[]

Security

The best skills for security-related work, like app security, pentesting, threat detection and incident response.

App Security

[655]
  • agent-security-hardening

    Harden AI agent runtimes against untrusted input, tool misuse and credential leaks

    ★291K
  • laravel-security

    Review Laravel apps for auth, CSRF, XSS, Eloquent safety and API security

    ★291K
  • llm-trading-agent-security

    Secure trading agents against prompt injection, runaway spend and key leaks

    ★291K
  • mcp-dependency-review

    Review MCP config files for mutable package references before approval or CI

    ★291K
  • perl-security

    Harden Perl input handling, process execution, DBI queries and web code

    ★291K
  • quarkus-security

    Secure Quarkus apps with JWT and OIDC auth, RBAC, validation and rate limiting

    ★291K
  • repo-scan

    Install the repo-scan source audit from a pinned, reviewable commit

    ★291K
  • security-bounty-hunter

    Hunt remotely reachable vulnerabilities in a repo that qualify for bounty reports

    ★291K
See all 655 skills

Pentesting & Recon

[1038]
  • osint-investigation

    Work through sparse-clue OSINT puzzles, geolocation and entity checks from public sources

    ★291K
  • domain-intel

    Run passive recon on subdomains, SSL certificates, WHOIS and DNS records

    ★258K
  • godmode

    Red team LLMs with jailbreak prompt techniques and compare their guardrails

    ★258K
  • sherlock

    Find which platforms use a username across more than 400 websites

    ★258K
  • web-pentest

    Run authorized web penetration tests with recon, proof-based exploits and reports

    ★258K
  • browser-auth-flow

    Probe login flows for redirect leaks, missing CSRF, weak cookies and OAuth flaws

    ★79.9K
  • api-security-testing

    Pentest REST, GraphQL and gRPC APIs for BOLA, auth flaws and OWASP API risks

    ★72.5K
  • managed-pentesting-with-strix

    Run managed Strix pentests of web apps, APIs and repos from the strix cloud CLI

    ★72.5K
See all 1,038 skills

Threat Detection

[323]
  • scan-cyber-threats

    Pull active malware IOCs, C2 infrastructure and exploited CVE alerts

    ★89.7K
  • cli-policy-audit

    Review audit logs, access policies and request history from the OmniRoute CLI

    ★82.1K
  • harness-security-bench

    Evolve a security detection harness against a vulnerability corpus and grade it

    ★79.9K
  • abuselpdb-automation

    Automate AbuseIPDB tasks with the Rube MCP toolkit from Composio

    ★78.2K
  • fraudlabs-pro-automation

    Automate Fraudlabs Pro tasks with the Rube MCP toolkit from Composio

    ★78.2K
  • ip2proxy-automation

    Automate Ip2proxy tasks with the Rube MCP toolkit from Composio

    ★78.2K
  • ip2whois-automation

    Automate Ip2whois tasks with the Rube MCP toolkit from Composio

    ★78.2K
  • ipdata-co-automation

    Automate Ipdata co tasks with the Rube MCP toolkit from Composio

    ★78.2K
See all 323 skills

Incident Response

[146]
  • oss-forensics

    Investigate GitHub supply-chain incidents with recovery, IOCs and reports

    ★258K
  • virustotal-automation

    Scan files, URLs and domains against VirusTotal reputation data via Composio

    ★78.2K
  • competition-forensic-timeline

    Correlate logs, PCAP and disk artifacts into an incident timeline

    ★43.1K
  • digital-forensics

    Analyze memory dumps, disk timelines and PCAPs while preserving incident evidence

    ★43.1K
  • malware-analysis

    Analyze suspicious samples statically and dynamically and write IOC and YARA rules

    ★43.1K
  • memory-forensics

    Analyze RAM captures with Volatility to extract processes and artifacts

    ★41.9K
  • acquiring-disk-image-with-dd-and-dcfldd

    Make hash-verified forensic disk images with dd or dcfldd on Linux

    ★35.2K
  • analyzing-android-malware-with-apktool

    Statically analyze Android malware APKs with apktool, jadx and androguard

    ★35.2K
See all 146 skills

Cloud & Infra Security

[210]
  • healthcheck

    Audit and harden server hosts for SSH, firewall, updates, backups and disk encryption

    ★393K
  • control-d-automation

    Automate Control D tasks with the Rube MCP toolkit from Composio

    ★78.2K
  • digicert-automation

    Automate Digicert tasks with the Rube MCP toolkit from Composio

    ★78.2K
  • dnsfilter-automation

    Automate Dnsfilter tasks with the Rube MCP toolkit from Composio

    ★78.2K
  • nextdns-automation

    Manage NextDNS filtering and security settings through Composio Rube MCP

    ★78.2K
  • turbot-pipes-automation

    Run Turbot Pipes cloud queries and compliance checks through Composio Rube MCP

    ★78.2K
  • wiz-automation

    Query Wiz cloud security issues, assets and vulnerabilities through Composio Rube MCP

    ★78.2K
  • cloud-k8s

    Assess cloud, container and Kubernetes setups for metadata SSRF and RBAC gaps

    ★43.1K
See all 210 skills

Reverse Engineering

[106]
  • binary-diff

    Migrate function names and offsets across binary versions with structured diffing

    ★43.1K
  • binary-ninja-reverse

    Analyze binaries in Binary Ninja with IL views, cross-references and Python automation

    ★43.1K
  • browser-extension-reverse

    Reverse engineer Chrome and Firefox extensions to trace manifests and traffic logic

    ★43.1K
  • competition-android-hooking

    Hook Android apps with Frida to trace signing logic in CTF challenges

    ★43.1K
  • competition-bundle-sourcemap-recovery

    Recover source maps and bundled JavaScript structure in CTF web challenges

    ★43.1K
  • competition-crypto-mobile

    Decode ciphers, transform chains and mobile signing logic in CTF challenges

    ★43.1K
  • competition-custom-protocol-replay

    Recover custom binary or text protocols and replay accepted sessions in CTFs

    ★43.1K
  • competition-firmware-layout

    Unpack firmware images and map partitions, boot chains and embedded configs

    ★43.1K
See all 106 skills