All authors
Claude Skills by plurigrid
github.com/plurigrid2,535 skills6 installs3,507 views
- Owasp Security CheckSecurity audit guidelines for web applications and REST APIs based on OWASP Top 10 and web security best practices. Use when checking code for vulnerabilities, reviewing auth/authz, auditing APIs, or before production deployment.Votes: 0GitHub stars: 61
- Own GoalSave session goals to org files in the goals-*.org format. Auto-increments rank, classifies theme, writes org entry with properties and task checklist.Votes: 0GitHub stars: 61
- Paperproof ValidatorFormal Proof Visualization and Verification for Lean 4Votes: 0GitHub stars: 61
- Parallel FanoutMetaskill that fans out on every interaction, using interaction entropyVotes: 0GitHub stars: 61
- Paypal McpPayPal MCP server integration for invoices, payments, subscriptions, disputes, and transaction reporting via @paypal/mcp.Votes: 0GitHub stars: 61
- PdfComprehensive PDF manipulation toolkit for extracting text and tables,Votes: 0GitHub stars: 61
- Pentest Exploit ValidationProof-driven exploitation with 4-level evidence system, bypass exhaustion protocol, mandatory evidence checklists, and strict EXPLOITED/POTENTIAL/FALSE_POSITIVE classification.Votes: 0GitHub stars: 61
- Performing Access Recertification With SaviyntConfigure and execute access recertification campaigns in Saviynt Enterprise Identity Cloud to validate user entitlements, revoke excessive access, and maintain compliance with SOX, SOC2, and HIPAA.Votes: 0GitHub stars: 61
- Performing Access Review And CertificationConduct systematic access reviews and certifications to ensure users have appropriate access rights aligned with their roles. This skill covers review campaign design, reviewer selection, risk-based pVotes: 0GitHub stars: 61
- Performing Active Directory Bloodhound AnalysisUse BloodHound and SharpHound to enumerate Active Directory relationships and identify attack paths from compromised users to Domain Admin.Votes: 0GitHub stars: 61
- Performing Active Directory Compromise InvestigationInvestigate Active Directory compromise by analyzing authentication logs, replication metadata, Group Policy changes, and Kerberos ticket anomalies to identify attacker persistence and lateral movement paths.Votes: 0GitHub stars: 61
- Performing Active Directory Forest Trust AttackEnumerate and audit Active Directory forest trust relationships using impacket for SID filtering analysis, trust key extraction, cross-forest SID history abuse detection, and inter-realm Kerberos ticket assessment.Votes: 0GitHub stars: 61
- Performing Active Directory Penetration TestConduct a focused Active Directory penetration test to enumerate domain objects, discover attack paths with BloodHound, exploit Kerberos weaknesses, escalate privileges via ADCS/DCSync, and demonstrate domain compromise.Votes: 0GitHub stars: 61
- Performing Active Directory Vulnerability AssessmentAssess Active Directory security posture using PingCastle, BloodHound, and Purple Knight to identify misconfigurations, privilege escalation paths, and attack vectors.Votes: 0GitHub stars: 61
- Performing Adversary In The Middle Phishing DetectionDetect and respond to Adversary-in-the-Middle (AiTM) phishing attacks that use reverse proxy kits like EvilProxy, Evilginx, and Tycoon 2FA to bypass MFA and steal session tokens.Votes: 0GitHub stars: 61
- Performing Agentless Vulnerability ScanningConfigure and execute agentless vulnerability scanning using network protocols, cloud snapshot analysis, and API-based discovery to assess systems without installing endpoint agents.Votes: 0GitHub stars: 61
- Performing Ai Driven Osint CorrelationUse AI and LLM-based reasoning to correlate findings across multiple OSINT sources—username enumeration, email lookups, social media profiles, domain records, breach databases, and dark-web mentions—into unified intelligence profiles with confidence scoring and link analysis.Votes: 0GitHub stars: 61
- Performing Alert Triage With Elastic SiemPerform systematic alert triage in Elastic Security SIEM to rapidly classify, prioritize, and investigate security alerts for SOC operations.Votes: 0GitHub stars: 61
- Performing Android App Static Analysis With MobsfPerforms automated static analysis of Android applications using Mobile Security Framework (MobSF) to identify hardcoded secrets, insecure permissions, vulnerable components, weak cryptography, and code-level security flaws without executing the application. Use when assessing Android APK/AAB files for security vulnerabilities before deployment, during penetration testing, or as part of CI/CD security gates. Activates for requests involving Android static analysis, MobSF scanning, APK securit...Votes: 0GitHub stars: 61
