Hunt spa api
Discover a single-page-app's hidden backend API from its public JS bundle, then test that API for broken access control / missing authentication.
Skills for your AI
7,816 skills your AI can use
Hunt springboot
Hunt Spring Boot specific vulnerabilities
Hunt sqli
Hunting skill for sqli vulnerabilities.
Hunt ssrf
Hunting skill for ssrf vulnerabilities.
Hunt ssti
Hunt server-side template injection (SSTI) across Jinja2 (Flask/Django), Twig (Symfony), Freemarker (Java), ERB (Rails), Spring, Velocity, Mako, Thymeleaf, Smarty.
Hunt subdomain
Hunting skill for subdomain takeover vulnerabilities.
Hunt tls network
Hunt TLS/SSL and DNS misconfigurations
Hunt websocket
Hunt WebSocket vulnerabilities
Hunt xss
Hunting skill for xss vulnerabilities.
Hunt xxe
Hunting skill for xxe vulnerabilities.
I have adhd
Shape output for ADHD readers: next action first, numbered steps, restated state, no tangents, time estimates, visible wins. Toggle with /i-have-adhd.
Identity access management
Set up and manage SSO, SCIM provisioning, and MFA for startup teams using Google Workspace, Okta, or Azure AD.
Incident management
Implement incident management processes and escalation procedures. Configure on-call schedules and post-incident reviews. Use when managing production incidents.
Incident response
Handle security incidents with IR playbooks and procedures.
Interview me
Draw out what the user actually wants with one-question-at-a-time interviews until intent is clear — before any plan, spec, or code exists.
Ios redteam pipeline
End-to-end iOS red-team pipeline
Iso27001 compliance
Implement ISO 27001 Information Security Management System. Configure ISMS controls and risk management. Use when implementing enterprise security frameworks.
Jenkins
Create and manage Jenkins CI/CD pipelines, configure agents, manage plugins, and automate builds.
Jev use
Route enumerable judgment steps - did it work, which option, how risky, is this safe to run - to the Jev judgment model through the jev_judge and jev_gate MCP tools, batched into one call per state.
Kubernetes hardening
Implement Kubernetes security contexts, Pod Security Standards, and network policies.
Kubernetes ops
Deploy, scale, and manage Kubernetes workloads.
Kustomize
Customize Kubernetes manifests without templating using Kustomize.
Ledger tasks yylo
Use YYLO Ledger task management: create, list, search, get, mark, update, archive, deps, ready, order and merge with dependencies.
Linux administration
System administration for Linux servers. Manage packages, services, and system configuration. Use when administering Linux systems.