PreToolUse hook that hard-blocks irreversible filesystem and system-destructive Bash commands (rm -rf /, dd to /dev/, mkfs, fork bombs, sudo destructives) and prompts via permissionDecision: ask for history-rewriting and shared-state side effects (git force-push/reset --hard/filter-repo, gh pr merge/close, kubectl del.
★not rated 2 2mo agoD
tokens not measured
originalMIT
Target prioritization and attack surface analysis for penetration testing engagements. Synthesizes recon, enumeration, and scanning data to recommend high-value targets.
★not rated 2 2mo agoA
tokens not measured
originalMIT
Defense evasion techniques for red team engagements. Payload obfuscation, AMSI/ETW bypass, LOLBins, process injection, C2 communications, and covering tracks. Entire plugin is RoE-gated.
★not rated 2 2mo agoA
tokens not measured
originalMIT
Active Directory attack chains and post-exploitation skills for penetration testing engagements. AD exploitation, privilege escalation, lateral movement, loot collection, and detection rule generation.
★not rated 2 2mo agoA
tokens not measured
originalMIT
Passive and active reconnaissance skills for penetration testing engagements. Subdomain enumeration, port scanning, service fingerprinting, OSINT, and attack surface discovery.
★not rated 2 2mo agoA
tokens not measured
originalMIT
Vulnerability scanning and custom template generation for penetration testing engagements. Nuclei-based scanning with tech-stack-aware template selection and custom template creation.
★not rated 2 2mo agoA
tokens not measured
originalMIT
Reality-checks a freshly written spec or plan against actual code, docs, and API specs using parallel read-only research agents, then applies approved corrections.
★not rated 2 2mo agoA
tokens not measured
originalMIT
Two-gate principal-engineer quality check: a design-time skill that reviews an approach for scalability and maintainability before code, and a Stop-hook code gate that reviews the diff for performance and spaghetti anti-patterns before a task completes.
★not rated 2 2mo agoA
tokens not measured
originalMIT
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: