woohyun212/security-skill

A collection of AI agent skills for security professionals, by security professionals, and for security professionals

This repository also configures its own agents. See what security-skill tells them →

21Stars on the repository
60Mods indexed here, across every type
4mo agoLast push, which is what freshness is scored on
MITLicence, which decides whether bodies are shown

web-vuln-idor

49

woohyun212/security-skill

Skill Claude CodeCodex

IDOR testing across numeric IDs, UUIDs, GraphQL, WebSocket, API versioning, and mass assignment vectors.

not rated 21 4mo ago A 31 tokens original MIT

web-vuln-mfa-bypass

50

woohyun212/security-skill

Skill Claude CodeCodex

MFA bypass testing covering rate limiting, OTP reuse, response manipulation, race conditions, and direct navigation attacks.

not rated 21 4mo ago B 30 tokens original MIT

web-vuln-oauth

51

woohyun212/security-skill

Skill Claude CodeCodex

OAuth 2.0 and OIDC vulnerability detection with redirecturi bypass techniques.

not rated 21 4mo ago C 22 tokens original MIT

woohyun212/security-skill

Skill Claude CodeCodex

Web endpoint race condition testing (TOCTOU, coupon reuse, double-spend, limit overrun) using concurrent HTTP request bursts.

not rated 21 4mo ago A 35 tokens original MIT

web-vuln-saml-sso

53

woohyun212/security-skill

Skill Claude CodeCodex

SAML and SSO vulnerability detection including XML Signature Wrapping attacks.

not rated 21 4mo ago B 22 tokens original MIT

web-vuln-ssrf

54

woohyun212/security-skill

Skill Claude CodeCodex

SSRF vulnerability detection with IP bypass techniques and cloud metadata exploitation.

not rated 21 4mo ago C 20 tokens original MIT

web-vuln-ssti

55

woohyun212/security-skill

Skill Claude CodeCodex

Server-Side Template Injection detection and exploitation across template engines.

not rated 21 4mo ago A 18 tokens original MIT

web3-smart-contract

56

woohyun212/security-skill

Skill Claude CodeCodex

Smart contract security audit covering 10 DeFi vulnerability classes with Foundry PoC templates.

not rated 21 4mo ago B 22 tokens original MIT

whois-lookup

57

woohyun212/security-skill

Skill Claude CodeCodex

Domain and IP WHOIS lookup to gather registration and ownership information.

not rated 21 4mo ago B 17 tokens original MIT

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: