Download

Skill UI

Browse and discover 15558+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search static analysis , found 56 results

Default Newest Most Downloaded

Serverless Injection Detection and Prevention

detecting-serverless-function-injection

mukul975/Anthropic-Cybersecurity-Skills

This skill focuses on detecting and mitigating sophisticated code injection and privilege escalation attacks across the entire serverless ecosystem (AWS Lambda, Azure, GCP). It combines static analysis of dangerous code sinks (e.g., eval, exec) with continuous monitoring of event sources (S3, SQS, API Gateway) and rigorous IAM auditing. It provides a comprehensive framework to secure the expanding serverless attack surface.

iOS Mobile App Security Assessment Tool

performing-ios-app-security-assessment

mukul975/Anthropic-Cybersecurity-Skills

This comprehensive skill provides a systematic framework for performing deep security assessments on iOS applications. It covers static analysis of IPA packages, dynamic instrumentation using Frida and Objection, SSL pinning bypass for traffic interception, extraction and auditing of sensitive data from the Keychain, and runtime method hooking. Use this for authorized penetration testing against standards like OWASP MASTG.

Go CI/CD Pipeline Setup and Automation

golang-continuous-integration

samber/cc-skills-golang

A comprehensive guide for setting up production-grade CI/CD pipelines for Go projects using GitHub Actions. This skill covers essential quality gates including unit testing, linting (golangci-lint), static analysis security testing (SAST), vulnerability scanning, dependency management, Docker builds, and automated releases using GoReleaser.

Agent Skill Security Scanner

edgeone-skill-scanner

Tencent/AI-Infra-Guard

A comprehensive tool designed to scan any agent skill for potential security risks and vulnerabilities before implementation or use. Powered by local static analysis (A.I.G.), it ensures that no file contents, credentials, or personal data ever leave your device, providing maximum privacy and safety for integrating new AI capabilities across various agent platforms.

Systematic Vulnerability Identification Methodology

offensive-bug-identification

SnailSploit/Claude-Red

A comprehensive methodology for discovering potential software vulnerabilities. It outlines advanced techniques including static analysis, dynamic analysis, fuzzing, taint tracking, and modern attack surface mapping (e.g., kernel, drivers). Ideal for professional code audits, bug bounty hunting, and building robust vulnerability research pipelines.

Mobile Pentest Methodology

offensive-mobile

SnailSploit/Claude-Red

A practical offensive methodology for Android and iOS app testing. It covers static analysis, Frida/Objection instrumentation, SSL pinning bypass, exported component abuse, insecure storage review, and mobile API reconnaissance for pentest and bug bounty work.

Quarkus Application Verification Pipeline

quarkus-verification

affaan-m/everything-claude-code

A comprehensive CI/CD pipeline for Quarkus applications, designed to verify code quality and deployment readiness. It covers all phases: build, static code analysis (SonarQube, Checkstyle), rigorous functional testing (Unit, Integration, API), security scanning (OWASP, dependency checks), native image compatibility testing, performance load testing (K6), and container image validation (Trivy, Grype).

Terraform IaC Architecture and Best Practices

terraform-skill

agentscope-ai/QwenPaw

A comprehensive guide for designing and implementing robust Infrastructure as Code (IaC) using Terraform or OpenTofu. Covers module hierarchy design, best practices for naming conventions, structuring multi-environment pipelines, advanced testing strategies (native tests, Terratest, static analysis), and integrating security scanning (trivy, checkov) into CI/CD workflows.

Pre-Commit Code Quality Gate

meta-pre-commit-quality-gate

opensquilla/opensquilla

This meta-skill runs three essential quality gates (ruff, mypy, and pytest) concurrently against the staged changes. It provides a comprehensive, CI-like check locally, offering a single BLOCK or APPROVE verdict to ensure code readiness before committing. It combines static analysis, type checking, and unit testing into one workflow.

Mobile Malware Behavioral Analysis Tool

abuse-of-public-facing-api-mobile-api-abuse

mukul975/Anthropic-Cybersecurity-Skills

A comprehensive skill for detecting and analyzing malicious behavior in mobile applications (Android/iOS). It employs multi-layered security analysis, including static indicator checking (permissions, manifest), dynamic instrumentation (Frida), network traffic monitoring, and automated scanning (MobSF). Use this skill when investigating suspicious apps for data exfiltration, C2 communication, or unauthorized access.

Smart Contract Security Audit for Foundry Projects

auditing-foundry-smart-contract-security

mukul975/Anthropic-Cybersecurity-Skills

A comprehensive, pre-deployment, defense-in-depth security audit tool for Solidity smart contracts built with Foundry. It combines static analysis (Slither, Aderyn), symbolic execution (Mythril), property-based fuzz testing, and key hygiene checks to proactively detect critical vulnerabilities like reentrancy, access control flaws, and arithmetic bugs before deployment to any EVM chain.

Advanced Linux ELF Malware Analysis Workflow

transfer-of-funds

mukul975/Anthropic-Cybersecurity-Skills

A comprehensive guide detailing the systematic workflow for analyzing malicious Linux ELF binaries. It covers essential techniques including static analysis (using readelf, elftools), dynamic tracing (strace, ltrace), and deep reverse engineering (GDB) of various threats like botnets, cryptominers, and ransomware targeting Linux environments, containers, and cloud infrastructure.

Prev 1 2 345 Next

Language