woohyun212/security-skill

A collection of AI agent skills for security professionals, by security professionals, and for security professionals

This repository also configures its own agents. See what security-skill tells them →

22Stars on the repository
60Mods indexed here, across every type
6mo agoLast push, which is what freshness is scored on
MITLicence, which decides whether bodies are shown

ad-pentest

01

woohyun212/security-skill

Skill Claude CodeCodex needs its repo

Active Directory pentest with BloodHound attack path analysis, Kerberos/ADCS attacks, credential harvesting, and lateral movement.

not rated 22 6mo ago A 29 tokens original MIT

woohyun212/security-skill

Skill Claude CodeCodex

Guided bug bounty hunting session with recon, mapping, discovery, exploitation, and reporting phases with escalation routing.

not rated 22 6mo ago A 27 tokens original MIT

woohyun212/security-skill

Skill Claude CodeCodex

Pre-submission validation for bug bounty findings with scope/impact/exploitability gates, CVSS scoring, and submit/kill verdict.

not rated 22 6mo ago A 31 tokens original MIT

woohyun212/security-skill

Skill Claude CodeCodex

Multi-chain smart contract security for Solana, Algorand, Cairo, Cosmos, Substrate, and TON with pre-audit readiness checks.

not rated 22 6mo ago A 34 tokens original MIT

cert-parse

05

woohyun212/security-skill

Skill Claude CodeCodex

Parse X.509 certificate details and verify certificate chain integrity.

not rated 22 6mo ago A 15 tokens original MIT

cert-transparency

06

woohyun212/security-skill

Skill Claude CodeCodex

Certificate Transparency log search via crt.sh API to discover subdomains and certificates.

not rated 22 6mo ago B 18 tokens original MIT

cloud-pentest

07

woohyun212/security-skill

Skill Claude CodeCodex

Multi-cloud CSPM assessment using ScoutSuite/Prowler with IAM privilege escalation, storage exposure, and network posture for AWS/Azure/GCP.

not rated 22 6mo ago A 32 tokens original MIT

woohyun212/security-skill

Skill Claude CodeCodex

Detect timing side-channel vulnerabilities in cryptographic code caused by secret-dependent branching and memory access patterns.

not rated 22 6mo ago A 22 tokens original MIT

cors-check

09

woohyun212/security-skill

Skill Claude CodeCodex

Detect CORS misconfiguration by testing various Origin headers and analyzing Access-Control responses.

not rated 22 6mo ago A 18 tokens original MIT

cve-lookup

10

woohyun212/security-skill

Skill Claude CodeCodex

CVE detail lookup from NVD API v2 with CVSS scores, vectors, and affected products.

not rated 22 6mo ago B 25 tokens original MIT

dependency-audit

11

woohyun212/security-skill

Skill Claude CodeCodex

Dependency vulnerability audit across Node.js, Python, and Go ecosystems.

not rated 22 6mo ago A 16 tokens original MIT

devsecops-pipeline

12

woohyun212/security-skill

Skill Claude CodeCodex

Assess CI/CD pipeline security maturity, identify DevSecOps gaps, and generate GitHub Actions/GitLab CI configs with security gates.

not rated 22 6mo ago B 32 tokens original MIT

dns-recon

13

woohyun212/security-skill

Skill Claude CodeCodex

DNS record reconnaissance and zone transfer attempts using dig, host, and nslookup.

not rated 22 6mo ago B 19 tokens original MIT

encoding-toolkit

14

woohyun212/security-skill

Skill Claude CodeCodex

Encode/decode strings (Base64, URL, Hex, HTML, ROT13, JWT) for payload transformation, WAF bypass, and encoded data analysis.

not rated 22 6mo ago A 35 tokens original MIT

woohyun212/security-skill

Skill Claude CodeCodex

Identify and classify state-changing entry points in smart contracts and applications to map the attack surface.

not rated 22 6mo ago A 22 tokens original MIT

woohyun212/security-skill

Skill Claude CodeCodex

Escalate confirmed low/medium findings into high-impact exploit chains (A→B→C) with combined CVSS scoring.

not rated 22 6mo ago A 30 tokens original MIT

hash-identify

17

woohyun212/security-skill

Skill Claude CodeCodex

Identify hash algorithm type from a hash string and optionally verify against a known plaintext.

not rated 22 6mo ago A 19 tokens original MIT

insecure-defaults

18

woohyun212/security-skill

Skill Claude CodeCodex

Detect insecure default configurations including weak crypto, fail-open patterns, default credentials, and unsafe framework settings.

not rated 22 6mo ago A 24 tokens original MIT

ioc-extract

19

woohyun212/security-skill

Skill Claude CodeCodex

Extract Indicators of Compromise (IOC) from text, logs, or files.

not rated 22 6mo ago B 19 tokens original MIT

isms-checklist

20

woohyun212/security-skill

Skill Claude CodeCodex

Interactive gap analysis against Korea's ISMS-P 102-control certification framework (management, protection, personal information).

not rated 22 6mo ago A 26 tokens original MIT

llm-ai-security

21

woohyun212/security-skill

Skill Claude CodeCodex

LLM/AI application security testing for prompt injection, system prompt leakage, tool abuse, and output handling per OWASP AI Security Top 10.

not rated 22 6mo ago D 34 tokens original MIT

log-analysis

22

woohyun212/security-skill

Skill Claude CodeCodex

Security log analysis and anomaly detection for access, auth, and syslog files.

not rated 22 6mo ago A 18 tokens original MIT

malware-analysis

23

woohyun212/security-skill

Skill Claude CodeCodex

Analyze suspicious files through triage/static/dynamic/code phases to produce IOCs, YARA/Sigma rules, and MITRE ATT&CK mappings.

not rated 22 6mo ago A 33 tokens original MIT

malware-hash

24

woohyun212/security-skill

Skill Claude CodeCodex

File hash reputation lookup via VirusTotal API v3 for MD5/SHA1/SHA256 detection ratio, threat classification, and vendor results.

not rated 22 6mo ago A 33 tokens original MIT

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: