Download

Skill UI

Browse and discover 19382+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search CTI , found 11037 results

Default Newest Most Downloaded

Hugging Face API Tool Builder

huggingface-tool-builder

sickn33/agentic-awesome-skills

This skill enables users to build reusable command-line scripts and utilities for interacting with the Hugging Face API. It supports chaining API calls, automating repetitive tasks, and processing model or dataset data efficiently. Scripts utilize HF_TOKEN for authentication and can leverage the hf CLI for advanced repository interactions.

Hugo to Markdown Converter

hugo-to-markdown

sickn33/agentic-awesome-skills

Convert Hugo documentation sites and Hugo-managed content into standard Markdown by inspecting local Hugo config, shortcodes, render hooks, and content conventions. Useful for migrating, archiving, or integrating Hugo docs into Markdown workflows.

Human Agent Trust Exploit Detection

human-agent-trust-exploit-detection

Tencent/AI-Infra-Guard

This skill detects when AI agents exploit human trust through social engineering, deceptive guidance, or false assurances. It identifies prompts that induce unsafe actions, request sensitive credentials, or impersonate authority figures. Use this when evaluating agent safety, security advice, or decision-influencing workflows. Skip for static information.

API Security Misconfiguration Hunting

hunt-api-misconfig

sickn33/agentic-awesome-skills

Offensive security skill for hunting API security misconfigurations: mass assignment, JWT none/algorithm confusion, server-side prototype pollution, and server-side parameter pollution in backend URL construction. Requires explicit written authorization and a controlled lab or target scope.

Rate Limiting Brute Force Hunt

hunt-brute-force

sickn33/agentic-awesome-skills

Security skill for detecting missing or weak rate limiting on authentication endpoints. Identifies brute force vulnerabilities in OTP, password reset, and login systems. Requires explicit authorization for authorized security assessments only. Includes shadow-throttle detection and enumeration techniques.

Cache Poisoning Hunter

hunt-cache-poison

sickn33/agentic-awesome-skills

Authorized security testing skill for hunting web cache poisoning and password reset host-header injection. Maps CDN caching layers, probes unkeyed headers such as X-Forwarded-Host, and verifies cache HIT signals to confirm exploitable poisoned responses.

CI/CD Pipeline Vulnerability Hunting

sickn33/agentic-awesome-skills

This skill identifies security vulnerabilities in CI/CD pipelines, focusing on Jenkins Script Console, GitHub Actions workflows, and self-hosted runners. It covers techniques like Pwnrequest injection, credential store dumping, and Terraform state leakage. Requires explicit authorization for offensive security assessments.

Hunt Clickjacking Web Vulnerabilities

hunt-clickjacking

sickn33/agentic-awesome-skills

This skill focuses on identifying clickjacking vulnerabilities where malicious sites overlay transparent iframes over legitimate pages to trick users into unintended actions. It involves checking security headers like X-Frame-Options and CSP, verifying if sensitive actions can be triggered via framing, and ensuring proper authorization before testing. It is strictly for authorized security assessments and bug bounty programs.

Insecure Deserialization Hunting

hunt-deserialization

sickn33/agentic-awesome-skills

Offensive security skill for hunting insecure deserialization flaws in Java, PHP, Python, .NET and Ruby. Covers ysoserial gadget chains, PHP object injection, pickle payloads, ViewState and JNDI/Log4Shell, with strict authorization gates.

File Upload Bug Hunter

hunt-file-upload

sickn33/agentic-awesome-skills

This skill provides techniques for hunting file upload vulnerabilities, including content-type bypass, extension bypass, magic bytes spoofing, SVG XSS, ImageMagick/FFmpeg SSRF, headless Chrome SSRF, and archive extraction attacks like Zip Slip. It includes prevention methods and requires explicit authorization.

GraphQL Vulnerability Hunting

sickn33/agentic-awesome-skills

Hunting skill for GraphQL vulnerabilities. Provides methodology to discover endpoints, test introspection, map schemas, and exploit authorization flaws across GraphQL and REST APIs.

gRPC Vulnerability Hunter

sickn33/agentic-awesome-skills

This skill helps identify gRPC security vulnerabilities during penetration testing. It includes fingerprinting gRPC servers, enumerating services via reflection, testing authentication bypasses, and checking for DoS risks like HTTP/2 Rapid Reset. Requires explicit authorization for offensive use.

Prev 1 2 3...857 858 859860861 862 863...918 919 920 Next

Language