Agent Skills by hoanghn61
Showing 40 vetted skills indexed across 1 GitHub repositories.
pentest-checklist
Generate penetration testing checklists for scoping, monitoring, remediation, and cleanup.
essential-tools
Guide Burp Suite and Playwright workflows for web application penetration testing.
coordination
Coordinate penetration testing engagements from planning through final reporting.
cve-poc-generator
Generate a standalone Python PoC and markdown vulnerability report for a CVE ID.
hackerone
Parse HackerOne scope CSV exports and generate submission-ready markdown reports.
find-skills
Find installable agent skills matching a requested capability or workflow.
ai-threat-testing
Test LLM applications for OWASP LLM Top 10 vulnerabilities.
cloud-containers
Assess cloud and container environments for security misconfigurations and exploitation paths.
source-code-scanning
Scan source code and dependencies for vulnerabilities, secrets, and malicious code.
injection
Probe web endpoints for SQL, NoSQL, OS command, SSTI, XXE, and LDAP injection vulnerabilities.
github-workflow
Automate Git branching, committing, PRs, issues, and code review workflows via gh CLI.
techstack-identification
Identify a company's technology stack from passive OSINT signals.
infrastructure
Performs authorized IP service and protocol security testing with logged evidence.
reconnaissance
Enumerate subdomains, ports, endpoints, and JavaScript routes into a structured attack-surface inventory.
dns-intelligence
Extract technology signals from DNS records into structured JSON summaries.
certificate-transparency
Query crt.sh Certificate Transparency logs and extract deduplicated subdomains from SANs.
Signal Correlator Skill
Cross-validate technology signals across domains and flag contradictory evidence.
frontend-inferencer
Infer frontend frameworks and libraries from JavaScript, DOM, HTML, and HTTP signals.
third-party-detector
Detect third-party services from JavaScript, HTML, DNS, HTTP/CSP, and job-mention signals.
job-posting-analysis
Extract technology requirements from job postings and career pages.
web-archive-analysis
Analyze Wayback Machine snapshots to detect technology migrations and produce timestamped timelines.
Conflict Resolver Skill
Resolve contradictory technology signals and produce a structured resolution report.
ip-attribution
Map IP addresses to cloud providers, ASNs, and organizations via DNS and WHOIS.
cdn-waf-fingerprinter
Identify CDN, WAF, bot management, and DDoS services from HTTP, DNS, IP, and TLS signals.