Agent Skills by yliken
Showing 25 vetted skills indexed across 1 GitHub repositories.
Ylikenfile-access-vuln
Test file access and upload workflows for misconfigurations and vulnerabilities.
Ylikeninjection-checking
Route attacker-controlled input to the appropriate injection testing sub-skill.
Ylikensaml-sso-assertion-attacks
Analyze SAML SSO assertions for signature validation and trust boundary weaknesses.
Ylikenapi-sec
Route API security tasks to appropriate deep-dive sub-skills.
Ylikengraphql-and-hidden-parameters
Discover GraphQL schema gaps via introspection, hidden fields, and batching.
Ylikenclickjacking
Detect web page frameability by inspecting X-Frame-Options and CSP frame-ancestors headers.
Ylikenpath-traversal-lfi
Identify and exploit path traversal and LFI vulnerabilities to expose sensitive files.
Ylikenhack
Route vulnerability testing tasks to security categories based on reconnaissance context.
Ylikentype-juggling
Identify and exploit PHP loose comparison and magic hash bypass patterns.
Ylikenapi-recon-and-docs
Discover reachable API endpoints, schemas, and documentation across REST, GraphQL, and mobile APIs.
Ylikensqli-sql-injection
Identify and exploit SQL injection vectors across multiple DBMS.
Ylikenbusiness-logic-vuln
Identify business logic vulnerabilities in workflows and state transitions.
Ylikenrecon-and-methodology
Organize reconnaissance workflows for bug bounty engagements.
Ylikencsrf-cross-site-request-forgery
Identify and validate CSRF vulnerabilities in state-changing web flows.
Ylikenrecon-for-sec
Map target scope and plan initial reconnaissance routes.
Ylikenidor-broken-object-authorization
Identify and exploit IDOR and broken object authorization vulnerabilities across APIs and UI paths.
Ylikenoauth-oidc-misconfiguration
Assess OAuth2/OpenID Connect misconfigurations across redirect_uri, state, PKCE, and token binding.
Ylikenrequest-smuggling
Detect and map HTTP request smuggling vulnerabilities across proxies and backends.
Ylikenrace-condition
Identify and test race conditions and TOCTOU bugs in web applications.
Ylikeninsecure-source-code-management
Detect exposed .git, .svn, and .hg metadata during authorized assessments.
Ylikenapi-authorization-and-bola
Detects and tests API authorization gaps in object access and function controls.
Ylikenhttp-parameter-pollution
Detect inconsistent interpretation of duplicate HTTP parameters across server, proxy, and application layers.
Ylikenxslt-injection
Identify and exploit XSLT processing weaknesses across engines.
Ylikenauth-sec
Route authentication and authorization testing tasks to appropriate sub-skills.