Download

Skill UI

Browse and discover 19156+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search API Security , found 292 results

Default Newest Most Downloaded

Client-Side Secret Exposure Audit

client-secret-exposure-audit

sickn33/agentic-awesome-skills

This skill audits deployed web apps for exposed secrets like hardcoded API keys and tokens in JavaScript or HTML. It checks for publicly reachable config files and security header misconfigurations. It is a defensive, read-only workflow for authorized security reviews to identify potential data leaks without exploiting systems.

Security Audit

cloudflare-security-audit

sickn33/agentic-awesome-skills

Audit authorized codebases for exploitable vulnerabilities using scoped reconnaissance, adversarial review, validation, and structured reporting. Use for security reviews, pen-testing, and vulnerability hunting in web apps, APIs, services, CLI tools, libraries, and daemons.

Source Code Security Audit

sickn33/agentic-awesome-skills

Perform authorized static analysis on source code to identify security vulnerabilities using tools like Semgrep and CodeQL. This workflow covers pattern hunting, dangerous API detection, and verification of vulnerability fixes. Essential for white-box audits and PR security reviews.

CRED OMEGA Enterprise Security Engine

sickn33/agentic-awesome-skills

CRED-OMEGA serves as an enterprise operational CISO engine for comprehensive credential and secret management. It integrates with AI coding tools to secure API keys and vaults. Use this skill for specialized security tasks involving credential governance, secret handling, and enterprise security compliance. Avoid for general assistance or when simpler tools are available.

Dynamic Application Security Testing

sickn33/agentic-awesome-skills

Perform dynamic application security testing against running web apps using OWASP ZAP, Burp Suite, Nikto, Nuclei, and Arachni. Automate baseline, full, and API scans in CI/CD to find runtime vulnerabilities.

FastAPI High-Performance API Development

sickn33/agentic-awesome-skills

Master building high-performance asynchronous APIs using FastAPI, SQLAlchemy 2.0, and Pydantic V2. Covers microservices, WebSockets, security, testing, and deployment strategies for production-ready Python backend systems. Includes async patterns, database optimization, and observability.

Hardcoded Secret Detection

hardcoded-secret-detection

Tencent/AI-Infra-Guard

Detects hardcoded secrets like API keys, tokens, and passwords embedded in source code, configuration files, or Infrastructure as Code (IaC). Used when an agent can access its codebase to identify security vulnerabilities at rest. Focuses on secrets stored in files rather than runtime leaks.

API Security Misconfiguration Hunting

hunt-api-misconfig

sickn33/agentic-awesome-skills

Offensive security skill for hunting API security misconfigurations: mass assignment, JWT none/algorithm confusion, server-side prototype pollution, and server-side parameter pollution in backend URL construction. Requires explicit written authorization and a controlled lab or target scope.

gRPC Vulnerability Hunter

sickn33/agentic-awesome-skills

This skill helps identify gRPC security vulnerabilities during penetration testing. It includes fingerprinting gRPC servers, enumerating services via reflection, testing authentication bypasses, and checking for DoS risks like HTTP/2 Rapid Reset. Requires explicit authorization for offensive use.

Hunt Kubernetes Security Vulnerabilities

sickn33/agentic-awesome-skills

A security reconnaissance tool for identifying Kubernetes and Docker misconfigurations, including anonymous cluster-admin access, kubelet RCE, etcd exposure, and docker.sock vulnerabilities. Requires explicit authorization before use. Helps penetration testers find high-impact findings like API anonymous cluster-admin, kubelet 10250 exec/run, and container escape via runc.

Misc Vulnerability Hunting

sickn33/agentic-awesome-skills

A comprehensive skill for identifying miscellaneous security vulnerabilities like access control failures, information disclosure, and misconfigurations. Based on 225 public bug bounty reports, it helps hunters target SaaS platforms, identity flows, and internal APIs to find high-value issues.

Hunt Shadow API Surface

hunt-shadow-api

sickn33/agentic-awesome-skills

Identify shadow, zombie, and undocumented API endpoints by enumerating versioned paths, diffing specs, and comparing old vs current security behavior. For authorized OWASP API9 assessments.

Prev 1 2 3...20 21 222324 25 Next

Language