Agent Skills

Anthropic Security Basics

comeonoliver

Practical security practices for Anthropic Claude integrations: API key management, input validation, prompt-injection defenses, and output scanning.

API BOLA / IDOR Testing

anthropic-cybersecurity-skills

Structured workflow to test REST and GraphQL APIs for Broken Object Level Authorization (BOLA/IDOR), with techniques for discovery, exploitation checks, and rem

Upstash Rate Limit TypeScript SDK

ratelimit-js

Guidance and practical examples for using Upstash's TypeScript rate-limit SDK (setup, common algorithms, and traffic-protection patterns).

API Security Testing Workflow

antigravity-awesome-workspace-skill

A comprehensive security testing framework for REST and GraphQL APIs, covering auth, rate limiting, and input validation.

T5 — Model & API Exploitation

decepticon

Techniques to probe and exploit LLM APIs: rate-limit abuse, token-cost amplification, schema bypass, model-version manipulation, and related probes.

BOLA & IDOR Hunting

bb-huge

Advanced methodology for detecting Broken Object Level Authorization and Insecure Direct Object References in APIs.

Laravel Rate Limiting & Throttling

superpowers-laravel

Implements per-user and per-route API rate limits in Laravel using RateLimiter and throttle middleware to prevent abuse.

Caido MCP Security Integration

vibehacking

Advanced workflow for inspecting HTTP traffic, sitemaps, and WebSockets using Caido MCP tools for security analysis.

Acorn Middleware & Authentication

superpowers-sage

Implements Laravel-style HTTP middleware, JWT authentication, and request filtering within WordPress using Acorn and Sage.

JWT Vulnerability Testing

Anthropic Cybersecurity Skills

Identify and exploit critical JWT vulnerabilities including algorithm confusion, 'none' bypass, and weak secret exploitation.

API BOLA/IDOR Security Testing

Anthropic Cybersecurity Skills

Comprehensive guide for testing REST and GraphQL APIs for Broken Object Level Authorization (BOLA) and IDOR vulnerabilities.