Download

Skill UI

Browse and discover 10318+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Audit , found 362 results

Default Newest Most Downloaded

Production Readiness Audit Engine

production-audit

sickn33/antigravity-awesome-skills

Performs a comprehensive external audit of a deployed repository's state, going beyond simple code review. It checks for critical production gaps, including RLS misconfigurations, webhook idempotency issues, secret exposure, deployment health, and prompt injection vulnerabilities. Ideal for pre-launch gates and ensuring code stability before going live.

Access Control Bypass Techniques Guide

401-403-bypass-techniques

yaklang/hack-skills

A comprehensive playbook for bypassing 401/403 Forbidden errors. Covers advanced techniques like path normalization tricks (encoding, traversal), HTTP method tampering, IP spoofing headers, and protocol downgrade attacks. Essential knowledge for penetration testing and security auditing.

Authentication and Authorization Security Router

yaklang/hack-skills

This guide serves as the core entry point for comprehensive security testing of identity and access control mechanisms. It is designed to help testers systematically identify vulnerabilities across login flows, session management, object authorization (IDOR), and modern protocols like JWT, OAuth, CORS, and SAML. Use this when planning security audits for any web application with user accounts.

Advanced Content Security Policy Bypass Techniques

csp-bypass-advanced

yaklang/hack-skills

This comprehensive guide details advanced techniques for circumventing Content Security Policies (CSP). It covers exploiting weaknesses in critical directives (e.g., base-uri, object-src), abusing nonces, leveraging trusted CDN endpoints, and executing code despite strict controls like script-src 'self' or 'strict-dynamic'. Essential knowledge for deep security auditing and penetration testing.

DeFi Attack Patterns Expert Playbook

defi-attack-patterns

yaklang/hack-skills

A comprehensive playbook detailing advanced exploitation techniques in decentralized finance (DeFi). Covers flash loan mechanics, price oracle manipulation (spot vs. TWAP), MEV extraction strategies (Sandwich, JIT), governance exploits, and core smart contract vulnerabilities. Essential for security auditors and risk analysts.

IDOR and Object Authorization Testing Playbook

idor-broken-object-authorization

yaklang/hack-skills

An expert playbook for systematically testing Insecure Direct Object References (IDOR) and Broken Object/Function Level Authorization (BOLA/BFLA). This guide covers finding object identifiers across all request vectors (URL, body, headers, cookies), implementing A-B testing methodologies, identifying various ID patterns, and executing horizontal or vertical privilege escalation attacks. Essential for deep API security auditing.

Smart Contract Vulnerabilities Expert Playbook

smart-contract-vulnerabilities

yaklang/hack-skills

A comprehensive playbook covering advanced smart contract audit techniques for Solidity/EVM. Focuses on critical patterns like reentrancy (cross-contract), integer overflows, access control misuse, delegatecall exploits, flash loans, and advanced MEV/front-running attacks. Essential for securing DeFi protocols.

Advanced SQL Injection Exploitation Guide

sqli-sql-injection

yaklang/hack-skills

A comprehensive and advanced playbook for mastering SQL injection techniques. It covers critical areas including WAF bypass, out-of-band data exfiltration, second-order injection, and exploitation strategies across major database systems (MySQL, MSSQL, Oracle, PostgreSQL). Essential for professional penetration testing and security auditing.

Insecure File Upload Vulnerability Testing

upload-insecure-files

yaklang/hack-skills

A comprehensive, expert playbook for challenging insecure file upload mechanisms. It provides advanced attack vectors covering validation bypass (magic bytes, extension), storage path abuse (traversal, overwrite), and exploitation of post-upload processing chains (XXE, RCE, CMDi). Essential for deep security auditing of file-handling workflows.

Web Page Data Provenance Auditor

sickn33/antigravity-awesome-skills

MockHunter is an advanced skill designed to audit live web pages, providing a comprehensive reality check on visible data. It analyzes every element to determine its true source: whether it is REAL (from the database), MOCK (simulated data), LLM-generated, HARDCODED, BROKEN (broken endpoints), or UNKNOWN. Ideal for auditing AI-generated UIs or reviewing proof-of-concept MVPs before customer sign-off.

Feature Flag Lifecycle Management Tool

feature-flags-architect

alirezarezvani/claude-skills

A comprehensive toolkit for managing the entire lifecycle of feature flags, treating them as a controlled process rather than simple if-statements. This system provides scripts to scan for technical flag debt, plan progressive rollouts (e.g., ring, linear), and audit for crucial kill-switches. Ideal for release engineering, ensuring features are properly launched, tested, and safely retired.

Building Robust Kubernetes Operators

kubernetes-operator

alirezarezvani/claude-skills

A specialized skill for building and auditing Kubernetes Operators. It focuses on the core principle of the declarative reconcile loop, helping developers identify and fix common operational bugs such as status drift, missing finalizers, and incorrect RBAC. Includes tools to validate CRD specifications, lint controller code, and audit capability levels against industry best practices.

Prev 1 2 3...24 25 262728 29 30 31 Next

Language