Skills
96,770 packaged capabilities and playbooks for agents. Install any of them with one command.
Security
Look up BTI intelligence, tag evidence, direct relationships, and historical resolutions for an IP, domain, or MD5, and download VDC samples with authorization. Use for standalone IOC lookups, sample requests, or gathering supporting evidence for an insight investigation; no insight ID is needed. Does not handle entity correlation within the platform, endpoint compromise determinations, sample submission, or write-back to the platform.
Security-test desktop thick-client applications (.NET/WPF, Java, Electron, native Win32) against their local and network attack surface — proxying non-HTTP traffic, extracting secrets and DB connection strings from config/registry/memory, bypassing client-side trust controls, and reviewing update channels and DLL search order. Use when assessing an installed desktop app that talks to a backend, when Burp sees no traffic from a fat client, or when a two-tier app connects straight to a database.
Guides compliance with Thailand's Personal Data Protection Act B.E. 2562 (2019). Covers consent framework, DPO requirements, PDPC enforcement, lawful bases for processing, cross-border transfer mechanisms, and data subject rights under the PDPA. Keywords: Thailand PDPA, PDPC, consent, DPO, cross-border transfers, data subject rights.
Web front-end reverse engineering skill: for reversing web front-end JS/WASM logic, deobfuscation/unpacking, bundle analysis (Webpack/Vite/Rollup), JS-VM/custom VM bytecode recovery, WebCrypto/custom encryption and API signing algorithm reproduction, source map rebuilding, browser anti-debugging bypass, protocol/request replay, and CTF Web challenges. Always trigger when the user mentions "reverse a website / reproduce signing or encryption parameters / recover JS logic / packet capture replay / VM / WASM / obfuscator / JSFuck / eval-pack". This skill is not for front-end development, performance optimization, general encryption teaching, penetration scanning, or Android reverse engineering.
Use zombie for multi-protocol brute-forcing. zombie is a high-performance brute-forcing tool from chainreactors supporting 20+ protocols including SSH/FTP/MySQL/MSSQL/PostgreSQL/Redis/SMB/RDP/SNMP/LDAP/VNC, with built-in smart dictionary generation and a distributed mode. Differences from hydra: zombie supports more protocols, faster concurrency, and rule-based dictionary generation. Use this skill for batch weak password detection and credential spraying
A knowledge base of web/JS reverse-engineering case studies distilled from all 42 articles on 1997.pro. Applies to case leads such as Akamai/Kasada/PX/reese84/同盾/a_bogus/腾讯滑块/阿里滑块/JSVMP/227/226/wasm/protobuf/rid/fuid/fs/bx-pp/run_js/storage.estimate/animationend, as well as scenario assessment, method routing, and case comparison for risk-control fingerprints, environment patching, JSVMP/flat flow/WASM, CAPTCHAs, and protocol parameter chains; used by default together with web-js-reverse-master-flow and the three MCPs jshook + js-reverse + chrome-devtools-mcp.
Implements 42 CFR Part 2 protections for substance use disorder patient records. Covers written consent requirements stricter than HIPAA, re-disclosure prohibition, court order procedures, qualified service organization agreements, and 2024 amendments aligning Part 2 with HIPAA. Keywords: 42 CFR Part 2, substance use disorder, SUD records, re-disclosure, consent, Part 2 amendments.
AD domain persistence techniques. Use when you already have domain admin or local administrator privileges and need to establish persistent access so you can return to the target environment after reboots or password changes. Covers host-level persistence (scheduled tasks / registry Run keys / COM hijacking / WMI event subscriptions / Windows services / Startup folder), domain-level persistence (Golden Ticket / Silver Ticket / Skeleton Key / DSRM / AdminSDHolder), advanced techniques such as DCShadow / GoldenGMSA, cleanup commands, and detection evasion
Guides assessment of third-country adequacy decisions under GDPR Article 45 for international data transfers. Covers the current EC adequacy decisions list, adequacy assessment criteria, partial adequacy handling, and monitoring of adequacy decision reviews. Keywords: adequacy decision, Article 45, third country, adequate protection, EC adequacy list.
Implements GDPR Art. 22 automated decision-making and AI Act Art. 14 human oversight requirements for AI systems. Covers identification of solely automated decisions, meaningful human intervention design, logic explanation mechanisms, and contestation procedures. Keywords: Art. 22, automated decision, human oversight, AI Act, profiling, contestation.
Manages AI model retention and machine unlearning requirements. Covers training data deletion verification, model versioning for compliance, machine unlearning techniques (SISA, gradient-based), and retraining triggers. Keywords: AI retention, machine unlearning, model versioning, training data deletion, retraining, storage limitation.
Implements data subject rights mechanisms for AI systems including right to explanation of AI decisions, contestation procedures, human review, model output correction, and training data access. Covers GDPR Arts. 15-22 and AI Act Art. 86. Keywords: data subject rights, AI explanation, contestation, human review, training data access, model correction.
Provides combined DPIA and AI Act conformity assessment template with integrated risk scoring matrix. Covers GDPR Art. 35 DPIA elements, AI Act high-risk system requirements, mitigation measures, and human oversight assessment. Keywords: DPIA template, conformity assessment, risk scoring, AI Act, combined assessment, high-risk AI.
Alibaba Cloud penetration testing methodology. Use when the target uses Alibaba Cloud services, when you find oss-*.aliyuncs.com assets, when you obtain an Alibaba Cloud AccessKey (starting with LTAI), when the 100.100.100.200 metadata endpoint is reachable from inside an ECS instance, or when you need to assess the security of Alibaba Cloud services such as RAM / ECS / OSS / RDS / ACK / FC. Covers RAM privilege escalation, ECS takeover, OSS bucket exploitation, RDS database attacks, ACK container clusters, FC function compute, SLB load balancing, Log Service, and KMS key management
Writing or reviewing code that handles untrusted input, secrets, outbound requests, rendered content, or third-party dependencies — the OWASP Top 10:2025 lens in two modes, writing secure-by-default code and judging the risk a change introduces. Triggers on "is this safe", "secure by default", "harden", "security", "secret", "privacy", "PII", "XSS", "injection", "SSRF", "safe fetch", "access control", or a dependency review. Covers secrets and environment variables, input validation, output encoding, SSRF, access control and data exposure, and supply-chain risk.
Guides privacy audit risk assessment including risk universe development, inherent and residual risk scoring, control effectiveness evaluation, risk-based audit planning, heat map generation, risk appetite alignment, and audit prioritization by risk exposure. Covers the full audit risk assessment cycle from scoping through ongoing monitoring. Keywords: audit risk assessment, risk universe, inherent risk, residual risk, control effectiveness, risk-based audit planning.
Automated enforcement of GDPR Article 5(1)(e) storage limitation principle. Covers TTL-based deletion, retention policy engines, archival workflows, legal hold exemptions, and lifecycle automation. Includes technical implementation patterns for automated data expiry and defensible deletion across distributed systems.
AWS IAM / Resource Policy analysis methodology. Use when the target involves AWS cloud services and policy files such as IAM policies, resource policies, Lambda code, or CloudFormation templates are provided. Covers identification of dangerous IAM policy patterns, analysis of resource policy principals, Condition key bypass patterns, and derivation of service trust relationship graphs. Use this skill when you find AWS policy files (json/yaml), *.amazonaws.com endpoints, or IAM ARNs
Specialized methodology for AWS IAM privilege escalation. Use when you already have AWS credentials and need to escalate privileges, when the current IAM user/role has limited permissions and you need lateral or vertical escalation, or when you need to analyze IAM policies to find escalation paths. Covers privilege escalation techniques for 46 AWS services, including PassRole abuse, chained AssumeRole escalation, Lambda/EC2/ECS compute service escalation, and exploitation of implicit permissions via NotAction
Overall methodology for penetration testing AWS cloud environments. Use when the target uses AWS cloud services, when you find AWS-related assets (S3 buckets / EC2 instances / Lambda functions / CloudFront distributions), when you obtain AWS credentials (AK/SK/Session Token/IAM Role), or when you need to assess the security of an AWS environment. Provides a full attack decision tree from unauthenticated enumeration to privilege escalation, post-exploitation, and persistence, guiding you to specialized skills for deeper dives. Covers the attack surface of 47+ AWS services
AWS post-exploitation and persistence specialization. Use after obtaining high AWS privileges (Admin/PowerUser) or permissions on specific services when you need to exfiltrate data, move laterally to other accounts/regions, establish persistent backdoors, or clean up attack traces. Covers S3/RDS/DynamoDB/EBS data exfiltration, cross-account AssumeRole lateral movement, Lambda/IAM/EventBridge persistence backdoors, and CloudTrail/GuardDuty evasion techniques
Azure AD / Entra ID attack methodology. Use when the target uses Microsoft 365/Azure cloud environments, when you discover Azure AD authentication flows, or when you obtain Azure credentials. Covers initial access (password spray / phishing), token theft, Service Principal abuse, conditional access bypass, and cross-tenant attacks
Guidance for the security-side use of Azure Monitor and Log Analytics — designing the workspace strategy that feeds Microsoft Sentinel and Defender for Cloud, choosing analytics vs basic vs auxiliary log tiers, retention and archive, table-level transformations to drop noise pre-ingestion, Data Collection Rules (DCRs) and Azure Monitor Agent (AMA), workspace topology (single vs regional vs sovereign), commitment tiers and cost control, customer-managed keys for the workspace, RBAC including table-level RBAC, integration with Sentinel (workspace requirements), and decommissioning legacy MMA. WHEN: Log Analytics workspace design, Azure Monitor security data, Sentinel workspace, log tier basic auxiliary, AMA Azure Monitor Agent, DCR data collection rule, drop columns ingestion transform, log retention archive, workspace CMK, table-level RBAC, log ingestion cost control. DO NOT USE for Sentinel detection authoring (use sentinel-detection-engineering), App Insights instrumentation (use appinsights-instrumentation), or non-security observability.
Manages privacy compliance for employee background checks including criminal record processing under Art. 10 GDPR, DBS checks (UK), national law variations, and reference verification. Applies proportionality and data minimisation to pre-employment screening, defines retention limits, and addresses role-based necessity assessments. Keywords: background check, criminal record, Art. 10, DBS, pre-employment screening, vetting, data minimisation, proportionality.
Use at the start of any bug bounty hunting session, when switching targets, or when feeling lost about what to do next. Master orchestrator combining the 5-phase non-linear hunting workflow with the critical thinking framework (developer psychology, anomaly detection, What-If experiments). Routes to all other skills based on the current hunting phase. Also use when asking “what should I do next” or “where am I in the process.”
Use this skill when reviewing BoxLang code for quality, correctness, security vulnerabilities, performance issues, style violations, or when providing structured code review feedback following BoxLang best practices and security guidelines.
C2 beacon configuration extraction and analysis. Use when you capture beacon samples, memory dumps, or network traffic from C2 frameworks such as Cobalt Strike/Sliver/Havoc. Extract key intelligence such as C2 addresses, communication protocols, Malleable Profiles, and watermarks. Red team perspective: understand how the blue team extracts IOCs from beacons to improve C2 OPSEC
Guidance for safely deploying Microsoft 365 Copilot — end-to-end readiness covering oversharing remediation, SharePoint Advanced Management (SAM) restricted sites and content discovery, sensitivity label coverage, Purview DLP for Copilot, Restricted SharePoint Search (RSS) interim safeguard, site lifecycle and ownership, Copilot interaction auditing, Copilot in Defender XDR alerts, prompt-shield risks, licensing prerequisites, and a phased rollout that doesn't surface confidential data on day one. WHEN: M365 Copilot rollout, Copilot oversharing remediation, SAM, SharePoint Advanced Management, Restricted SharePoint Search, RSS Copilot, sensitivity labels Copilot, DLP for Copilot, Copilot audit, safe Copilot deployment, Copilot pilot, prevent Copilot data leakage. DO NOT USE for tenant-wide oversharing program design (use m365-oversharing), Purview DSPM for AI alone (use purview-dspm-ai), or Microsoft Foundry agent security (use microsoft-agent-365).
XSS vulnerability scanning with DalFox. Use when you need to detect reflected/stored/DOM XSS, analyze parameter injection points, or bypass WAFs. DalFox supports automatic parameter analysis, DOM mining, Blind XSS callbacks, WAF bypass, and automatic PoC generation. This skill should be used in any scenario involving XSS vulnerability detection, parameter testing, or WAF bypass
Database lateral movement and cross-database attacks. Use when you have obtained access to one database (PostgreSQL/MySQL/MSSQL) and need to move laterally to other databases or internal services. Covers PostgreSQL dblink cross-database connections, MSSQL Linked Server lateral movement, MySQL federated engine cross-database access, and database → SSRF → internal network probing. When the target network is isolated but databases can communicate (databases usually have looser network policies than application servers), this is the key path to break isolation. Use this skill for any scenario involving communication between databases, lateral movement to internal databases, or cross-database queries
Guidance for Microsoft Defender for IoT — agentless OT/ICS network detection and response for industrial environments, plus enterprise IoT (EIoT) protection integrated with Defender XDR. Covers OT sensor deployment (physical/virtual, SPAN/TAP), Purdue model alignment, on-premises management console, cloud-managed sensors, EIoT (printers, cameras, VoIP) discovered through MDE, asset inventory, vulnerability data, threat intelligence, and integration with Sentinel and Defender XDR. WHEN: Defender for IoT, OT security, ICS security, SCADA monitoring, Purdue model network security, OT sensor deployment, SPAN port monitoring, enterprise IoT discovery, unmanaged device protection, factory floor security, NDR for OT, ICS threat detection, IoT asset inventory. DO NOT USE for IoT Hub data-plane security (Azure platform), Azure Sphere device hardening, or generic endpoint EDR (use defender-for-endpoint).
