ai-pentesting skills

269 tagged ai-pentesting, measured the same way as everything else here.

Browse within: ai-hacking 245ai-security 177cybersecurity 170devsecops 154agents 100ai-penetration-testing 100aws 91cis 91cis-database 26iam 26cis-iam 22cis-compute 21compute 21ec2 17

usestrix/strix

Skill Claude CodeCodex

Security-test a REST, GraphQL, or gRPC API with Strix — autonomous agents that enumerate endpoints from an OpenAPI/GraphQL schema (or by crawling), then actually exploit the API-specific vulnerability classes in the OWASP API Security Top 10 (2023) — broken object-level authorization (BOLA/IDOR), broken object…

not rated 69k +1.3k changed 28d ago A Socket: warnSnyk: passSkillSpector: pass 144 tokens original Apache-2.0

graph-db-writes

03

samugit83/redamon

Skill Claude CodeCodex

Writing to the Neo4j attack-surface graph in RedAmon: the tenant-isolation MERGE key every entity node must carry, where graph methods live (mixins, not the client), and the schema places that must be updated together. A MERGE missing the tenant key silently merges one project's data into another's. Trigger: editing…

not rated 3.1k +91 changed 15d ago A SkillSpector: pass 119 tokens original MIT

nuclei

04

MingyiSecLab/Mingyi-Atlas

Skill Claude Code

Nuclei CLI parameter reference and usage patterns - YAML-template vulnerability scanning, target input modes, template filters, output formats, rate limits, ProjectDiscovery dashboard upload, and common scan commands.

not rated 15 +1 3mo ago A 42 tokens original Apache-2.0

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: