Skills.
Give your AI a better way to work.
A skill is a set of written instructions that teaches an AI how to do one job the way it should be done: review a pull request, plan a migration, write the release notes.
Install one here and it travels with your account into Claude, Claude Code, Cursor and every other client you sign in with.
Category: Security
1,738 results · page 41 of 58
- View details
uav-drone-securitySkillSecurity
UAV/drone security testing — PX4/ArduPilot autopilot attacks, MAVLink protocol fuzzing, RF link hijacking (2.4GHz control / 5.8GHz video), GPS spoofing/jamming, DroneSploit framework, DJI hardware reversing, and counter-UAS methodologies.
Ready to connect★ 71
- View details
vpn-attackSkillSecurity
Virtual Private Networks (VPNs) are a critical component of enterprise network security, providing encrypted tunnels for remote access and site-to-site connectivity.
Ready to connect★ 71
- View details
web-auth-bypassSkillSecurity
Authentication Bypass refers to attackers exploiting design flaws or implementation vulnerabilities in authentication mechanisms to bypass the normal authentication process and gain unauthorized access.
Ready to connect★ 71
- View details
web-deserializationSkillSecurity
Deserialization vulnerabilities arise when an application reconstructs objects from byte streams (Java), serialized strings (PHP), Base64 blobs (.NET), or pickle data (Python) supplied by the client.
Ready to connect★ 71
- View details
wifi-pentestSkillSecurity
WiFi security assessment skills: covering wireless network reconnaissance, WPA/WPA2 handshake capture and offline cracking, WPS PIN brute forcing, Evil Twin attacks, wireless sniffing, and deauthentication attacks.
Ready to connect★ 71
- View details
cloud-identity-and-authSkillSecurity
Identity, authentication, authorization, and token management for cloud platforms. Covers Keystone-style scoped tokens, OAuth 2.0 flows, OpenID Connect, JWT structure and pitfalls, federation with SAML/OIDC, service-to-service auth with mTLS and SPIFFE, principle of least privilege, IAM role design,
Ready to connect★ 69
- View details
data-privacySkillSecurity
Understanding and managing what digital services collect, store, share, and infer about you. Covers password security and entropy, multi-factor authentication, privacy settings, data minimization, the difference between first-party and third-party tracking, cookies and fingerprinting, privacy laws (
Ready to connect★ 69
- View details
network-fundamentals-cloudSkillSecurity
Networking fundamentals as they apply to cloud infrastructure — virtual networks, subnets, routers, NAT, floating IPs, security groups, VLAN/VXLAN segmentation, load balancing, SDN concepts, and how Neutron-style cloud networks sit on top of physical topology. Covers TCP behavior at scale, congestio
Ready to connect★ 69
- View details
openstack-neutronSkillSecurity
OpenStack Neutron software-defined networking service. Provides network abstraction for cloud instances including security groups, floating IPs, DHCP, L3 routing, ML2 plugin architecture with OVN/OVS backends, network namespaces, provider and tenant networks, VXLAN/VLAN/flat network types, and port
Ready to connect★ 69
- View details
security-checkSkillSecurity
Scan for hardcoded secrets, credentials, tokens, and security vulnerabilities
Ready to connect★ 69
- View details
abusing-shadow-credentials-for-privescSkillSecurity
Take over Active Directory accounts by writing attacker-controlled public keys to msDS-KeyCredentialLink (Shadow Credentials) with pyWhisker, Whisker, or Certipy, then authenticate via PKINIT to recover the target's NT hash without a password reset. Use when BloodHound shows GenericWrite/GenericAll/
Ready to connect★ 68
- View details
attacking-oauth-with-device-code-phishingSkillSecurity
Run OAuth 2.0 device-code and illicit-consent phishing attacks against
Ready to connect★ 68
- View details
auditing-entra-id-with-aadinternalsSkillSecurity
Drive the AADInternals PowerShell toolkit to perform Microsoft Entra ID tenant reconnaissance, access-token acquisition across Microsoft APIs, and federation/AD FS backdoor testing (Golden SAML, T1606.002) for defensive validation. Use during an authorized Entra ID/Microsoft 365 red-team assessment
Ready to connect★ 68
- View details
building-c2-redirector-infrastructureSkillSecurity
Build dumb-pipe and traffic-filtering C2 redirectors with nginx (proxy_pass) and Apache (mod_rewrite), deriving filter rules from a Malleable C2 profile, layering Let's Encrypt TLS, and applying OPSEC controls like domain fronting and UA/geo filtering. Use when standing up red-team C2 that must surv
Ready to connect★ 68
- View details
coercing-authentication-with-coercer-petitpotamSkillSecurity
Trigger machine account authentication with PetitPotam (MS-EFSR) and Coercer (MS-RPRN, MS-DFSNM, MS-FSRVP, MS-EVEN) via Coercer's scan/coerce/fuzz modes, feeding the coerced NTLM auth into a relay against AD CS Web Enrollment (ESC8), LDAP (RBCD), or SMB. Use in authorized engagements to complete a c
Ready to connect★ 68
- View details
conducting-gdpr-compliance-assessmentSkillSecurity
Conduct comprehensive GDPR compliance assessments by evaluating data processing activities against EU Regulation 2016/679, including Article 30 records of processing, lawful basis validation, data subject rights implementation, Data Protection Impact Assessments (DPIAs) under Article 35, breach noti
Ready to connect★ 68
- View details
doubt-driven-developmentSkillSecurity
Subjects every non-trivial decision to a fresh-context adversarial review before it stands. Use when correctness matters more than speed, when working in unfamiliar code, when stakes are high (production, security-sensitive logic, irreversible operations), or any time a confident output would be che
Ready to connect★ 67
- View details
active-use-toSkillSecurity
Use this skill to implement TLS security profiles for OpenShift workloads.
