233 tagged ai-penetration-testing, measured the same way as everything else here.
Browse within: ai-hacking 169aws 169cis 169ai-pentesting 100cis-database 58cis-compute 54compute 54iam 390x4m4 31appsecco 31asyncio 31kali 31cis-iam 25ec2 25
Skill Claude CodeCodex
Security-test a REST, GraphQL, or gRPC API with Strix — autonomous agents that enumerate endpoints from an OpenAPI/GraphQL schema (or by crawling), then actually exploit the API-specific vulnerability classes in the OWASP API Security Top 10 (2023) — broken object-level authorization (BOLA/IDOR), broken object…
Skill Claude CodeCodex
Fix security vulnerabilities found by a Strix pentest (open-source CLI or app.strix.ai cloud) — triage by severity, patch the root cause rather than the symptom, and re-run Strix to prove each fix actually closes the exploit. Handles injection, XSS, SSRF, broken access control, IDOR, and other validated findings. Use…
Skill Claude CodeCodex
Test an application against the OWASP Top 10 with Strix — autonomous AI agents that attempt real exploits for each category of the current OWASP Top 10:2025 (broken access control including SSRF, security misconfiguration, software supply chain failures, cryptographic failures, injection, insecure design…
Skill Claude CodeCodex
A skill for examining Android packages, Windows executables, native libraries, and some cross-platform app binaries to understand how they work.
Skill Claude CodeCodex
A method for finding attack chains by combining smaller capabilities such as reading files, writing files, making server requests, or using credentials. It treats a serious outcome as a sequence of separately gained abilities.
Skill Claude CodeCodex
A collection of cybersecurity playbooks for investigating and exploiting specific systems, including GoEdge CDN, ARP man-in-the-middle attacks, BT Panel, OCS, MinIO, and CDN-to-S3 access chains.
Skill Claude CodeCodex
Ensure authorization guardrails for all AWS Organization accounts.
Skill Claude CodeCodex
Ensure IAM policies that allow full ":" administrative privileges are not attached.
Skill Claude CodeCodex
Ensure that RDS instances are not publicly accessible.
wallieinformal201/pentest-mcp-server
Skill Claude CodeCodex
Part of @cyanheads/pentest-mcp-server
DataCanvas primitive reference — a Tier 3 SQL/analytical workspace for tabular MCP servers, backed by DuckDB. Use when registering tables from upstream APIs, running ad-hoc SQL across them, and exporting results. Covers the acquire → register → query → export flow, the token-sharing pattern for multi-agent…
wallieinformal201/pentest-mcp-server
Skill Claude CodeCodex
Part of @cyanheads/pentest-mcp-server
Canonical reference for the unified Context object passed to every tool and resource handler in @cyanheads/mcp-ts-core. Covers the full interface, all sub-APIs (ctx.log, ctx.state, ctx.elicit, ctx.sample, ctx.progress, ctx.enrich), and when to use each.
wallieinformal201/pentest-mcp-server
Skill Claude CodeCodex
Part of @cyanheads/pentest-mcp-server
Catalog of OpenTelemetry instrumentation built into framework @cyanheads/mcp-ts-core — spans, metrics, completion logs, env config, runtime caveats, custom instrumentation patterns, and cardinality rules. Use when enabling OTel export, adding custom spans or metrics in services, debugging missing telemetry, looking up…
Skill Claude CodeCodex
Ensure EBS volume encryption is enabled in all regions.
Skill Claude CodeCodex
Ensure CIFS access is restricted to trusted networks to prevent unauthorized access.
Skill Claude CodeCodex
Ensure no Network ACLs allow ingress from 0.0.0.0/0 to remote server administration ports.
Skill Claude CodeCodex
Ensure no security groups allow ingress from 0.0.0.0/0 to remote server administration ports.
Skill Claude CodeCodex
Ensure no security groups allow ingress from ::/0 to remote server administration ports.
Skill Claude CodeCodex
Ensure the default security group of every VPC restricts all traffic.
Skill Claude CodeCodex
Ensure routing tables for VPC peering are least access.
Skill Claude CodeCodex
Ensure that the EC2 Metadata Service only allows IMDSv2.
Skill Claude CodeCodex
Ensure VPC Endpoints are used for access to AWS Services.
Skill Claude CodeCodex
Ensure Managed Platform updates is configured.
Skill Claude CodeCodex
Ensure Persistent logs is setup and configured to S3.
Skill Claude CodeCodex
Ensure access logs are enabled.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: