Map identified threats to appropriate security controls and mitigations. Use when prioritizing security investments, creating remediation plans, or validating control effectiveness.

foolhardy450

除錯

Supply Chain Risk Auditor

Identifies dependencies at heightened risk of exploitation or takeover. Use when assessing supply chain attack surface, evaluating dependency health, or scoping security engagements.

foolhardy450

智能合約

Solidity Security

Master smart contract security best practices, vulnerability prevention, and secure Solidity development patterns.

foolhardy450

項目管理

Stride Analysis Patterns

Apply STRIDE methodology to systematically identify threats. Use when analyzing system security, conducting threat modeling sessions, or creating security documentation.

foolhardy450

安全

Conduct comprehensive security assessments of SMTP (Simple Mail Transfer Protocol) servers to identify vulnerabilities including open relays, user enumeration, weak authentication, and misconfiguration.

foolhardy450

安全

Ssh Penetration Testing

Conduct comprehensive SSH security assessments including enumeration, credential attacks, vulnerability exploitation, tunneling techniques, and post-exploitation activities. This skill covers the complete methodology for testing SSH service security.

foolhardy450

數據分析

Sqlmap Database Pentesting

Provide systematic methodologies for automated SQL injection detection and exploitation using SQLMap.

foolhardy450

金融同投資

Threat Modeling Expert

Expert in threat modeling methodologies, security architecture review, and risk assessment. Masters STRIDE, PASTA, attack trees, and security requirement extraction. Use PROACTIVELY for security architecture reviews, threat identification, or building secure-by-design systems.

foolhardy450

安全

Sql Injection Testing

Execute comprehensive SQL injection vulnerability assessments on web applications to identify database security flaws, demonstrate exploitation techniques, and validate input sanitization mechanisms.

foolhardy450

Previous 1…1078 1079 1080…1087 Next

Api Fuzzing For Bug Bounty

This skill should be used when the user asks to "test API security", "fuzz APIs", "find IDOR vulnerabilities", "test REST API", "test GraphQL", "API penetration testing", "bug bounty API testing", or needs guidance on API security assessment techniques.

freshwaterbruce20

智能合約

Security

Solidity security patterns, common vulnerabilities, and pre-deploy audit checklist. The specific code patterns that prevent real losses — not just warnings, but defensive implementations. Use before deploying any contract, when reviewing code, or when building anything that holds or moves value.

freeslugs0

套件同發佈

Dependency Auditor

Checks package.json for outdated or vulnerable dependencies

FrankieBiz0

安全

Security Audit

Security vulnerability audit following OWASP Top 10. Reviews code for injection, broken auth, XSS, secrets exposure, and misconfigurations. Use before deploying or reviewing sensitive code.

franciscsimon0

除錯

Security Sweep

Run a security audit of the codebase and produce a prioritised findings report. Optionally scope to a specific domain (e.g. /security-sweep auth). Outputs to docs/security/.

franchiseai0

安全

Hitl Safety

Human-in-the-loop safety controls — approval routing via human, LLM judge, or auto-approve with guardrail overrides.

framersai0

機器學習

Pii Redaction

Detect and redact personally identifiable information (PII) from text using a four-tier pipeline (regex + NLP + NER + LLM-as-judge)

framersai0

代碼質素

Code Safety

Scan LLM-generated code for security vulnerabilities using language-aware pattern rules

framersai0

除錯

Security

Security auditing patterns for Midnight Network smart contracts and dApps. Use when reviewing code for vulnerabilities, privacy leaks, cryptographic weaknesses, or performing security audits.

FractionEstate0

系統管理

Healthcheck

Host security hardening and risk-tolerance configuration

foxl-ai0

安全

Security Review

Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive security checklist and patterns.

forrany0

代碼質素

Code Security Review

Comprehensive code quality and security audit for financial systems. Use when asked to "review code", "code review", "security audit", "check for issues", "審核程式碼", "檢查安全性", or before merging changes. Focuses on DDD compliance, financial precision (no floats for money), security vulnerabilities, and test coverage.

forgivesam1680

安全

Security Review

forgivesam1680

安全

Api Security Patterns

Guide for adding authentication and RBAC enforcement to FastAPI endpoints in the MCP Gateway. Use when adding new API endpoints, reviewing existing endpoints for auth gaps, or implementing role-based access control.

Forge-Space0

除錯

Security Review Helper

在執行 Security Review、deterministic security intake、attack-surface mapping、exploit-path validation，或撰寫結構化 security findings 時使用。

foreverwow0010

代碼質素

Zeroize Audit

Detects missing zeroization of sensitive data in source code and identifies zeroization removed by compiler optimizations, with assembly-level analysis, and control-flow verification. Use for auditing C/C++/Rust code handling secrets, keys, passwords, or other sensitive data.

foolhardy450

安全

Xss Html Injection

Execute comprehensive client-side injection vulnerability assessments on web applications to identify XSS and HTML injection flaws, demonstrate exploitation techniques for session hijacking and credential theft, and validate input sanitization and output encoding mechanisms.

foolhardy450

安全

Windows Privilege Escalation

Provide systematic methodologies for discovering and exploiting privilege escalation vulnerabilities on Windows systems during penetration testing engagements.

foolhardy450

除錯

Wireshark Analysis

Execute comprehensive network traffic analysis using Wireshark to capture, filter, and examine network packets for security investigations, performance optimization, and troubleshooting.

foolhardy450

安全