Agent Skills by carlos-reyes-utp
Showing 31 vetted skills indexed across 1 GitHub repositories.
Carlos-Reyes-UTPlazyweb
Search real product UI screenshots and design patterns via Lazyweb MCP.
Carlos-Reyes-UTPhunt-api-misconfig
Identify API security misconfigurations enabling privilege escalation and token forgery.
Carlos-Reyes-UTPhunt-xss
Identify and validate XSS vulnerabilities across reflected, stored, and DOM-based scenarios.
Carlos-Reyes-UTPhunt-csrf
Detect exploitable CSRF weaknesses in authenticated web applications.
Carlos-Reyes-UTPhunt-ssti
Detect server-side template injection via engine-specific reflection probes.
Carlos-Reyes-UTPreport-writing
Convert validated security findings into submission-ready bug bounty reports.
Carlos-Reyes-UTPbug-bounty
Guide end-to-end bug bounty workflows from recon to validated vulnerability reporting.
Carlos-Reyes-UTPhunt-race-condition
Test one-time business logic endpoints for duplicate effects under concurrent request timing.
Carlos-Reyes-UTPmid-engagement-ir-detection
Capture and analyze security-state changes during red-team engagements to produce evidence-grade IR findings.
Carlos-Reyes-UTPbugcrowd-reporting
Select VRT nodes, override severity, and structure Bugcrowd submission descriptions.
Carlos-Reyes-UTPhunt-subdomain
Detect DNS misconfigurations enabling subdomain takeover via CNAME chain fingerprinting.
Carlos-Reyes-UTPredteam-report-template
Generate client-facing red-team report templates with structured findings and DOCX output.
Carlos-Reyes-UTPsecurity-arsenal
Provide structured payload sets and triage rules for web security testing.
Carlos-Reyes-UTPhunt-business-logic
Identifies business logic vulnerabilities in web application workflows.
Carlos-Reyes-UTPhunt-sharepoint
Fingerprint Microsoft SharePoint Server versions and probe anonymous endpoints for misconfigurations.
Carlos-Reyes-UTPhunt-sqli
Probe application inputs to identify and confirm SQL injection vulnerabilities.
Carlos-Reyes-UTPbb-methodology
Orchestrates bug bounty hunting with a non-linear 5-phase workflow and critical-thinking framework.
Carlos-Reyes-UTPredteam-mindset
Guide red-team operators through reproducible finding validation and full-scope probing.
Carlos-Reyes-UTPoffensive-osint
Generate structured external reconnaissance probes and triage guidance for authorized OSINT.
Carlos-Reyes-UTPhunt-cache-poison
Detect cache poisoning by testing unkeyed headers and URL manipulations.
Carlos-Reyes-UTPhunt-ato
Hunt account takeover paths across authentication and OAuth workflows.
Carlos-Reyes-UTPhunt-misc
Probe role boundaries, auth flows, and token scope enforcement for misc vulnerabilities.
Carlos-Reyes-UTPhunt-ssrf
Map URL parameters and confirm SSRF sinks via out-of-band callbacks.
Carlos-Reyes-UTPbb-local-toolkit
Guide bug bounty engagements through recon, hunting, validation, and reporting.