Security skills

This skill helps you design and configure API gateways for routing, security, and performance across Kong, Nginx, AWS API Gateway, and Traefik.

This skill helps you build installable PWAs with offline support, service workers, and install prompts to enhance reliability and engagement.

This skill helps you configure world permissions, manage namespaces and resource ownership to enforce access control in your Dojo world.

This skill standardizes how to implement and review required-field validation in OpenLark feature crates using macros and functions.

This skill guides enterprise-grade project setup with monorepo, microservices, and AI-native patterns to scale with high availability.

This skill guides you in building cross-platform desktop apps with web technologies using Electron and Tauri, optimizing performance and security.

This skill helps improve search rankings and harden security by applying SEO best practices, meta tags, and vulnerability checks across the app.

This skill guides rapid spec-first reviews, ensuring functionality correctness before code quality, and surfaces fixes with concrete, actionable guidance.

This skill helps you design architecture focused on functionality, mapping user flows to APIs, data models, and observability for reliable systems.

This skill helps security researchers perform Apple reverse engineering tasks by guiding and executing IPSW-based analysis of iOS/macOS binaries.

This skill coordinates pentest activities, deploying specialized agents, aggregating findings, and generating comprehensive reports to streamline engagement

This skill analyzes Wayback snapshots to detect technology migrations over time, revealing historical stack changes and migration patterns for a domain.

This skill detects cloud providers, PaaS, and serverless platforms from signals such as IP, DNS, headers, and TLS to identify infrastructure.

This skill automates Claude Code workflows with event-driven hooks, enabling input validation, safe tool use, formatting, auditing, and CI/CD integration.

This skill enumerates subdomains for a domain using CT logs, passive DNS, and dorks to map attack surface.

This skill analyzes an organization's security posture by evaluating headers, CSP, HSTS, security.txt, and email security signals to identify gaps.

This skill infers frontend technologies by analyzing signals from JavaScript, HTML, and CSS to identify frameworks and UI patterns.

This skill analyzes HTML to extract technology signals from meta tags, comments, script patterns, and structured data for security research.

This skill queries Certificate Transparency logs to discover SANs, infer subdomain patterns, and surface potential internal naming conventions for security

This skill identifies third-party services such as payments, analytics, auth, CRM, and support from signals across a target.

This skill automates HackerOne workflows by parsing scope CSVs, deploying parallel pentest agents, validating PoCs, and generating ready-to-submit reports.