Download

Skill UI

Browse and discover 16597+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Vulnerabilities , found 327 results

Default Newest Most Downloaded

Source Code Security Audit Workflow

zhaoxuya520/reverse-skill

A comprehensive white-box security auditing workflow designed for proprietary source code. It integrates static analysis security testing (SAST) tools like Semgrep and CodeQL to detect common vulnerabilities (e.g., injection, IDOR, crypto misuse), followed by mandatory manual threat modeling and verification steps. Applicable for PR reviews and pre-deployment security checks.

Advanced Agent Cloud Security Analysis

competition-agent-cloud

zhaoxuya520/reverse-skill

A specialized downstream skill for CTF-sandbox workflows. Used to analyze complex security challenges driven by AI agent interactions, prompt injection, or infrastructure vulnerabilities. Focuses on tracing control chains involving untrusted input, tool side effects, deployment drift, container runtime issues, and CI/CD supply chain provenance. Ideal for rigorous vulnerability assessment in modern, distributed systems.

GraphQL RPC Contract Drift Analysis

competition-graphql-rpc-drift

zhaoxuya520/reverse-skill

A specialized skill for detecting discrepancies (drift) between declared API contracts (such as GraphQL schemas, OpenAPI specs, and RPC manifests) and the actual behavior of live backend handlers. It is used to identify hidden operations, contract mismatches, or vulnerabilities resulting from schema evolution, versioning skew, or implementation gaps. Must be used after initial sandbox assumptions are established.

Analyzing JWT Claim Confusion Bugs

competition-jwt-claim-confusion

zhaoxuya520/reverse-skill

A specialized downstream skill for deep security analysis of JSON Web Tokens (JWT), JWS, and JWE. It guides the identification of vulnerabilities where token components (headers, claims, keying) lead to unauthorized identity assumption or privilege escalation. Use this to trace the full path from token supply to final application acceptance.

Analyzing Kernel Container Escape Paths

competition-kernel-container-escape

zhaoxuya520/reverse-skill

A specialized deep-dive skill for analyzing container-to-host escape vulnerabilities. This tool is used after a sandbox orchestrator establishes initial assumptions, focusing on mapping isolation boundaries (namespaces, cgroups, seccomp, capabilities). It helps prove boundary crossings, identify minimal exploit primitives, and determine if an exploit can break out of the container context to the host kernel.

Prompt Injection Security Analysis

competition-prompt-injection

zhaoxuya520/reverse-skill

A specialized downstream skill for analyzing security vulnerabilities in complex agentic systems. This tool is designed for red teaming and penetration testing, focusing on detecting prompt injection, retrieval poisoning, memory contamination, planner drift, and tool boundary abuse within multi-step LLM chains. Use when proving how untrusted inputs compromise system integrity.

Request Normalization Smuggling Detection

competition-request-normalization-smuggling

zhaoxuya520/reverse-skill

This advanced skill is designed for security research and CTF environments to trace subtle divergences in request handling across multiple network hops (proxies, gateways, backend servers). It focuses on identifying vulnerabilities stemming from differential interpretation of headers, path normalization, transfer framing (CL/TE), and host derivation, crucial for detecting request smuggling and parsing inconsistencies.

Supply Chain Provenance Analysis

competition-supply-chain

zhaoxuya520/reverse-skill

This advanced skill specializes in tracing the complete provenance of software artifacts across the entire development lifecycle. It is designed for deep security analysis of CI/CD pipelines, identifying dependency drift, build tampering, package origin, and determining the final artifact consumed at runtime. Use it when investigating integrity vulnerabilities in complex release flows.

Mapping Template Render Paths

competition-template-render-path

zhaoxuya520/reverse-skill

A specialized downstream skill for deep analysis of complex web rendering pipelines. Use this to trace vulnerabilities or logical flaws residing in Server-Side Rendering (SSR), template data, route loaders, or client-server hydration boundaries. It compares template-level gating against backend handler enforcement to pinpoint the decisive weak point in the render chain.

Federated Identity Security Assessment

identity-federation

zhaoxuya520/reverse-skill

A comprehensive security assessment skill for identifying vulnerabilities in federated identity systems, including SAML, OIDC, and OAuth 2.0 flows. It covers common misconfigurations, such as signature tampering, PKCE failures, redirect URI issues, and token confusion, ensuring robust SSO implementation.

AI LLM Security And Red Teaming Assessment

zhaoxuya520/reverse-skill

A comprehensive framework for conducting authorized security assessments on Large Language Models (LLMs) and AI agents. It covers critical vulnerabilities including advanced prompt injection (OWASP Top 10), tool abuse, RAG data poisoning, memory manipulation, and system prompt extraction. Ideal for red teaming, security auditing, and ensuring the robustness of AI systems in production environments.

Comprehensive Code Review Agent

FlorianBruniaux/claude-code-ultimate-guide

A sophisticated, multi-agent system designed to perform deep, comprehensive code reviews on pull requests. It covers core elements like code quality, functionality, security vulnerabilities, and testing coverage. Advanced features include detecting scope drift, enforcing SOLID principles, identifying DRY violations, and providing anti-hallucination safeguards for maintain high software integrity.

Prev 1 2 3...23 24 252627 28 Next

Language