Menu
SkillsMP a collecté 27 skills depuis jd-opensource/JoySafeter. Ouvrez un skill pour examiner sa source et ses détails.
Affichage de 27 skills collectés sur 27.
Guide for creating effective skills. This skill should be used when users want to create a new skill (or update an existing skill) that extends an agent's capabilities with specialized knowledge, workflows, or tool integrations.
Langue du texte source : anglais
OpenClaw 安全检测工具，基于安全实践指南验证配置安全、权限隔离、网络策略、日志审计和运行时完整性
Langue du texte source : chinois
OpenClaw 攻击模式检测工具，识别数据外传、反弹Shell、文件泄露、Prompt注入、供应链投毒等高危行为，支持 MITRE ATT&CK 映射
Langue du texte source : chinois
OpenClaw Skills 全方位安全审计工具，检测供应链投毒、Prompt注入、恶意代码模式、权限越权和依赖风险
Langue du texte source : chinois
Implements Manus-style file-based planning for complex tasks. Creates task_plan.md, findings.md, and progress.md. Use when starting complex multi-step tasks, research projects, or any task requiring >5 tool calls. Now with automatic session recovery after…
Langue du texte source : anglais
AI/LLM application security testing — prompt injection, jailbreaking, data exfiltration, and insecure output handling per OWASP LLM Top 10.
Langue du texte source : anglais
Deep OWASP API Security Top 10 testing for REST, GraphQL, gRPC, and WebSocket APIs — BFLA, mass assignment, rate limiting, and unsafe consumption.
Langue du texte source : anglais
Business logic vulnerability testing — workflow bypass, payment manipulation, state machine abuse, and function limit circumvention per WSTG-BUSL.
Langue du texte source : anglais
Advanced client-side attacks — CORS misconfiguration, WebSocket security, clickjacking, postMessage abuse, CSS injection, and browser storage vulnerabilities.
Langue du texte source : anglais
Cloud security posture management and container security assessment for AWS, Azure, GCP, and Kubernetes.
Langue du texte source : anglais
Security header auditing, TLS configuration testing, HTTP method analysis, CSP bypass assessment, and deployment hardening verification.
Langue du texte source : anglais
Binary exploitation (Pwn) and reverse engineering tools for CTF challenges and software analysis.
Langue du texte source : anglais
Cryptography tools for solving CTF challenges involving ciphers, hashing, and weak encryption.
Langue du texte source : anglais
Digital forensics, steganography, and packet analysis for CTF challenges and investigation.
Langue du texte source : anglais
Professional web application and API security testing workflows using OWASP Top 10 methodologies.
Langue du texte source : anglais
Proof-driven exploitation with 4-level evidence system, bypass exhaustion protocol, mandatory evidence checklists, and strict EXPLOITED/POTENTIAL/FALSE_POSITIVE classification.
Langue du texte source : anglais
HTTP request smuggling, desync attacks, cache poisoning, and protocol-level vulnerability testing.
Langue du texte source : anglais
OWASP Mobile Top 10 security testing for Android and iOS — local storage, certificate pinning bypass, IPC abuse, and binary protections.
Langue du texte source : anglais
Internal network penetration testing, Active Directory enumeration, and lateral movement simulation.
Langue du texte source : anglais
Open Source Intelligence gathering and attack surface management for external reconnaissance.
Langue du texte source : anglais
Concurrency exploitation — race conditions, TOCTOU vulnerabilities, and parallel request abuse in web applications.
Langue du texte source : anglais
White-box attack surface mapping — correlate external scans, browser exploration, and source code into structured endpoint inventory, role architecture, and authorization vulnerability candidates.
Langue du texte source : anglais
Discover hardcoded credentials, leaked API keys, exposed configuration files, sensitive data in artifacts, and information disclosure via error handling.
Langue du texte source : anglais
Software supply chain security — dependency confusion, CI/CD pipeline attacks, lockfile integrity, and build artifact verification.
Langue du texte source : anglais
通过原始 HTTP 请求操作和严格验证自动验证 Web 漏洞（开放重定向、XSS）。
Langue du texte source : chinois
Source code security audit using backward taint analysis, slot type classification, render context verification, and 3-phase parallel review producing an exploitation queue.
Langue du texte source : anglais
Comprehensive PDF manipulation toolkit for extracting text and tables, creating new PDFs, merging/splitting documents, and handling forms. When Claude needs to fill in a PDF form or programmatically process, generate, or analyze PDF documents at scale.
Langue du texte source : anglais