Menu
O SkillsMP coletou 27 skills de jd-opensource/JoySafeter. Abra uma skill para revisar a origem e os detalhes.
Mostrando 27 de 27 skills coletadas.
Guide for creating effective skills. This skill should be used when users want to create a new skill (or update an existing skill) that extends an agent's capabilities with specialized knowledge, workflows, or tool integrations.
Idioma do texto original: inglês
OpenClaw 安全检测工具，基于安全实践指南验证配置安全、权限隔离、网络策略、日志审计和运行时完整性
Idioma do texto original: chinês
OpenClaw 攻击模式检测工具，识别数据外传、反弹Shell、文件泄露、Prompt注入、供应链投毒等高危行为，支持 MITRE ATT&CK 映射
Idioma do texto original: chinês
OpenClaw Skills 全方位安全审计工具，检测供应链投毒、Prompt注入、恶意代码模式、权限越权和依赖风险
Idioma do texto original: chinês
Implements Manus-style file-based planning for complex tasks. Creates task_plan.md, findings.md, and progress.md. Use when starting complex multi-step tasks, research projects, or any task requiring >5 tool calls. Now with automatic session recovery after…
Idioma do texto original: inglês
AI/LLM application security testing — prompt injection, jailbreaking, data exfiltration, and insecure output handling per OWASP LLM Top 10.
Idioma do texto original: inglês
Deep OWASP API Security Top 10 testing for REST, GraphQL, gRPC, and WebSocket APIs — BFLA, mass assignment, rate limiting, and unsafe consumption.
Idioma do texto original: inglês
Business logic vulnerability testing — workflow bypass, payment manipulation, state machine abuse, and function limit circumvention per WSTG-BUSL.
Idioma do texto original: inglês
Advanced client-side attacks — CORS misconfiguration, WebSocket security, clickjacking, postMessage abuse, CSS injection, and browser storage vulnerabilities.
Idioma do texto original: inglês
Cloud security posture management and container security assessment for AWS, Azure, GCP, and Kubernetes.
Idioma do texto original: inglês
Security header auditing, TLS configuration testing, HTTP method analysis, CSP bypass assessment, and deployment hardening verification.
Idioma do texto original: inglês
Binary exploitation (Pwn) and reverse engineering tools for CTF challenges and software analysis.
Idioma do texto original: inglês
Cryptography tools for solving CTF challenges involving ciphers, hashing, and weak encryption.
Idioma do texto original: inglês
Digital forensics, steganography, and packet analysis for CTF challenges and investigation.
Idioma do texto original: inglês
Professional web application and API security testing workflows using OWASP Top 10 methodologies.
Idioma do texto original: inglês
Proof-driven exploitation with 4-level evidence system, bypass exhaustion protocol, mandatory evidence checklists, and strict EXPLOITED/POTENTIAL/FALSE_POSITIVE classification.
Idioma do texto original: inglês
HTTP request smuggling, desync attacks, cache poisoning, and protocol-level vulnerability testing.
Idioma do texto original: inglês
OWASP Mobile Top 10 security testing for Android and iOS — local storage, certificate pinning bypass, IPC abuse, and binary protections.
Idioma do texto original: inglês
Internal network penetration testing, Active Directory enumeration, and lateral movement simulation.
Idioma do texto original: inglês
Open Source Intelligence gathering and attack surface management for external reconnaissance.
Idioma do texto original: inglês
Concurrency exploitation — race conditions, TOCTOU vulnerabilities, and parallel request abuse in web applications.
Idioma do texto original: inglês
White-box attack surface mapping — correlate external scans, browser exploration, and source code into structured endpoint inventory, role architecture, and authorization vulnerability candidates.
Idioma do texto original: inglês
Discover hardcoded credentials, leaked API keys, exposed configuration files, sensitive data in artifacts, and information disclosure via error handling.
Idioma do texto original: inglês
Software supply chain security — dependency confusion, CI/CD pipeline attacks, lockfile integrity, and build artifact verification.
Idioma do texto original: inglês
通过原始 HTTP 请求操作和严格验证自动验证 Web 漏洞（开放重定向、XSS）。
Idioma do texto original: chinês
Source code security audit using backward taint analysis, slot type classification, render context verification, and 3-phase parallel review producing an exploitation queue.
Idioma do texto original: inglês
Comprehensive PDF manipulation toolkit for extracting text and tables, creating new PDFs, merging/splitting documents, and handling forms. When Claude needs to fill in a PDF form or programmatically process, generate, or analyze PDF documents at scale.
Idioma do texto original: inglês