Agent Skills

Bug Bounty Methodology

claude-bughunter

A five-phase bug-hunting workflow and critical-thinking playbook that orients security hunting sessions, maps steps from recon to report, and enforces quality g

Hunt SSRF

claude-bughunter

Guided hunting methodology for server-side request forgery (SSRF): detection, OOB validation, payloads, bypass techniques, and escalation chains.

Acunetix (Membrane) Integration

application-skills

Integrate and automate Acunetix vulnerability scans, targets, reports and scheduled scans via the Membrane CLI.

Kali Docker Pentesting

kali-docker-pentesting

Provides a Kali Linux Docker container with 200+ penetration-testing tools and guidance for running scans, exploitation, and forensics via direct docker exec co

Pentesting FreeIPA — LDAP & Kerberos attack paths

xalgorix

Offensive/blue-team skill for authorized pentests: enumerates FreeIPA/LDAP/Kerberos environments, finds HBAC/sudo misconfigurations, reuses CCACHE/keytabs and m

Deception-Based Detection with Canarytoken

xalgorix

Create, deploy, and monitor Thinkst Canary Tokens (web, DNS, document, AWS key) to detect lateral movement and credential misuse.

AI Pentesting

TerminalSkills Library

Automate penetration testing workflows by orchestrating security tools (nmap, subfinder, nuclei, sqlmap) with AI agents to find, prove, and report web applicati

Shannon AI Pentester

Keygraph Shannon

Autonomous AI-driven pentesting tool for web apps and APIs. Performs real exploits to prove vulnerabilities with high success rates.

Caido MCP Security Integration

vibehacking

Advanced workflow for inspecting HTTP traffic, sitemaps, and WebSockets using Caido MCP tools for security analysis.

Active Directory Security Audit

bb-huge

Comprehensive AD security auditing using MITRE ATT&CK, covering ADCS, GPOs, ACLs, and Kerberos attacks.

Chief Security Officer (CSO) Audit

gStack

Performs professional-grade infrastructure and code security audits, identifying vulnerabilities and producing detailed security posture reports.

Android APK Security Audit

android-pentesting-skill

Comprehensive Android APK security audit with static/dynamic analysis, source-to-sink tracing, and CVSS 4.0 reporting.

Vibe Pentest

vibe-pentest

A multi-agent parallel architecture for automated black-box web application penetration testing and vulnerability reporting.

TLS/SSL Configuration Audit

skills

Professional cryptographic security audit of TLS/SSL configurations, mapped to PCI DSS 4.0, NIST, and FedRAMP compliance.

Reverse Shell & Listener Management

skills

Expert penetration testing skill for generating platform-specific reverse shell payloads and managing listeners in Kali Linux.

Active Directory Kerberos Attack Playbook

bb-huge

Expert-level guide for executing Kerberos-based attacks in AD environments, including roasting, ticket forging, and delegation abuse.

SNMP Remote Code Execution

abelrguezr

Exploit SNMP services with write-accessible community strings to achieve RCE.

Red Team Tools & Methodology

marketplace

Automate professional red teaming and bug bounty workflows, from subdomain enumeration to vulnerability discovery.

Pentesting rsync (port 873)

xalgorix

Procedures and checks to enumerate and exploit rsync daemon modules (port 873), detect unauthenticated shares, brute-force auth, and safely verify read/write ex

Attack Surface Analyzer

claude-code-plugins-plus-skills

Provides step-by-step guidance and configurations for attack surface analysis, threat modeling, and advanced security assessments.