Agent Skills by 公明
Showing 31 vetted skills indexed across 1 GitHub repositories.
Ed1s0nZattack-surface-recon
Maps target attack surfaces using passive and active reconnaissance tools and fingerprinting techniques.
Ed1s0nZsource-code-hunting
Hunt source code leaks, hardcoded secrets, and supply-chain risks using grep, semgrep, and trufflehog.
Ed1s0nZblockchain-contract-attack
Guides auditing of smart contracts and DeFi protocols for reentrancy, access control, oracle, and flash loan vulnerabilities.
Ed1s0nZpentest-verification
Enforces evidence-based verification rules for recording penetration testing findings.
Ed1s0nZcomponent-vuln-intel
Collects CVE, PoC, and exploit intelligence for identified components from public sources.
Ed1s0nZcyberstrike-eino-demo
Validates skill package loading, resource paths, and retrieval across HTTP APIs and Eino agents.
Ed1s0nZpentest-output-standards
Standardizes penetration testing reports, change ledgers, and negative-result documentation in Chinese.
Ed1s0nZpentest-blackboard
Records penetration testing facts, vulnerabilities, and attack-chain relationships in a SQLite project blackboard.
Ed1s0nZfind-skills
Searches and installs agent skills from the open skills ecosystem using the Skills CLI.
Ed1s0nZcsrf-testing
Detect, exploit, and mitigate Cross-Site Request Forgery vulnerabilities.
Ed1s0nZnetwork-penetration-testing
Execute network penetration testing phases with Nmap, Nessus, and Metasploit.
Ed1s0nZxss-testing
Test web applications for reflected, stored, and DOM-based XSS vulnerabilities.
Ed1s0nZincident-response
Guide cybersecurity incident response through preparation, containment, and recovery phases.
Ed1s0nZdeserialization-testing
Detect and exploit deserialization vulnerabilities in Java, PHP, and Python applications.
Ed1s0nZcontainer-security-testing
Scan Docker images and audit Kubernetes configurations for security vulnerabilities.
Ed1s0nZldap-injection-testing
Detect, exploit, and mitigate LDAP injection vulnerabilities in applications.
Ed1s0nZsecurity-awareness-training
Create security awareness training programs covering password management and phishing detection.
Ed1s0nZvulnerability-assessment
Assess system and application vulnerabilities with CVSS risk scoring.
Ed1s0nZsecurity-automation
Automate vulnerability scanning and security testing in CI/CD pipelines.
Ed1s0nZapi-security-testing
Test REST API endpoints for common vulnerabilities like SQL injection and broken access control.
Ed1s0nZxxe-testing
Detect, exploit, and mitigate XML External Entity injection vulnerabilities.
Ed1s0nZidor-testing
Detect, exploit, and prevent IDOR vulnerabilities in web applications.
Ed1s0nZsql-injection-testing
Identify SQL injection vulnerabilities in web applications using sqlmap and manual testing.
Ed1s0nZfile-upload-testing
Test file upload endpoints for unverified file types and validation bypasses.