القائمة
Skills في هذا المستودع
جمع SkillsMP عدد ٨٩ من skills من igbuend/grimbard. افتح أي skill لمراجعة مصدره وتفاصيله.
igbuend/grimbardعرض ٩ من أصل ٨٩ skills مجمعة.
Security anti-pattern for verbose error messages (CWE-209). Use when generating or reviewing code that handles errors, exceptions, or generates user-facing error responses. Detects stack trace exposure and detailed error information leakage to users.
لغة النص الأصلي: الإنجليزية
Security anti-pattern for weak encryption (CWE-326, CWE-327). Use when generating or reviewing code that encrypts data, handles encryption keys, or uses cryptographic modes. Detects DES, ECB mode, static IVs, and custom crypto implementations.
لغة النص الأصلي: الإنجليزية
Security anti-pattern for weak password hashing (CWE-327, CWE-759). Use when generating or reviewing code that stores or verifies user passwords. Detects use of MD5, SHA1, SHA256 without salt, or missing password hashing entirely. Recommends bcrypt, Argon2,…
لغة النص الأصلي: الإنجليزية
Security anti-pattern for XPath injection vulnerabilities (CWE-643). Use when generating or reviewing code that queries XML documents, constructs XPath expressions, or handles user input in XML operations. Detects unescaped quotes and special characters in…
لغة النص الأصلي: الإنجليزية
Security anti-pattern for Cross-Site Scripting vulnerabilities (CWE-79). Use when generating or reviewing code that renders HTML, handles user input in web pages, uses innerHTML/document.write, or builds dynamic web content. Covers Reflected, Stored, and…
لغة النص الأصلي: الإنجليزية
Reconnaissance skill for XSS attack surface — analyzes headers, frameworks, JS libraries, and DOM patterns at a URL to map what makes XSS possible or harder. For ethical hackers preparing for XSS testing.
لغة النص الأصلي: الإنجليزية
Generate security-focused DISCOVERY.md for code review and threat modeling. Use when assessing unfamiliar codebases.
لغة النص الأصلي: الإنجليزية
Legal and ethical guidelines for bug bounties, pentesting, and security research. Use when conducting authorized security testing.
لغة النص الأصلي: الإنجليزية
Analyze SARIF files and generate security reports with CVSS scoring, exploitation scenarios, and remediation guidance. Use when reviewing static analysis results.
لغة النص الأصلي: الإنجليزية