- Performing Api Fuzzing With RestlerUses Microsoft RESTler to perform stateful REST API fuzzing by automatically generating and executing test sequences that exercise API endpoints, discover producer-consumer dependencies between requests, and find security and reliability bugs. The tester compiles an OpenAPI specification into a RESTler fuzzing grammar, configures authentication, runs test/fuzz-lean/fuzz modes, and analyzes results for 500 errors, authentication bypasses, resource leaks, and payload injection vulnerabilities. ...Votes: 0GitHub stars: 61
- Performing Api Inventory And DiscoveryPerforms API inventory and discovery to identify all API endpoints in an organization's environment including documented, undocumented, shadow, zombie, and deprecated APIs. The tester uses passive traffic analysis, active scanning, DNS enumeration, JavaScript analysis, and cloud resource inventory to build a comprehensive API catalog. Maps to OWASP API9:2023 Improper Inventory Management. Activates for requests involving API discovery, shadow API detection, API inventory audit, or attack surf...Votes: 0GitHub stars: 61
- Performing Api Rate Limiting BypassTests API rate limiting implementations for bypass vulnerabilities by manipulating request headers, IP addresses, HTTP methods, API versions, and encoding schemes to circumvent request throttling controls. The tester identifies rate limit headers, determines enforcement mechanisms, and attempts bypasses including X-Forwarded-For spoofing, parameter pollution, case variation, and endpoint path manipulation. Maps to OWASP API4:2023 Unrestricted Resource Consumption. Activates for requests invol...Votes: 0GitHub stars: 61
- Performing Api Security Testing With PostmanUses Postman to perform structured API security testing by building collections that test for OWASP API Security Top 10 vulnerabilities including authentication bypass, authorization flaws, injection, and data exposure. The tester creates environments with multiple user roles, writes test scripts for automated security validation, and integrates Postman with OWASP ZAP and Newman for CI/CD security testing. Activates for requests involving Postman security testing, API security collection, aut...Votes: 0GitHub stars: 61
- Performing Arp Spoofing Attack SimulationSimulates ARP spoofing attacks in authorized lab or pentest environments using arpspoof, Ettercap, and Scapy to demonstrate man-in-the-middle risks, test network detection capabilities, and validate ARP inspection countermeasures.Votes: 0GitHub stars: 61
- Performing Asset Criticality Scoring For VulnsDevelop and apply a multi-factor asset criticality scoring model to weight vulnerability prioritization based on business impact, data sensitivity, and operational importance.Votes: 0GitHub stars: 61
- Performing Authenticated Scan With OpenvasConfigure and execute authenticated vulnerability scans using OpenVAS/Greenbone Vulnerability Management with SSH and SMB credentials for comprehensive host-level assessment.Votes: 0GitHub stars: 61
- Performing Authenticated Vulnerability ScanAuthenticated (credentialed) vulnerability scanning uses valid system credentials to log into target hosts and perform deep inspection of installed software, patches, configurations, and security settVotes: 0GitHub stars: 61
- Performing Automated Malware Analysis With CapeDeploy and operate CAPEv2 sandbox for automated malware analysis with behavioral monitoring, payload extraction, configuration parsing, and anti-evasion capabilities.Votes: 0GitHub stars: 61
- Performing Aws Account Enumeration With Scout SuitePerform comprehensive security posture assessment of AWS accounts using ScoutSuite to enumerate resources, identify misconfigurations, and generate actionable security reports.Votes: 0GitHub stars: 61
- Performing Aws Privilege Escalation AssessmentPerforming authorized privilege escalation assessments in AWS environments to identify IAM misconfigurations that allow users or roles to elevate their permissions using Pacu, CloudFox, Principal Mapper, and manual IAM policy analysis techniques.Votes: 0GitHub stars: 61
- Performing Bandwidth Throttling Attack SimulationSimulates bandwidth throttling and network degradation attacks using tc, iperf3, and Scapy in authorized environments to test quality-of-service controls, application resilience, and network monitoring detection of traffic manipulation attacks.Votes: 0GitHub stars: 61
- Performing Binary Exploitation AnalysisAnalyze binary exploitation techniques including buffer overflows and ROP chains using pwntools Python library. Covers checksec analysis, gadget discovery with ROPgadget, and exploit development for CTF and authorized security assessments.Votes: 0GitHub stars: 61
- Performing Blind Ssrf ExploitationDetect and exploit blind Server-Side Request Forgery vulnerabilities using out-of-band techniques, DNS interactions, and timing analysis to access internal services and cloud metadata endpoints.Votes: 0GitHub stars: 61
- Performing Bluetooth Security AssessmentAssess Bluetooth Low Energy device security by scanning, enumerating GATT services, and detecting vulnerabilitiesVotes: 0GitHub stars: 61
- Performing Brand Monitoring For ImpersonationMonitor for brand impersonation attacks across domains, social media, mobile apps, and dark web channels to detect phishing campaigns, fake sites, and unauthorized brand usage targeting your organization.Votes: 0GitHub stars: 61
- Performing Clickjacking Attack TestTesting web applications for clickjacking vulnerabilities by assessing frame embedding controls and crafting proof-of-concept overlay attacks during authorized security assessments.Votes: 0GitHub stars: 61
- Performing Cloud Asset Inventory With CartographyPerform comprehensive cloud asset inventory and relationship mapping using Cartography to build a Neo4j security graph of infrastructure assets, IAM permissions, and attack paths across AWS, GCP, and Azure.Votes: 0GitHub stars: 61
- Performing Cloud Forensics InvestigationConduct forensic investigations in cloud environments by collecting and analyzing logs, snapshots, and metadata from AWS, Azure, and GCP services.Votes: 0GitHub stars: 61
- Performing Cloud Forensics With Aws CloudtrailPerform forensic investigation of AWS environments using CloudTrail logs to reconstruct attacker activity, identify compromised credentials, and analyze API call patterns.Votes: 0GitHub stars: 61
- Performing Cloud Incident Containment ProceduresExecute cloud-native incident containment across AWS, Azure, and GCP by isolating compromised resources, revoking credentials, preserving forensic evidence, and applying security group restrictions to prevent lateral movement.Votes: 0GitHub stars: 61
- Performing Cloud Log Forensics With AthenaUses AWS Athena to query CloudTrail, VPC Flow Logs, S3 access logs, and ALB logs for forensic investigation. Covers CREATE TABLE DDL with partition projection, forensic SQL queries for detecting unauthorized access, data exfiltration, lateral movement, and privilege escalation. Use when investigating AWS security incidents or building cloud-native forensic workflows at scale.Votes: 0GitHub stars: 61
- Performing Cloud Native Forensics With FalcoUses Falco YAML rules for runtime threat detection in containers and Kubernetes, monitoring syscalls for shell spawns, file tampering, network anomalies, and privilege escalation. Manages Falco rules via the Falco gRPC API and parses Falco alert output. Use when building container runtime security or investigating k8s cluster compromises.Votes: 0GitHub stars: 61
- Performing Cloud Penetration Testing With PacuPerforming authorized AWS penetration testing using Pacu, the open-source AWS exploitation framework, to enumerate IAM configurations, discover privilege escalation paths, test credential harvesting, and validate security controls through systematic attack simulation.Votes: 0GitHub stars: 61
- Performing Cloud Storage Forensic AcquisitionPerform forensic acquisition and analysis of cloud storage services including Google Drive, OneDrive, Dropbox, and Box by collecting both API-based remote data and local sync client artifacts from endpoint devices.Votes: 0GitHub stars: 61
- Performing Container Escape DetectionDetects container escape attempts by analyzing namespace configurations, privileged container checks, dangerous capability assignments, and host path mounts using the kubernetes Python client. Identifies CVE-2022-0492 style escapes via cgroup abuse. Use when auditing container security posture or investigating escape attempts.Votes: 0GitHub stars: 61
- Performing Container Image HardeningThis skill covers hardening container images by minimizing attack surface, removing unnecessary packages, implementing multi-stage builds, configuring non-root users, and applying CIS Docker Benchmark recommendations to produce secure production-ready images.Votes: 0GitHub stars: 61
- Performing Container Security Scanning With TrivyScan container images, filesystems, and Kubernetes manifests for vulnerabilities, misconfigurations, exposed secrets, and license compliance issues using Aqua Security Trivy with SBOM generation and CI/CD integration.Votes: 0GitHub stars: 61
- Performing Content Security Policy BypassAnalyze and bypass Content Security Policy implementations to achieve cross-site scripting by exploiting misconfigurations, JSONP endpoints, unsafe directives, and policy injection techniques.Votes: 0GitHub stars: 61
- Performing Credential Access With LazagneExtract stored credentials from compromised endpoints using the LaZagne post-exploitation tool to recover passwords from browsers, databases, system vaults, and applications during authorized red team operations.Votes: 0GitHub stars: 61
- Performing Cryptographic Audit Of ApplicationA cryptographic audit systematically reviews an application's use of cryptographic primitives, protocols, and key management to identify vulnerabilities such as weak algorithms, insecure modes, hardcoVotes: 0GitHub stars: 61