Agent Skills

Security Research Meta-Methodology

xianzhi-research

A structured vulnerability research framework distilled from 5600+ security docs, covering web injection, deserialization, binary exploitation, domain pentest,

SaaS Security Audit Skill

saas-security

Comprehensive SaaS security audit skill: run domain-based audits, generate checklists, classify risks, and produce prioritized remediation reports.

Testing for XSS Vulnerabilities with Burp Suite

Anthropic Cybersecurity Skills

Guided workflow to identify, validate, and document reflected, stored, and DOM-based XSS using Burp Suite (scanner, repeater, intruder, DOM Invader).

Guardian CLI

guardian-cli

An AI-driven, production-ready CLI that automates authorized penetration testing workflows, orchestrating planner, tool, analyst and reporter agents to produce

API BOLA / IDOR Testing

anthropic-cybersecurity-skills

Structured workflow to test REST and GraphQL APIs for Broken Object Level Authorization (BOLA/IDOR), with techniques for discovery, exploitation checks, and rem

Testing for JSON Web Token (JWT) Vulnerabilities

Anthropic Cybersecurity Skills

Techniques and checks to find and exploit common JWT misconfigurations (alg none, alg confusion, kid/JKU injection, weak secrets).

Hunt SharePoint

claude-bughunter

Enumerate and assess on-prem Microsoft SharePoint servers for version disclosure, anonymous endpoints, legacy SOAP login abuse, ToolShell preconditions (CVE-202

/credteam — Red Team Assessment

correctless

Goal-directed red team assessment skill for live systems with source-code access; enforces isolation and intensity gating before active testing.

Vibe Security Auditor

vibe-security-skill

Audits AI-generated codebases for critical security flaws like exposed keys, broken RLS, and insecure payment flows.