code-security: Security guidelines for writing secure code. Use when writing code, reviewing code for vulnerabilities, or asking about secure coding practices like 'check for…; semgrep: Run Semgrep static analysis scans and create custom detection rules. Use when asked to scan code with Semgrep, find security vulnerabilities, write custom YAML…
Updated 2026-09-20 14:21:41 +08:00
Use when reviewing code for security vulnerabilities, implementing authentication/authorization, handling user input, or discussing web application security.…
Updated 2026-09-19 05:41:38 +08:00
ctf-reverse: Provides reverse engineering techniques for CTF challenges. Use when the main job is to understand how a compiled, obfuscated, packed, or virtualized target…; ctf-web: Provides web exploitation techniques for CTF challenges. Use when the target is primarily an HTTP application, API, browser client, template engine, identity…; ctf-pwn: Provides binary exploitation techniques for CTF challenges. Use when you already have a vulnerable native target or service and need to turn memory c…
agent-skills
claude-code
claude-code-skills
codex
codex-cli
ctf
ctf-challenges
ctf-tools
gemini
gemini-cli
opencode
security
Updated 2026-09-14 05:09:40 +08:00
penetration-testing-with-strix: Pentest a web app, API, codebase, repository, URL, domain, or IP with Strix — autonomous AI penetration testing that exploits and proves vulnerabilities (OWASP…; fix-security-vulnerabilities-with-strix: Fix security vulnerabilities found by a Strix pentest (open-source CLI or app.strix.ai cloud) — triage by severity, patch the root cause rather than the…; managed-pentesting-with-strix: Run a managed pentest of a web app, API, repository, or local workspace on the…
agents
ai-hacking
ai-penetration-testing
ai-pentesting
ai-security
artificial-intelligence
bug-bounty
code-quality
ctf-tools
cybersecurity
cybersecurity-tools
ethical-hacking
hacking
llm-security
offensive-security
penetration-testing
pentesting-tools
red-teaming
security
security-automation
Updated 2026-09-14 00:40:50 +08:00
pwa-development: Progressive Web Apps - service workers, caching strategies, offline, Workbox; playwright-testing: E2E testing with Playwright - Page Objects, cross-browser, CI/CD; android-kotlin: Android Kotlin development with Coroutines, Jetpack Compose, Hilt, and MockK testing
ai-coding
claude
claude-code
developer-tools
project-initialization
python
react
security
typescript
Updated 2026-09-08 21:24:22 +08:00
ghost-scan-code: Ghost Security - SAST code scanner. Finds security vulnerabilities in source code by planning and executing targeted scans for issues like SQL injection, XSS,…; ghost-scan-secrets: Ghost Security - Secrets and credentials scanner. Scans codebase for leaked API keys, tokens, passwords, and sensitive data. Detects hardcoded secrets and…; ghost-scan-deps: Ghost Security - Software Composition Analysis (SCA) scanner. Scans dependency lockfiles for known vulnerabilities, identifies…
Updated 2026-09-03 17:07:28 +08:00