AgentSecOpsOfficial·29 Agent Skills Included

SecOpsAgentKit

Security scanning, penetration testing, and incident response workflows

Runs security scans across code, containers, APIs, and infrastructure using tools like Semgrep, Trivy, Nmap, and Metasploit. Covers vulnerability detection, secret scanning, threat modeling, forensics, and compliance checks mapped to OWASP, CWE, and MITRE ATT&CK. Eliminates manual scanner configuration by packaging each security tool as a ready-to-run workflow with CI/CD templates and remediation guidance.

183|35

↗

npx skills add AgentSecOps/SecOpsAgentKit --all -g -y

Available:

Explains the skill structure, categories, and frontmatter rules so the agent can correctly discover, trigger, and execute the right security skill for each task.

All Skills in This Repository (29)

Pure Emerald Level Indicators

📦 In Repo

AgentSecOps

skill-name

Create standardized SKILL.md frontmatter units for Claude Code security workflows.

analysis-tshark

Analyze network traffic and protocol behavior with Tshark for security investigations.

webapp-sqlmap

Automate SQL injection testing and exploitation with SQLMap against authorized web applications.

webapp-nikto

Scan web servers for vulnerabilities and misconfigurations using Nikto.

network-netcat

Run netcat-based connectivity checks, banner grabs, and shell sessions.

recon-nmap

Perform authorized network reconnaissance with Nmap port scanning and service enumeration.

crack-hashcat

Crack password hashes with Hashcat across multiple algorithms and attack modes.

pentest-metasploit

Automate authorized penetration testing workflows with the Metasploit Framework.

detection-sigma

Create, validate, and translate Sigma rules for Splunk, Elasticsearch, and Sentinel backends.

ir-velociraptor

Analyze endpoint telemetry and artifacts for incident response with Velociraptor VQL workflows.

forensics-osquery

Collect endpoint forensic artifacts using SQL-based osquery queries.

reviewdog

Aggregate security and quality tool results into pull request comments.

Official

Advanced

Frequently Asked Questions

FAQPage Schema

How to install SecOpsAgentKit?▼

Run `npx skills add AgentSecOps/SecOpsAgentKit --all -g -y` in your terminal to install all security skills globally.

What security tasks can SecOpsAgentKit automate?▼

It covers SAST, DAST, dependency scanning, secret detection, container and IaC scanning, penetration testing, threat modeling, and incident response forensics. Each task maps findings to OWASP, CWE, and MITRE ATT&CK frameworks.

Can I run security scans in CI/CD pipelines?▼

Yes. Most skills include ready-made GitHub Actions, GitLab CI, and Jenkins templates with severity thresholds that fail builds on critical findings.

Does SecOpsAgentKit work with Claude Code?▼

Yes. All skills follow the standard SKILL.md format and run directly in Claude Code and other compatible coding agents.

Is it safe to use offensive security skills like Metasploit?▼

The offensive skills are designed for authorized testing only and include explicit authorization checklists, scope verification steps, and audit logging guidance before any exploitation.