Skills tagged "vulnerability-assessment"

security-review-owasp-authentication - OWASP Authentication Security Review
security-review owasp authentication vulnerability-assessment
★ 0 · Updated 2026-09-23
Review authentication-related code, flows, and configuration against OWASP guidance.
⚙ Identify authentication surface ⚙ Trace credential flows ⚙ Validate security controls
security-scanning-security-hardening - Coordinate multi-layer security scanning and hardening.
security-scanning security-hardening vulnerability-assessment threat-modeling
★ 1 · Updated 2026-09-23
Coordinate multi-layer security scanning and hardening across application, infrastructure, and compliance controls.
⚙ Execute vulnerability scanning ⚙ Conduct threat modeling ⚙ Review security architecture
WebAssessment - Security assessment and threat modeling infrastructure.
web-security pentest threat-modeling reconnaissance
★ 0 · Updated 2026-09-18
Provides security assessment infrastructure integrating reconnaissance, threat modeling, and vulnerability testing.
⚙ Send mandatory voice notifications ⚙ Build application reconnaissance narrative ⚙ Generate prioritized threat models
WebAssessment - Web security assessment infrastructure
web-security penetration-testing threat-modeling vulnerability-assessment
★ 1 · Updated 2026-09-18
Integrates reconnaissance, threat modeling, and vulnerability testing for web security assessments.
⚙ Understand application structure ⚙ Create threat models ⚙ Perform penetration testing
exploiting-ssrf-to-cloud-metadata - Exploiting SSRF to cloud metadata: reach is critical
ssrf cloud-security metadata vulnerability-assessment
★ 5 · Updated 2026-09-18
Adjudicates whether SSRF primitives reach internal cloud instance metadata endpoints to retrieve credentials and defeat filters.
⚙ Confirm attacker-steered fetch ⚙ Establish internal reach ⚙ Target cloud metadata endpoint
Security Testing - Guidance on application and infrastructure security testing.
pentesting fuzzing vulnerability-assessment sast
★ 1 · Updated 2026-09-16
Techniques and tools for testing application and infrastructure security including penetration testing, fuzzing, and vulnerability assessment.
⚙ Plan penetration tests ⚙ Write security unit tests ⚙ Set up input fuzzing
deepsafe-scan - Preflight security scanner for AI coding agents
security audit scanner openclaw
★ 76 · Updated 2026-09-16
Scans AI agent configs, skills, memory, and model behavior for security risks, secret leaks, PII, prompt injections, and dangerous patterns.
⚙ Scan deployment configuration ⚙ Scan skills and MCP servers ⚙ Scan memory for secrets and PII
webapp-api-excessive - Assess excessive data exposure in web application APIs
cybersecurity api-security excessive-data-exposure owasp-api3
★ 0 · Updated 2026-09-15
Identifies excessive data exposure and over-fetching vulnerabilities in API responses using interception proxies and schema analysis.
⚙ Intercept API responses ⚙ Analyze response schema differences ⚙ Extract sensitive fields from JSON
strix-pentest - Run AI penetration testing using Strix Claude Code
penetration-testing security-scanning vulnerability-assessment strix
★ 40 · Updated 2026-09-15
Runs AI-powered penetration testing and security assessments against web applications, APIs, domains, IPs, or repositories using Strix Claude Code.
⚙ Run security assessments ⚙ Perform automated penetration testing ⚙ Scan web applications and APIs
claude-pentest-skills - Structured Web Application Penetration Testing
penetration-testing web-security owasp vulnerability-assessment
★ 40 · Updated 2026-09-14
Provides structured web application penetration testing using OWASP methodology, curated payload references, 6-gate validation, and report generation.
⚙ Define testing scope and authorization ⚙ Map target attack surface ⚙ Test target vulnerability classes
performing-cryptographic-audit-of-application - Audit application cryptographic usage and key management.
cryptography audit security-review compliance
★ 54 · Updated 2026-09-12
Systematically reviews application cryptographic primitives, protocols, and key management to identify vulnerabilities.
⚙ Detect deprecated cryptographic algorithms ⚙ Identify insecure cipher block modes ⚙ Find hardcoded keys and secrets
code-review-security - Security-focused code review for code changes
code-review security vulnerability-assessment data-protection
★ 7 · Updated 2026-09-11
Conducts security-focused code reviews to identify exploitable vulnerabilities and data protection risks before merging changes.
⚙ Map code to trust boundaries ⚙ Evaluate exploit paths ⚙ Verify security controls
exploiting-cross-site-script-inclusion-xssi - Exploiting Cross-Site Script Inclusion (XSSI)
penetration-testing xssi jsonp owasp
★ 487 · Updated 2026-06-30
Identify and exploit Cross-Site Script Inclusion vulnerabilities to read sensitive data from static scripts, dynamic JS, JSONP responses, and non-JS files cross-origin.
⚙ find script and JSONP endpoints ⚙ detect dynamic JavaScript via cookie diffing ⚙ read global variables from included scripts
reviewing-security - Security Code Review for Vulnerability Detection
security code-review vulnerability-assessment OWASP
★ 25 · Updated 2026-02-15
Reviews code for security vulnerabilities including OWASP Top 10 risks, authentication and authorization flaws, and dependency vulnerabilities.
⚙ Review code for security vulnerabilities ⚙ Check for OWASP Top 10 risks ⚙ Identify authentication flaws