872 on-demand security skills for CTF, pentest, bug bounty, DFIR, detection engineering, cloud, identity, and red/blue team work. Skills are plain Markdown and activate by task without permanently consuming context. Bundles vendored skills under mixed licenses (MIT, Apache-2.0, CC-BY-SA-4.0) — see per-source…
★not rated 76▲
+7
changed todayA
tokens not measured
originalMIT
CVE hunting harness for open source security research. A 5-agent team that systematically finds, validates, and reports real vulnerabilities in open source packages.
★not rated 57▲
+2 7mo agoA
tokens not measured
originalApache-2.0
Claude-native, governed offensive-OSINT and external attack-surface platform for authorized security teams: multi-agent recon across web/API, identity, cloud, secrets, and people/breach intelligence, with deterministic scope, evidence, and approval controls, a governed agent-to-agent orchestrator, and human-reviewed…
★not rated 15
changed 1mo agoA
tokens not measured
Shor — autonomous AI web pentester. Provides the /shor-setup slash-command: an interactive wizard that guides you from zero to a running scan (black-box or white-box, GCP deployment included).
Professional penetration testing skills for Claude Code — structured offensive workflows covering two independent tracks: (1) Web track: web-recon, web-exploitation, web-postexploitation, web-report; (2) AD track: ad-recon, ad-exploitation, ad-postexploitation, ad-report. All skills include automatic evidence capture.
★not rated 12 6mo agoA
tokens not measured
originalMIT
AWS API Gateway IP rotation for security testing. Single switch routes ALL HTTP/HTTPS traffic (nuclei, httpx, ffuf, curl, everything) through rotating AWS IPs to bypass WAF rate limits and IP blocks.
★not rated 3 3mo agoA
tokens not measured
originalMIT