Menu
Skills neste repositório
O SkillsMP coletou 89 skills de igbuend/grimbard. Abra uma skill para revisar a origem e os detalhes.
igbuend/grimbardMostrando 9 de 89 skills coletadas.
Security anti-pattern for verbose error messages (CWE-209). Use when generating or reviewing code that handles errors, exceptions, or generates user-facing error responses. Detects stack trace exposure and detailed error information leakage to users.
Idioma do texto original: inglês
Security anti-pattern for weak encryption (CWE-326, CWE-327). Use when generating or reviewing code that encrypts data, handles encryption keys, or uses cryptographic modes. Detects DES, ECB mode, static IVs, and custom crypto implementations.
Idioma do texto original: inglês
Security anti-pattern for weak password hashing (CWE-327, CWE-759). Use when generating or reviewing code that stores or verifies user passwords. Detects use of MD5, SHA1, SHA256 without salt, or missing password hashing entirely. Recommends bcrypt, Argon2,…
Idioma do texto original: inglês
Security anti-pattern for XPath injection vulnerabilities (CWE-643). Use when generating or reviewing code that queries XML documents, constructs XPath expressions, or handles user input in XML operations. Detects unescaped quotes and special characters in…
Idioma do texto original: inglês
Security anti-pattern for Cross-Site Scripting vulnerabilities (CWE-79). Use when generating or reviewing code that renders HTML, handles user input in web pages, uses innerHTML/document.write, or builds dynamic web content. Covers Reflected, Stored, and…
Idioma do texto original: inglês
Reconnaissance skill for XSS attack surface — analyzes headers, frameworks, JS libraries, and DOM patterns at a URL to map what makes XSS possible or harder. For ethical hackers preparing for XSS testing.
Idioma do texto original: inglês
Generate security-focused DISCOVERY.md for code review and threat modeling. Use when assessing unfamiliar codebases.
Idioma do texto original: inglês
Legal and ethical guidelines for bug bounties, pentesting, and security research. Use when conducting authorized security testing.
Idioma do texto original: inglês
Analyze SARIF files and generate security reports with CVSS scoring, exploitation scenarios, and remediation guidance. Use when reviewing static analysis results.
Idioma do texto original: inglês