MCP App StoreMCP App StoreThis skill transforms the agent into an expert cryptographic auditor. It performs deep analysis of TLS/SSL deployments to identify weak protocols (SSLv2/3, TLS 1.0/1.1), insecure cipher suites, certificate chain failures, and known vulnerabilities like Heartbleed or POODLE.
Use this skill when performing a security assessment of a web server, auditing HTTPS configurations for compliance, or checking for TLS 1.3-specific issues like 0-RTT replay attacks.
testssl.sh, sslscan, sslyze, nmap, and nuclei.Compatible with agents having access to a Kali Linux environment or similar security-tooling sandboxes.
This skill has not been reviewed by our automated audit pipeline yet.
Request CVEs
Generate CVE request packages and disclosure artifacts (MITRE form data, GitHub advisory draft, full vulnerability report, and vendor notification templates) fr
Pentest Report Generator (NullPointer Studio)
Generate a styled, client-ready PDF penetration test report from findings.json using a defined dark theme and structured sections (exec summary, risk dashboard,
Reverse Shell & Listener Management
Expert penetration testing skill for generating platform-specific reverse shell payloads and managing listeners in Kali Linux.
Reverse Engineer
Provides step-by-step guidance and best practices for binary reverse engineering: static analysis, dynamic tracing, disassembly, and documentation workflows for
Sandbox0 Integration
Guidance and templates for integrating Sandbox0 sandboxing into AI agents — CLI/SDK patterns, templates, volumes, network policy, and deployment choices.
OpenTestAI
Automated, high-confidence AI testing: bug detection, persona feedback, and prioritized test-case generation using many specialized tester profiles.
CTF Write-up Generator
Generate a concise, reproducible submission-style CTF writeup with a one-path solution script, metadata, and a short checklist for fast verification.
Minimal Run & Audit (repro reporting)
Execute a README-first smoke test and produce standardized reproducibility outputs (`repro_outputs/`) and PATCHES.md — trusted reporting for repo reproduction r
Skill Issue — Skill Auditor
Scan and audit installed agent skills to produce a health report covering inventory, usage, dependency checks, version status, and actionable recommendations.
GRC & Compliance (ServiceNow)
Guides Governance, Risk & Compliance (GRC) work in ServiceNow: policies, controls, risk records, audits and ES5 script examples for automating GRC workflows.
Azure External Attack Surface Management
Provides expert guidance for Azure External Attack Surface Management (EASM): quotas, configuration, integrations, and exporting inventory to analytics platform