 3.4k
oauth-oidc-misconfiguration
yaklang
Find weak spots in your app's sign-in flow.
Authentication security
- 3.4k
traffic-analysis-pcap
yaklang
Find hidden activity in your network captures.
Network forensics
- 3.4k
vm-and-bytecode-reverse
yaklang
Decode custom bytecode to solve binary puzzles.
Reverse engineering
- 3.3k
anti-debugging-techniques
yaklang
Make protected binaries work under a debugger.
Reverse engineering
3.3kaws-auth
aws
Add secure sign-up, login, federation, and API access.
Application authentication
- 3.3k
security-generate-security-sample-data
elastic
Fill Elastic Security with realistic demo alerts.
Security testing
- 3.3k
binary-protection-bypass
yaklang
Find bypass paths for protected ELF binaries.
Binary exploitation
- 3.3k
path-traversal-lfi
yaklang
Test web paths for file leaks and code execution.
Web security testing
- 3.3k
cmdi-command-injection
yaklang
Find command injection even without visible output.
Application security
A Skill only gives the agent instructions and tools; it carries no permission of its own. Penetration testing and reverse engineering Skills are written for systems you own or are authorised to test, and the agent works with the access you give it.
A review reads the code or configuration and points out weaknesses. A penetration test runs the system and tries to exploit them, which shows whether a weakness can actually be used.
Tests check that the code does what it should; security Skills check what it should never do, such as letting one user read another's data. The two catch different mistakes.