Hiago
Community@uphiago · Brasil
pretty much everything
Agent Skills by Hiago
Showing 171 vetted skills indexed across 1 GitHub repositories.
uphiagohunt-xss
Detect and validate reflected, stored, and DOM-based XSS vulnerabilities in web applications.
uphiagorecon-sector
Runs sector-parameterized reconnaissance probes against WordPress-heavy SMB target lists.
uphiagohunt-mcp-security
Test Model Context Protocol servers for tool access control, injection, and output poisoning flaws.
uphiagohunt-saml
Tests SAML and SSO implementations for signature wrapping, parser differential, and assertion manipulation vulnerabilities.
uphiagollm-prompt-injection
Tests authorized LLM applications for prompt injection, system-prompt exposure, and RAG data-boundary failures.
uphiagosecurity-arsenal
Provides payloads, bypass techniques, and submission rules for web vulnerability testing.
uphiagohunt-dom
Detect DOM clobbering, postMessage, service worker, and CSS exfiltration vulnerabilities in web applications.
uphiagobb-local-toolkit
Guides end-to-end bug bounty hunting from recon through validated vulnerability reporting.
uphiagowstg-web-pentest
Executes a 12-phase OWASP WSTG-aligned web application penetration test with concrete commands and verification criteria.
uphiagoagentiko-worker
Operate restricted Alpine Linux containers for reconnaissance and penetration testing tasks.
uphiagoagentiko-hermes
Automate distributed offensive security reconnaissance and pentesting workflows via Telegram and SSH containers.
uphiagodocker-privesc
Escalate Docker container privileges to host root access.
uphiagorecon-plumbing
Identify exposed PII, payment endpoints, and misconfigurations on plumbing company websites.
uphiagorecon-daycare
Detect exposed minor PII and WordPress vulnerabilities in daycare websites.
uphiagohunt-llm-ai
Identify exploitable LLM/AI vulnerabilities crossing trust boundaries with validation gates.
uphiagorecon-roofing
Enumerate roofing company domains, WordPress assets, and insurance claim endpoints.
uphiagohunt-api-misconfig
Detect API security misconfigurations across REST, OData, GraphQL, and ASP.NET Core APIs.
uphiagohunt-write-gap
Detect unprotected write endpoints in authenticated APIs for penetration testing.
uphiagohunt-cors
Detect CORS misconfigurations enabling credentialed cross-origin reads of authenticated data.
uphiagomeme-coin-audit
Detect rug pull vectors and security flaws in EVM and Solana token contracts.
uphiagorecon-churches
Discover church domains and detect WordPress vulnerabilities for authorized penetration testing.
uphiagohunt-csrf
Detect modern CSRF vulnerabilities including SameSite bypasses and OAuth RelayState flaws.
uphiagohunt-dispatch
Automate targeted skill selection and loading for /hunt offensive security engagements.
uphiagohunt-nextjs
Detect Next.js 13/15 vulnerabilities including Server Actions auth bypass and Image Optimization SSRF.