Skill Claude Code
Essential fuzzing payloads: SQL injection, command injection, special characters. Curated essentials for vulnerability testing.
not rated 8 1mo ago A 27 tokens
8Stars on the repository
21Mods indexed here, across every type
1mo agoLast push, which is what freshness is scored on
customA LICENSE file GitHub cannot name, so bodies are not copied
Skill Claude Code
Sensitive data patterns for security testing: API keys, credit cards, emails, SSNs, phone numbers, IPs, and more. Use for data discovery and validation.
not rated 8 1mo ago A 38 tokens
Skill Claude Code
Essential exploitation payloads: anti-virus test files, file name exploits, malicious files. Curated for testing.
not rated 8 1mo ago A 27 tokens
Skill Claude Code
Run a full web-application penetration test by driving YeepForge's MCP tools. Use when the user gives a target URL (with authorization) and wants reconnaissance, OWASP Top 10 testing, exploitation, and a professional report. Requires the 'yeepforge' MCP server to be connected.
not rated 8 1mo ago A 66 tokens
Skill Claude Code
Static application security testing (SAST) of a source-code directory using YeepForge's static analyzer. Use when the user provides a local code path and wants a vulnerability review - SQLi, XSS, RCE, SSRF, path traversal, XXE, SSTI, JWT, IDOR, missing auth, business logic, GraphQL. Requires the 'yeepforge' MCP server.
not rated 8 1mo ago A 87 tokens
Skill Claude CodeCodex
Perform codebase analysis and architecture mapping as the first phase of a security assessment. Explores the tech stack, frameworks, entry points, data flows, and trust boundaries. Outputs sast/architecture.md. Run this before any vulnerability detection skill. Use when asked to analyze a codebase for security or when…
not rated 8 1mo ago A 73 tokens
Skill Claude CodeCodex
Detect business logic vulnerabilities in a codebase using a three-phase approach: threat modeling (domain analysis and attack scenarios), batched verify (check exploitable gaps in parallel subagents, 3 scenarios each), and merge (consolidate batch results). Covers price manipulation, workflow bypass, limit violations…
not rated 8 1mo ago A 110 tokens
Skill Claude CodeCodex
Detect insecure file upload vulnerabilities in a codebase using a three-phase approach: discovery (find all upload sites), batched verify (check extension bypass and related issues in parallel subagents, 3 sites each), and merge (consolidate batch results). Requires sast/architecture.md (run sast-analysis first).…
not rated 8 1mo ago A 92 tokens
sast-graphql
09Skill Claude CodeCodex
Detect GraphQL injection vulnerabilities in a codebase using a three-phase approach: recon (confirm GraphQL usage and find unsafe operation document assembly sites), batched verify (trace user input to those sites in parallel subagents, up to 3 candidate sites each), and merge (consolidate batch results). Requires…
not rated 8 1mo ago A 123 tokens
sast-idor
10Skill Claude CodeCodex
Detect Insecure Direct Object Reference (IDOR) vulnerabilities in a codebase using a three-phase approach: recon (find candidates), batched verify (check authorization in parallel subagents, 3 candidates each), and merge (consolidate batch results). Checks endpoints for missing ownership or authorization checks on…
not rated 8 1mo ago A 103 tokens
sast-jwt
11Skill Claude CodeCodex
Detect insecure JWT (JSON Web Token) implementations in a codebase using a two-phase approach: first map all JWT issuance and verification sites to understand the token lifecycle and signing configuration, then check each verification site for exploitable weaknesses such as algorithm confusion, missing signature…
not rated 8 1mo ago A 123 tokens
Skill Claude CodeCodex
Detect missing authentication and broken function-level authorization vulnerabilities in a codebase using a three-phase approach: recon (map endpoints and the role/permission system), batched verify (check auth/authz in parallel subagents, 3 endpoints each), and merge (consolidate batch results). Covers…
not rated 8 1mo ago A 121 tokens
Skill Claude CodeCodex
Detect path traversal vulnerabilities in a codebase using a three-phase approach: recon (find file-loading sinks with dynamic paths), batched verify (trace user input and mitigations in parallel subagents, 3 sinks each), and merge (consolidate batch results). Requires sast/architecture.md (run sast-analysis first).…
not rated 8 1mo ago A 98 tokens
sast-rce
14Skill Claude CodeCodex
Detect Remote Code Execution (RCE) vulnerabilities in a codebase using a three-phase approach: recon (find dangerous execution sinks), batched verify (trace user input to sinks in parallel subagents, 3 sinks each), and merge (consolidate batch results). Covers OS command injection, eval-like sinks, and unsafe…
not rated 8 1mo ago B 110 tokens
sast-report
15Skill Claude CodeCodex
Consolidate all SAST vulnerability results from the sast/ folder into a single final report ranked by severity and confidentiality impact. Reads all -results.md files and produces sast/final-report.md. Run after all vulnerability detection skills complete. Use when asked to generate a final report, consolidate…
not rated 8 1mo ago A 69 tokens
sast-sqli
16Skill Claude CodeCodex
Detect SQL injection vulnerabilities in a codebase using a three-phase approach: recon (find unsafe SQL construction sites), batched verify (trace user input to those sites in parallel subagents, 3 sites each), and merge (consolidate batch results). Covers string concat, f-strings, unsafe ORM methods, and dynamic…
not rated 8 1mo ago A 104 tokens
sast-ssrf
17Skill Claude CodeCodex
Detect Server-Side Request Forgery (SSRF) vulnerabilities in a codebase using a three-phase approach: recon (find outbound call sites), batched verify (trace user input to destinations in parallel subagents, 3 sites each), and merge (consolidate batch results). Requires sast/architecture.md (run sast-analysis first).…
not rated 8 1mo ago B 99 tokens
sast-ssti
18Skill Claude CodeCodex
Detect Server-Side Template Injection (SSTI) vulnerabilities in a codebase using a three-phase approach: recon (find template rendering sites that use dynamic strings), batched verify (trace user input to those sites in parallel subagents, 3 candidates each), and merge (consolidate batch results). Requires…
not rated 8 1mo ago A 99 tokens
sast-xss
19Skill Claude CodeCodex
Detect Cross-Site Scripting (XSS) vulnerabilities in a codebase using a three-phase approach: recon (find HTML/JS/DOM sink sites), batched verify (trace user input to sinks in parallel subagents, 3 sink sites each), and merge (consolidate batch results). Requires sast/architecture.md (run sast-analysis first). Outputs…
not rated 8 1mo ago A 99 tokens
sast-xxe
20Skill Claude CodeCodex
Detect XML External Entity (XXE) vulnerabilities in a codebase using a three-phase approach: recon (find XML parsing sites without external-entity hardening), batched verify (trace user input to each site in parallel subagents, 3 sites each), and merge (consolidate batch results). Requires sast/architecture.md (run…
not rated 8 1mo ago A 100 tokens
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: