Use when building, changing, or deploying an instancez backend - editing instancez.yaml (tables, RLS, auth, storage, rpc, functions), running the inz CLI, or debugging why a query is denied. instancez is a single-binary Supabase-compatible backend defined by one YAML file.
Map incidents, control checks and SCA results to ISO 27001:2022, PCI DSS v4.0.1, NIST SP 800-53r5 and CIS Controls v8.1 and write auditor-ready evidence statements; use for compliance checks, audit questions, or incidents on regulated assets.
Methodology reference for Mastermind Bug Bounty runtime. Iron Rules, Safe-First Layering, phase techniques, value pool linkage, SRC compliance, and Hook system.
A guide for connecting Lazycat MicroServer apps to its official sign-in and access-control systems. It covers OIDC single sign-on, user identity from HTTP headers, API tokens, and separate access rules for public paths.
Use when performing BLE security testing on Linux/BlueZ - device scanning, GATT enumeration, read/write/notify interaction, fuzzing, and security assessment (unauthenticated read/write exposure, encryption enforcement, DFU entry, write-without-response abuse, connection parameters). Drives the single Go caeruleus…
Review Uniswap v4 hooks and integrations for permission-bit, callback-authentication, pool-identity, custom-accounting, delta, settlement, dynamic-fee, JIT-liquidity, shared-custody, and liveness bugs. Use when a Solidity system implements IHooks or BaseHook, returns hook deltas, or relies on a v4 hook for pricing…
Perform a deep, structured, evidence-based audit of a Laravel application and produce actionable findings backed by concrete project evidence. Use when asked to audit, review, assess, or evaluate an existing Laravel codebase.
Set up, connect to, or troubleshoot BibaVPN clients and servers, including the local Docker lab, SOCKS5 connectivity, invitations, and per-user access. Use when a user asks to run or diagnose BibaVPN; consult the repository's own documentation for implementation changes.
Free, local, read-only security self-audit for your own OpenClaw agent. Reads your OpenClaw config, bootstrap files, logs, agent session logs, and installed skills, plus a bounded host-security scan. It changes no OpenClaw config, skill or bootstrap file; its own history and state stay under /.clawseccheck…
Detects exploitable GitHub Actions workflow vulnerabilities, including pullrequesttarget pwn requests, unsafe PR checkout, expression injection in run steps and actions/github-script blocks, workflowdispatch and workflowcall input command injection, comment- and discussion-triggered commands, TOCTOU between approval…
Complete VPN server setup from scratch — takes a fresh VPS (IP + root password from the hosting provider) through full server hardening and a 3x-ui (Xray) install with two VLESS+Reality inbounds (XHTTP for best DPI resistance, TCP+Vision for iOS), delivered as one subscription link and connected via the Happ client.…
Autonomous AI pentester for web apps and APIs. Run white-box security assessments with Shannon — analyzes source code, identifies attack vectors, and executes real exploits to prove vulnerabilities. Triggered by 'shannon', 'pentest', 'security audit', 'vuln scan'.
Generate structured CSV security audit reports from vulnerability data with proper filtering and formatting. This skill covers CSV schema design for security reports, using Python csv.DictWriter, severity-based filtering, and field mapping from JSON to tabular format.
A security-audit workflow for Java, Kotlin, JavaScript, TypeScript, React, and Vue codebases. It is intended to find vulnerabilities and produce structured security findings.
Prepare Solana/Rust projects for a security audit — test coverage analysis, Rust doc-comment checks, code hygiene sweeps, dependency health verification, compute-unit optimization tips, and best-practice enforcement. Supports both Anchor-based and native solanaprogram Rust programs. Generates a scored Audit Readiness…
Create or update reusable workflow DAGs. Use when authoring or revising saved workflows. Must be mandatorily used before calling the createworkflow tool.
Use when formatting SCOPE controls detection candidates into detections.md, detections.json, dashboard-readable SPL sections, or controls-schema detection records.
A security report writing assistant for network vulnerabilities. Given a vulnerability identifier, name, or scanner report, it produces an analysis covering the issue, how it works, conditions for exploitation, and required fixes.
A tool that maps HTTP routes and their parameters in .NET applications. It can inspect source code or decompiled files and save the results as a Markdown document.
★not rated 54 5mo agoA158 tokens
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: