AI Skills Registry

This skill should be used when the user asks to "plan a red team engagement", "scope a penetration test", "design a security assessment meth

Provides patterns for unit testing Spring Security with `@PreAuthorize`, `@Secured`, `@RolesAllowed`. Validates role-based access control an

Implement Role-Based Access Control (RBAC), permissions management, and authorization policies. Use when building secure access control syst

Provide comprehensive techniques for testing REST, SOAP, and GraphQL APIs during bug bounty hunting and penetration testing engagements. Cov

Azure Key Vault Secrets SDK for Rust. Use for storing and retrieving secrets, passwords, and API keys. Triggers: "keyvault secrets rust", "S

Helps with Prowler repository CI and PR gates (GitHub Actions workflows). Trigger: When investigating CI checks failing on a PR, PR title va

Audit whistleblower systems and draft compliant reporting policies. Use when assessing or building whistleblower programs.

Alibaba Cloud Governance Center evaluation report skill. Use for querying governance maturity check results, generating structured risk repo

Use when implementing cheat codes, hidden interactions, or unlockable content based on player input/behavior.

Mobile SSL pinning bypass playbook. Use when intercepting HTTPS traffic from mobile applications that implement certificate pinning, public

Use when designing iOS interfaces, implementing accessibility (VoiceOver, Dynamic Type), handling dark mode, ensuring adequate touch targets

Verify technical accuracy of JavaScript concept pages by checking code examples, MDN/ECMAScript compliance, and external resources to preven

Regulatory compliance testing for GDPR, CCPA, HIPAA, SOC2, PCI-DSS and industry-specific regulations. Use when ensuring legal compliance, pr

macOS security bypass playbook. Use when targeting macOS endpoints and need to bypass TCC, Gatekeeper, SIP, sandbox, code signing, or entitl

Reference skill for Zoom authentication. Use after routing to an auth workflow when choosing app credentials, grant types, scopes, token ref

Security engineer — IAM, secrets, threat modeling, hardening, auth, and supply chain security.

SAML SSO assertion attack playbook. Use when testing signature validation, assertion wrapping, audience restrictions, ACS handling, XML trus

Secure REST APIs with authentication, rate limiting, CORS, input validation, and security middleware. Use when building or hardening API end

This skill should be used when the user asks to "set up Nuxt Studio", "configure Studio OAuth", "deploy Studio to Cloudflare", "add visual e

Configure API gateways for routing, authentication, rate limiting, and request/response transformation. Use when deploying microservices, se

This skill should be used when the user asks to "audit Google Workspace", "check GWS security settings", "set up Google Workspace authentica

Alibaba Cloud KMS Secret Management Skill. Used for managing secrets in KMS, supporting create, delete, update, query operations, version ma