woohyun212/security-skill

보안인의, 보안인에 의한, 보안인을 위한 AI 에이전트 스킬 모음집

21Stars on the repository
60Mods indexed here, across every type
4mo agoLast push, which is what freshness is scored on
MITLicence, which decides whether bodies are shown

ad-pentest

01

woohyun212/security-skill

Skill Claude CodeCodex

Active Directory pentest with BloodHound attack path analysis, Kerberos/ADCS attacks, credential harvesting, and lateral movement.

not rated 21 4mo ago A 29 tokens original MIT

woohyun212/security-skill

Skill Claude CodeCodex

Guided bug bounty hunting session with recon, mapping, discovery, exploitation, and reporting phases with escalation routing.

not rated 21 4mo ago A 27 tokens original MIT

woohyun212/security-skill

Skill Claude CodeCodex

Pre-submission validation for bug bounty findings with scope/impact/exploitability gates, CVSS scoring, and submit/kill verdict.

not rated 21 4mo ago A 31 tokens original MIT

woohyun212/security-skill

Skill Claude CodeCodex

Multi-chain smart contract security for Solana, Algorand, Cairo, Cosmos, Substrate, and TON with pre-audit readiness checks.

not rated 21 4mo ago A 34 tokens original MIT

cert-parse

05

woohyun212/security-skill

Skill Claude CodeCodex

Parse X.509 certificate details and verify certificate chain integrity.

not rated 21 4mo ago A 15 tokens original MIT

cert-transparency

06

woohyun212/security-skill

Skill Claude CodeCodex

Certificate Transparency log search via crt.sh API to discover subdomains and certificates.

not rated 21 4mo ago B 18 tokens original MIT

cloud-pentest

07

woohyun212/security-skill

Skill Claude CodeCodex

Multi-cloud CSPM assessment using ScoutSuite/Prowler with IAM privilege escalation, storage exposure, and network posture for AWS/Azure/GCP.

not rated 21 4mo ago A 32 tokens original MIT

woohyun212/security-skill

Skill Claude CodeCodex

Detect timing side-channel vulnerabilities in cryptographic code caused by secret-dependent branching and memory access patterns.

not rated 21 4mo ago A 22 tokens original MIT

cors-check

09

woohyun212/security-skill

Skill Claude CodeCodex

Detect CORS misconfiguration by testing various Origin headers and analyzing Access-Control responses.

not rated 21 4mo ago A 18 tokens original MIT

cve-lookup

10

woohyun212/security-skill

Skill Claude CodeCodex

CVE detail lookup from NVD API v2 with CVSS scores, vectors, and affected products.

not rated 21 4mo ago B 25 tokens original MIT

dependency-audit

11

woohyun212/security-skill

Skill Claude CodeCodex

Dependency vulnerability audit across Node.js, Python, and Go ecosystems.

not rated 21 4mo ago A 16 tokens original MIT

devsecops-pipeline

12

woohyun212/security-skill

Skill Claude CodeCodex

Assess CI/CD pipeline security maturity, identify DevSecOps gaps, and generate GitHub Actions/GitLab CI configs with security gates.

not rated 21 4mo ago B 32 tokens original MIT

differential-review

13

woohyun212/security-skill

Skill Claude CodeCodex

Security-focused git diff analysis to detect regressions, new vulnerabilities, and unsafe changes in code reviews.

not rated 21 4mo ago A 24 tokens original MIT

dns-recon

14

woohyun212/security-skill

Skill Claude CodeCodex

DNS record reconnaissance and zone transfer attempts using dig, host, and nslookup.

not rated 21 4mo ago B 19 tokens original MIT

encoding-toolkit

15

woohyun212/security-skill

Skill Claude CodeCodex

Encode/decode strings (Base64, URL, Hex, HTML, ROT13, JWT) for payload transformation, WAF bypass, and encoded data analysis.

not rated 21 4mo ago A 35 tokens original MIT

woohyun212/security-skill

Skill Claude CodeCodex

Identify and classify state-changing entry points in smart contracts and applications to map the attack surface.

not rated 21 4mo ago A 22 tokens original MIT

woohyun212/security-skill

Skill Claude CodeCodex

Escalate confirmed low/medium findings into high-impact exploit chains (A→B→C) with combined CVSS scoring.

not rated 21 4mo ago A 30 tokens original MIT

hash-identify

18

woohyun212/security-skill

Skill Claude CodeCodex

Identify hash algorithm type from a hash string and optionally verify against a known plaintext.

not rated 21 4mo ago A 19 tokens original MIT

insecure-defaults

19

woohyun212/security-skill

Skill Claude CodeCodex

Detect insecure default configurations including weak crypto, fail-open patterns, default credentials, and unsafe framework settings.

not rated 21 4mo ago A 24 tokens original MIT

ioc-extract

20

woohyun212/security-skill

Skill Claude CodeCodex

Extract Indicators of Compromise (IOC) from text, logs, or files.

not rated 21 4mo ago B 19 tokens original MIT

isms-checklist

21

woohyun212/security-skill

Skill Claude CodeCodex

Interactive gap analysis against Korea's ISMS-P 102-control certification framework (management, protection, personal information).

not rated 21 4mo ago A 26 tokens original MIT

llm-ai-security

22

woohyun212/security-skill

Skill Claude CodeCodex

LLM/AI application security testing for prompt injection, system prompt leakage, tool abuse, and output handling per OWASP AI Security Top 10.

not rated 21 4mo ago D 34 tokens original MIT

log-analysis

23

woohyun212/security-skill

Skill Claude CodeCodex

Security log analysis and anomaly detection for access, auth, and syslog files.

not rated 21 4mo ago A 18 tokens original MIT

malware-analysis

24

woohyun212/security-skill

Skill Claude CodeCodex

Analyze suspicious files through triage/static/dynamic/code phases to produce IOCs, YARA/Sigma rules, and MITRE ATT&CK mappings.

not rated 21 4mo ago A 33 tokens original MIT

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: