All authors
Claude Skills by plurigrid
github.com/plurigrid2,535 skills6 installs3,507 views
- Performing Ssl Tls Security AssessmentAssess SSL/TLS server configurations using the sslyze Python library to evaluate cipher suites, certificate chains, protocol versions, HSTS headers, and known vulnerabilities like Heartbleed and ROBOT.Votes: 0GitHub stars: 61
- Performing Ssrf Vulnerability ExploitationTest for Server-Side Request Forgery vulnerabilities by probing cloud metadata endpoints, internal network services, and protocol handlers through user-controllable URL parameters. Tests AWS/GCP/Azure metadata APIs (169.254.169.254), internal port scanning via HTTP, URL scheme bypass techniques, and DNS rebinding detection.Votes: 0GitHub stars: 61
- Performing Static Malware Analysis With Pe StudioPerforms static analysis of Windows PE (Portable Executable) malware samples using PEStudio to examine file headers, imports, strings, resources, and indicators without executing the binary. Identifies suspicious characteristics including packing, anti-analysis techniques, and malicious imports. Activates for requests involving static malware analysis, PE file inspection, Windows executable analysis, or pre-execution malware triage.Votes: 0GitHub stars: 61
- Performing Steganography DetectionDetect and extract hidden data embedded in images, audio, and other media files using steganalysis tools to uncover covert communication channels.Votes: 0GitHub stars: 61
- Performing Subdomain Enumeration With SubfinderEnumerate subdomains of target domains using ProjectDiscovery's Subfinder passive reconnaissance tool to map the attack surface during security assessments.Votes: 0GitHub stars: 61
- Performing Supply Chain Attack SimulationSimulate and detect software supply chain attacks including typosquatting detection via Levenshtein distance, dependency confusion testing against private registries, package hash verification with pip, and known vulnerability scanning with pip-audit.Votes: 0GitHub stars: 61
- Performing Thick Client Application Penetration TestConduct a thick client application penetration test to identify insecure local storage, hardcoded credentials, DLL hijacking, memory manipulation, and insecure API communication in desktop applications using dnSpy, Procmon, and Burp Suite.Votes: 0GitHub stars: 61
- Performing Threat Emulation With Atomic Red TeamExecutes Atomic Red Team tests for MITRE ATT&CK technique validation using the atomic-operator Python framework. Loads test definitions from YAML atomics, runs attack simulations, and validates detection coverage. Use when testing SIEM detection rules, validating EDR coverage, or conducting purple team exercises.Votes: 0GitHub stars: 61
- Performing Threat Hunting With Elastic SiemPerforms proactive threat hunting in Elastic Security SIEM using KQL/EQL queries, detection rules, and Timeline investigation to identify threats that evade automated detection. Use when SOC teams need to hunt for specific ATT&CK techniques, investigate anomalous behaviors, or validate detection coverage gaps using Elasticsearch and Kibana Security.Votes: 0GitHub stars: 61
- Performing Threat Hunting With Yara RulesUse YARA pattern-matching rules to hunt for malware, suspicious files, and indicators of compromise across filesystems and memory dumps. Covers rule authoring, yara-python scanning, and integration with threat intel feeds.Votes: 0GitHub stars: 61
- Performing Threat Intelligence Sharing With MispUse PyMISP to create, enrich, and share threat intelligence events on a MISP platform, including IOC management, feed integration, STIX export, and community sharing workflows.Votes: 0GitHub stars: 61
- Performing Threat Landscape Assessment For SectorConduct a sector-specific threat landscape assessment by analyzing threat actor targeting patterns, common attack vectors, and industry-specific vulnerabilities to inform organizational risk management.Votes: 0GitHub stars: 61
- Performing Threat Modeling With Owasp Threat DragonUse OWASP Threat Dragon to create data flow diagrams, identify threats using STRIDE and LINDDUN methodologies, and generate threat model reports for secure design review.Votes: 0GitHub stars: 61
- Performing Timeline Reconstruction With PlasoBuild comprehensive forensic super-timelines using Plaso (log2timeline) to correlate events across file systems, logs, and artifacts into a unified chronological view.Votes: 0GitHub stars: 61
- Performing User Behavior AnalyticsPerforms User and Entity Behavior Analytics (UEBA) to detect anomalous user activities including impossible travel, unusual access patterns, privilege abuse, and insider threats using SIEM-based behavioral baselines and statistical analysis. Use when SOC teams need to identify compromised accounts or insider threats through deviation from established behavioral norms.Votes: 0GitHub stars: 61
- Performing Vlan Hopping AttackSimulates VLAN hopping attacks using switch spoofing and double tagging techniques in authorized environments to test VLAN segmentation effectiveness and validate switch port security configurations against Layer 2 bypass attacks.Votes: 0GitHub stars: 61
- Performing Vulnerability Scanning With NessusPerforms authenticated and unauthenticated vulnerability scanning using Tenable Nessus to identify known vulnerabilities, misconfigurations, default credentials, and missing patches across network infrastructure, servers, and applications. The scanner correlates findings with CVE databases and CVSS scores to produce prioritized remediation guidance. Activates for requests involving vulnerability scanning, Nessus assessment, patch compliance checking, or automated vulnerability detection.Votes: 0GitHub stars: 61
- Performing Web Application Firewall BypassBypass Web Application Firewall protections using encoding techniques, HTTP method manipulation, parameter pollution, and payload obfuscation to deliver SQL injection, XSS, and other attack payloads past WAF detection rules.Votes: 0GitHub stars: 61
- Performing Web Application Penetration TestPerforms systematic security testing of web applications following the OWASP Web Security Testing Guide (WSTG) methodology to identify vulnerabilities in authentication, authorization, input validation, session management, and business logic. The tester uses Burp Suite as the primary interception proxy alongside manual testing techniques to find flaws that automated scanners miss. Activates for requests involving web app pentest, OWASP testing, application security assessment, or web vulnerab...Votes: 0GitHub stars: 61
- Performing Web Application Scanning With NiktoNikto is an open-source web server and web application scanner that tests against over 7,000 potentially dangerous files/programs, checks for outdated versions of over 1,250 servers, and identifies veVotes: 0GitHub stars: 61
- Performing Web Application Vulnerability TriageTriage web application vulnerability findings from DAST/SAST scanners using OWASP risk rating methodology to separate true positives from false positives and prioritize remediation.Votes: 0GitHub stars: 61
- Performing Web Cache Deception AttackExecute web cache deception attacks by exploiting path normalization discrepancies between CDN caching layers and origin servers to cache and retrieve sensitive authenticated content.Votes: 0GitHub stars: 61
- Performing Web Cache Poisoning AttackExploiting web cache mechanisms to serve malicious content to other users by poisoning cached responses through unkeyed headers and parameters during authorized security tests.Votes: 0GitHub stars: 61
- Performing Wifi Password Cracking With AircrackCaptures WPA/WPA2 handshakes and performs offline password cracking using aircrack-ng, hashcat, and dictionary attacks during authorized wireless security assessments to evaluate passphrase strength and wireless network security posture.Votes: 0GitHub stars: 61
- Performing Windows Artifact Analysis With Eric Zimmerman ToolsPerform comprehensive Windows forensic artifact analysis using Eric Zimmerman's open-source EZ Tools suite including KAPE, MFTECmd, PECmd, LECmd, JLECmd, and Timeline Explorer for parsing registry hives, prefetch files, event logs, and file system metadata.Votes: 0GitHub stars: 61
- Performing Wireless Network Penetration TestExecute a wireless network penetration test to assess WiFi security by capturing handshakes, cracking WPA2/WPA3 keys, detecting rogue access points, and testing wireless segmentation using Aircrack-ng and related tools.Votes: 0GitHub stars: 61
- Performing Wireless Security Assessment With KismetConduct wireless network security assessments using Kismet to detect rogue access points, hidden SSIDs, weak encryption, and unauthorized clients through passive RF monitoring.Votes: 0GitHub stars: 61
- Performing Yara Rule Development For DetectionDevelop precise YARA rules for malware detection by identifying unique byte patterns, strings, and behavioral indicators in executable files while minimizing false positives.Votes: 0GitHub stars: 61
- Periodic OrbitClosed trajectory in phase spaceVotes: 0GitHub stars: 61
- Phase LockingFixed phase relationship in oscillatorsVotes: 0GitHub stars: 61
- Phase Portrait GeneratorGenerate phase portraits for 2D dynamical systems. Use when visualizing vector fields, nullclines, and trajectories.Votes: 0GitHub stars: 61
- Phase Space TransformationCoordinate changes preserving dynamicsVotes: 0GitHub stars: 61
- Pijul Sparse SkillsSparsity-preserving skill versioning via Pijul patches with GF(3) projection gatesVotes: 0GitHub stars: 61
- PijulPijul patch-based VCS with categorical patch theory for skill versioningVotes: 0GitHub stars: 61
- Pkg Memory BridgeBridge to PKG systems (Mem0, Graphiti, Solid PODs, Logseq) for individuated information indicesVotes: 0GitHub stars: 61
- Planar Isotopy ScreenPlanar Isotopy Screen MappingVotes: 0GitHub stars: 61
- Playwright UnworldPlaywright-Unworld Skill: Deterministic Web AutomationVotes: 0GitHub stars: 61
- PlaywrightBrowser automation via Playwright MCP. Use for web scraping, taking screenshots, interacting with web pages, testing web UIs, and automating browser tasks. Headless browser support.Votes: 0GitHub stars: 61
- Plurigrid Asi IntegratedUnified Plurigrid ASI skill combining ACSets, Gay-MCP colors, bisimulation games, world-hopping, glass-bead synthesis, and triad interleaving for autonomous skill dispersal.Votes: 0GitHub stars: 61
- Polyglot SpiCross-Language Strong Parallelism Invariance VerificationVotes: 0GitHub stars: 61
- PptxPresentation creation, editing, and analysis. When Claude needs to workVotes: 0GitHub stars: 61
- Prioritizing Vulnerabilities With Cvss ScoringThe Common Vulnerability Scoring System (CVSS) is the industry standard framework maintained by FIRST (Forum of Incident Response and Security Teams) for assessing vulnerability severity. CVSS v4.0 (rVotes: 0GitHub stars: 61
- Privilege Declaration GeneratorGenerates tizen-manifest.xml and config.xml privilege declarations. Auto-detects required privileges from app source code.Votes: 0GitHub stars: 61
- Processing Stix Taxii FeedsProcesses STIX 2.1 threat intelligence bundles delivered via TAXII 2.1 servers, normalizing objects into platform-native schemas and routing them to appropriate consuming systems. Use when onboarding new TAXII collection endpoints, automating bi-directional intelligence sharing with ISACs, or building pipeline validation for malformed STIX bundles. Activates for requests involving OASIS STIX, TAXII server configuration, MISP TAXII, or Cortex XSOAR feed integrations.Votes: 0GitHub stars: 61
- Profiling Threat Actor GroupsDevelops comprehensive threat actor profiles for APT groups, criminal organizations, and hacktivist collectives by aggregating TTP documentation, historical campaign data, tooling fingerprints, and attribution indicators from multiple intelligence sources. Use when briefing executives on sector-specific threats, updating threat model assumptions, or prioritizing defensive controls against specific adversaries. Activates for requests involving MITRE ATT&CK Groups, Mandiant APT profiles, CrowdS...Votes: 0GitHub stars: 61
- Proof Of FrogProof-of-Frog Skill 🐸Votes: 0GitHub stars: 61
- Proofgeneral NaryaProof General + Narya: Higher-dimensional type theory proof assistant with observational bridge types for version control.Votes: 0GitHub stars: 61
- PropagatorsSussman/Radul propagator networks for constraint propagation and bidirectionalVotes: 0GitHub stars: 61
- Property Based TestingProvides guidance for property-based testing across multiple languages and smart contracts. Use when writing tests, reviewing code with serialization/validation/parsing patterns, designing features, or when property-based testing would provide stronger coverage than example-based tests.Votes: 0GitHub stars: 61
- Protocol AcsetModel decentralized protocols as attributed C-sets for compositional analysis, interoperability design, and protocol evolution. Apply categorical mathematics to P2P infrastructure.Votes: 0GitHub stars: 61