Master dispatcher for deobfuscation workflows. Loads the right combination of deobf and reverse-engineering skills based on target type — native binary, JavaScript, VM-protected, packed, or CTF. Use when you need comprehensive deobfuscation capabilities for any target.
Scans your project for outdated npm, pip, Cargo, Go, or Ruby packages. Runs a CVE security audit. Fetches changelogs, summarizes breaking changes with Gemini, and opens one PR per risk group (patch, minor, major). Includes Diagnosis Mode for install conflicts. Use when asked to update dependencies, check for outdated packages, open dependency PRs, scan for package updates, audit for CVEs, or flag breaking changes in upgrades. Trigger when a user says "check for outdated packages", "update my dependencies", "open PRs for dependency updates", "scan for CVEs", or "which packages need upgrading".
Brute-force enumeration of web directories and files with dirsearch. Use when you need to discover hidden directories, files, admin paths, or backup files. dirsearch ships with high-quality wordlists and supports multiple extensions, recursive scanning, and status code filtering. Use this skill for any scenario involving directory enumeration, path discovery, admin panel discovery, or sensitive file discovery
Guides AI agents through the complete GDPR Data Subject Access Request (DSAR) workflow under Article 15, including identity verification, 30-day deadline calculation with extensions, response formatting, exemptions, and fee provisions. Activate when handling DSAR, access request, subject access, Art. 15, or SAR queries.
Applying the ePrivacy Directive Article 5(3) strictly necessary exemption to classify cookies that do not require consent. Covers exemption criteria, functionality cookies, load balancing, session state, and non-exempt categories with regulatory guidance from EDPB and national DPAs.
Use fingerprintx for application-layer service fingerprinting. Use it when identifying the specific services and protocols running on open ports. fingerprintx supports identification of 51 protocols (SSH/RDP/MySQL/Redis/HTTP/SMB/FTP, etc.), with service metadata in its JSON output. Use this skill for any service identification, protocol probing, or port fingerprinting.
A methodology for firmware security analysis. Covers firmware acquisition (from devices, downloads, UART, or JTAG), firmware unpacking and filesystem extraction (binwalk/firmware-mod-kit), static analysis (hardcoded credentials, encryption keys, backdoors), dynamic analysis (QEMU emulation), vulnerability research, and firmware modification and repackaging. Trigger when an Agent needs to analyze embedded device firmware, extract sensitive information from firmware, or assess the security of IoT devices.
Audits existing game code against design principles — checks server-authority, schema conventions, auth security, payment safety, narrative coherence, and MVP scope drift. Extract the optional component name or path from the user's message (defaults to entire src/). Use after building components or before committing.
Overall methodology for penetration testing GCP cloud environments. Use when the target uses Google Cloud Platform, when GCP-related assets are discovered (GCS Bucket/Compute Engine/Cloud Functions/GKE), when GCP credentials are obtained (Service Account Key/OAuth Token/Metadata Token), or when a security assessment of a GCP environment is required. Provides a full decision tree from unauthenticated enumeration to privilege escalation, post-exploitation, and GCP-to-Workspace traversal. Covers the attack surface of 37+ GCP services
Guides the creation and review of data processing agreements under GDPR Article 28(3), covering all eight mandatory clauses. References the 2021 Standard Contractual Clauses and provides a compliance checklist for processor contracts. Activate when onboarding processors, reviewing DPAs, or auditing processor compliance. Keywords: DPA, data processing agreement, Article 28, processor, mandatory clauses, standard contractual clauses.
Guide for implementing GDPR-valid consent under Article 7 conditions and Article 4(11) definition. Covers five core requirements: freely given, specific, informed, unambiguous, and clear affirmative action. Includes pre-ticked boxes prohibition per Planet49 CJEU C-673/17, consent form audit checklist, and practical implementation patterns.
GitHub Actions workflow review, scaffolding, and security hardening. Use when user says 'review my workflow', 'check my actions', 'scaffold a workflow', 'is my CI correct', 'pin actions', 'OIDC to AWS', or when working in .github/workflows/*.yml files.
Configuring Google Consent Mode v2 for privacy-compliant measurement and advertising. Covers default and update commands, consent state mapping to GA4 and Google Ads, conversion modeling with cookieless pings, and EEA requirements effective March 2024.
Hunt insecure deserialization — Java gadget chains (ysoserial), PHP object injection (phpggc), Python pickle RCE, .NET BinaryFormatter, Ruby Marshal.load, JNDI/Log4Shell. RCE via deserialization is almost always Critical. Use when the target runs Java, PHP serialization, Python pickle, .NET, or Ruby on Rails.
New to MCP?
From what the protocol is to installing your first server, these answers cover most first questions.
An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.