Ready to connect★ 66
- View details
alterlab-cosmicSkillSecurity
Access the COSMIC catalogue of somatic mutations in cancer to query somatic mutations, the Cancer Gene Census, mutational signatures, and gene fusions (authentication required). Use when curating known cancer driver genes, looking up recurrent somatic mutations in a gene, or interpreting mutational
Ready to connect★ 66
- View details
alterlab-depmapSkillSecurity
Query the Cancer Dependency Map (DepMap) for cancer cell line gene dependency scores (CRISPR Chronos), drug sensitivity data, and gene effect profiles. Use when identifying cancer-specific genetic vulnerabilities, finding synthetic lethal interactions, checking whether a gene is essential in given c
Ready to connect★ 66
- View details
multi-perspective-reviewSkillSecurity
Use when a diff needs four parallel perspective reviewers (Security, Performance, Quality, Accessibility). Creates an ephemeral SAM plan, collects structured verdicts, synthesizes them into one deduplicated cross-referenced punch list, prints one summary line per perspective, and exits non-zero if a
Ready to connect★ 66
- View details
perl-validateSkillSecurity
This skill should be used when the user asks to "validate Perl script", "check Perl syntax", "verify Perl code", "/perl-validate", or mentions script validation, compile check, security review, or best practice compliance for Perl code.
Ready to connect★ 66
- View details
ship-safeSkillSecurity
Run ship-safe security and quality audit on the current project. Executes npx ship-safe audit . and reports findings by severity. Use before shipping any feature or PR.
Ready to connect★ 66
- View details
skillsaw-review-panelSkillSecurity
Use when reviewing a skillsaw PR. Dispatches 7 specialist reviewers (Architecture, Python Expert, Security & Supply Chain, QA Engineer, Technical Writer, Ecosystem, Slopinator) as parallel sub-agents by default, then synthesizes a single verdict. Use --serial for cheaper inline execution.
Ready to connect★ 66
- View details
autonomous-red-teamerSkillSecurity
AI-driven dynamic security fuzzing, exploit generation (XSS, SQLi, SSRF, Prompt Injection), and automated patch remediation.
Ready to connect★ 50
- View details
desktop-electron-expertSkillSecurity
Expert guide for Electron 33+ desktop application development — Electron Forge, context isolation, IPC security, native menus, auto-updates, and multi-window management / Panduan ahli pengembangan desktop Electron 33+.
Ready to connect★ 50
- View details
malware-checkSkillSecurity
Analyze code, binaries (.exe, .app, .dll, .apk, .ipa), and projects for malicious patterns, backdoors, reverse shells, crypto miners, ransomware, supply chain attacks, and privacy violations. Use this skill whenever the user asks to check if code is malicious, scan a binary for malware, verify an ap
Ready to connect★ 64
- View details
mcp-server-architectSkillSecurity
Ultimate guide for designing, building, and security-hardening modern AI Tools/Bots via Model Context Protocol (MCP) in TypeScript and Python / Panduan utama merancang, membangun, dan mengamankan AI Tools/Bots modern melalui Model Context Protocol (MCP) dalam TypeScript dan Python.
Ready to connect★ 50
- View details
report-announcement-listSkillSecurity
Query a paginated list of report announcements by announcement date, with optional filtering by security code. Use when the user mentions 「报告公告列表」「公告列表」「某日公告」or "report announcement list". Returns announcement titles/attachment info/processing status and announcement IDs; announcement IDs can be use
Ready to connect★ 64
- View details
report-announcement-summarySkillSecurity
Queries the summary, title, security information, and processing status of a single report announcement by announcement ID. Use when the user mentions "报告公告摘要" (report announcement summary), "公告摘要" (announcement summary), "单条公告详情" (single announcement details), or "report announcement summary". If t
Ready to connect★ 64
What is a skill?
A skill is plain text, usually a SKILL.md file and the scripts it refers to, written for an AI rather than for a person. It carries the steps, the house rules and the examples a good answer needs, so you stop pasting the same briefing into every new chat.
52,524 of the 52,958 skills listed here can be served through ahel today, and they come from public repositories. Each one has its own page with the instructions themselves on it, so you can read what a skill will tell your AI to do before you install it.
Install one and every AI you use gets it
Installing a skill adds it to your gateway and turns it on in the same step. Claude Code surfaces it as a slash command; any client can read the full instructions with the skill_read tool.
Nothing is copied into a project folder. The instructions are served from your account, so the same skill is there in every AI you connect, and turning it off removes it from all of them at once.