973 个 · 按相关度排序
Test REST, gRPC, and WebSocket APIs for weaknesses in authentication, access controls, input handling, and configuration. Provides protocol-specific checks, tool guidance, and detection indicators to help document reproducible findings and severity during authorized assessments.
中文简介正在准备中。当前显示英语简介。
Tests whether user messages can override an AI agent’s instructions or impersonate a higher authority. It checks for exposed internal instructions and changed behavior, then reports confirmed findings with prompts and responses as evidence.
中文简介正在准备中。当前显示英语简介。
Assess AI products, agents, MCP servers, and skill packages through authorized security testing. It models access boundaries, tests injection and tool misuse, and produces evidence-based reports with business impact, defensive successes, and concrete remediation steps.
中文简介正在准备中。当前显示英语简介。
Test whether an AI agent executes commands hidden in user input, evaluates untrusted code, or runs scripts from unverified sources. Record confirmed weaknesses with the test conversation, potential impact, and suggested safeguards.
中文简介正在准备中。当前显示英语简介。
Test whether instructions hidden in simulated documents, retrieved passages, or web pages can redirect an agent. The skill checks for unwanted behavior or sensitive disclosures and reports confirmed failures with the test dialogue as evidence.
中文简介正在准备中。当前显示英语简介。
Run a quick code security review for exposed credentials, injection risks, unsafe page content, vulnerable dependencies, and authentication issues. Receive findings grouped by severity, with file locations and suggested fixes to prioritize remediation.
中文简介正在准备中。当前显示英语简介。
Connect .NET MAUI screens to application data using XAML or C#. Covers compile-time binding checks, change notifications, value conversion, and fallback displays to help implement bindings and investigate screens that fail to update.
中文简介正在准备中。当前显示英语简介。
Plan initialization, state saving, restoration, and cleanup around .NET MAUI app lifecycle events. Understand how Window events map to each platform, distinguish lost focus from backgrounding, and account for multiple windows.
中文简介正在准备中。当前显示英语简介。
Build page navigation in .NET MAUI apps using Shell. Configure tabs and slide-out menus, register page routes, pass data between pages, and add confirmation dialogs before users leave a page.
中文简介正在准备中。当前显示英语简介。
Review and implement gh-aw workflows and Go code with security checks for untrusted input, shell commands, dependency versions, and permissions. The skill also covers event-specific conditions and tools that inspect workflows for errors and security risks without running them.
中文简介正在准备中。当前显示英语简介。
Guide a bug bounty investigation from scope checks and asset discovery to vulnerability testing, impact validation, and report writing. Covers web applications, source code, and AI features, with an emphasis on reproducible evidence of real harm.
中文简介正在准备中。当前显示英语简介。
Audit GraphQL APIs for exposed schemas, missing access checks, injection risks, and weak query limits. Combine automated tools with targeted checks to investigate data exposure, unauthorized operations, and resource exhaustion, then document findings with reproducible evidence.
中文简介正在准备中。当前显示英语简介。
Explore web application vulnerabilities by class, including access control failures, XSS, and SQL injection. Use root causes, testing checklists, and examples to plan investigations and distinguish observable security impact from an initial warning sign.
中文简介正在准备中。当前显示英语简介。
Find test inputs and bypass references for web security checks, including XSS, SQL injection, and access control flaws. Use the guidance to investigate impact and assess whether a finding is suitable for a vulnerability report.
中文简介正在准备中。当前显示英语简介。
Find test inputs and filter bypass examples for web security checks, organized by vulnerability type. Includes URL classification patterns, discovery wordlists, and examples of combining findings to demonstrate concrete security impact.
中文简介正在准备中。当前显示英语简介。
Review SAML single sign-on, where services exchange signed identity information, for signature and identity handling flaws. The skill guides testing and validation to determine whether altered assertions can change accounts, roles, or access decisions.
中文简介正在准备中。当前显示英语简介。
Guide bug bounty work from checking authorized scope and discovering assets to testing web and AI features. Validate practical impact, investigate related weaknesses, and organize reproducible evidence into a vulnerability report.
中文简介正在准备中。当前显示英语简介。
Guide bug bounty work from asset discovery to validation and reporting, while resolving local locations of security tools, wordlists, and cloned projects. It covers web and AI security testing with an emphasis on demonstrated impact.
中文简介正在准备中。当前显示英语简介。
Understand common web application vulnerabilities through organized explanations of their causes, impacts, and mitigations. Use the reference to review authentication, APIs, access controls, and configuration issues, or build checklists for security assessments.
中文简介正在准备中。当前显示英语简介。
Implement core TypeScript modules for claude-flow v3 using domain-driven design, which organizes code around distinct responsibilities. Build task and session domains, connect storage and services, and add unit and integration tests.
中文简介正在准备中。当前显示英语简介。
Review code for security risks in authentication, APIs, input handling, and data access. Identify issues such as exposed secrets, injection, and missing access checks, then report severity, file evidence, proposed fixes, and verification steps.
中文简介正在准备中。当前显示英语简介。
Dependency injection in Golang using samber/do — service containers, lifecycle management, scopes, health checks, graceful shutdown, and module organization. Apply when using or adopting samber/do, when the codebase imports github.com/samber/do or github.com/samber/do/v2, or when refactoring manual constructor injection into a DI container.
中文简介正在准备中。当前显示原文说明。
Provides malware analysis and network traffic techniques for CTF challenges. Use when analyzing obfuscated scripts, malicious packages, custom crypto protocols, C2 traffic, PE/.NET binaries, RC4/AES encrypted communications, YARA rules, shellcode analysis, memory forensics for malware (Volatility malfind, process injection detection), anti-analysis techniques (VM/sandbox detection, timing evasion, API hashing, process injection, environment checks), or extracting malware configurations and indicators of compromise.
中文简介正在准备中。当前显示原文说明。
Apply Anthropic Claude API security best practices for key management, input validation, and prompt injection defense. Use when securing API keys, validating user inputs before sending to Claude, or implementing content safety guardrails. Trigger with phrases like "anthropic security", "claude api key security", "secure anthropic", "prompt injection defense".
中文简介正在准备中。当前显示原文说明。