Loading...
Loading...
Found 36 Skills
Master smart contract security with auditing, vulnerability detection, and incident response
Run the participant-facing CTFd CLI directly from its Git repository with uvx. Use when an agent needs to list or inspect CTFd challenges, view hints or the scoreboard, inspect the current user's solves and submissions, submit a flag, or unlock a hint without installing the ctfd package globally.
Safely inspect .env files by showing key names and clearly non-sensitive values while redacting anything that looks like a secret. Best-effort heuristic redaction (keyword block + token-pattern blocklist + Shannon-entropy check + value allowlist) — not a cryptographic guarantee. Use when you need to understand a project's environment configuration without exposing credentials.
Detector and proof-of-concept LPE toolkit for CVE-2026-31431 ("Copy Fail"), a Linux kernel algif_aead page-cache scratch-write vulnerability enabling local privilege escalation.
Identify and report potentially malicious software repositories masquerading as legitimate security tools
Active penetration testing toolchain. Covers scenarios such as information gathering, port scanning, vulnerability scanning, web penetration, SQL injection, directory brute-forcing, password cracking, etc. Exposes over 20 security tools to AI agents via MCP server (pentestMCP / mcp-security-hub). Trigger keywords: penetration testing, port scanning, Nmap, vulnerability scanning, Nuclei, SQL injection, SQLMap, directory brute-forcing, FFUF, password cracking, Hashcat, information gathering, subdomain, web penetration, ZAP, Burp.
Professional Skills for Cross-Site Scripting (XSS) Attack Testing
Analyze and understand Avast Premium Security features, protection mechanisms, and security architecture for antivirus research and educational purposes
Web exploitation techniques for CTF challenges. Use when solving web security challenges involving XSS, SQLi, CSRF, file upload bypasses, JWT attacks, Web3/blockchain exploits, or other web vulnerabilities.
Professional Skills and Methodologies for Mobile Application Security Testing
Secure environment variable management with Varlock. Use when handling secrets, API keys, credentials, or any sensitive configuration. Ensures secrets are never exposed in terminals, logs, traces, or Claude's context. Trigger phrases include "environment variables", "secrets", ".env", "API key", "credentials", "sensitive", "Varlock".
Professional Skills and Methodologies for Network Penetration Testing