Prohao42Community·50 Agent Skills Included

aimy-sikll

Automated penetration testing, vulnerability detection, and exploit playbooks

Automates web and API penetration testing with 65 modules covering recon, injection, auth bypass, and business logic flaws. Includes 80+ expert playbooks for SQL injection, XSS, SSRF, JWT attacks, cloud metadata abuse, and privilege escalation. Eliminates manual payload crafting and repetitive scanning with structured JSON output ready for direct agent execution.

120|8

↗

npx skills add Prohao42/aimy-sikll --all -g -y

All Skills in This Repository (50)

Pure Emerald Level Indicators

📦 In Repo

Prohao42

file-access-vuln

Identify path traversal and local file inclusion risks in file access and upload workflows.

dependency-confusion

Map internal package names to public registries to assess dependency-confusion risks.

injection-checking

Route attacker-controlled input to specialized injection-testing sub-skills.

prototype-pollution

Identify prototype pollution attack vectors in JavaScript applications via JSON and query strings.

saml-sso-assertion-attacks

Validate SAML SSO assertions for signature coverage, audience constraints, and issuer trust.

api-sec

Route API security testing to relevant sub-skills via the Skill Map.

format-string-exploitation

Identify and exploit format string vulnerabilities to read or write process memory.

http-host-header-attacks

Guide HTTP Host header injection and routing abuse security testing.

steganography-techniques

Detect and extract hidden data from images, audio, text, and files.

csv-formula-injection

Detect and mitigate spreadsheet formula injection risks in CSV workflows.

websocket-security

Assess WebSocket security gaps in live ws/wss endpoints.

graphql-and-hidden-parameters

Probe GraphQL schemas and detect hidden fields affecting access control.

Community

Intermediate

Frequently Asked Questions

FAQPage Schema

How to install aimy-sikll?▼

Run `npx skills add Prohao42/aimy-sikll --all -g -y` in your terminal to install all skills in this suite globally.

What vulnerabilities can aimy-sikll detect?▼

It covers SQL injection, XSS, SSRF, command injection, SSTI, NoSQL injection, JWT attacks, IDOR, business logic flaws, and file upload issues across web apps and APIs.

Does aimy-sikll work with Claude Code and Cursor?▼

Yes. All skills follow the universal SKILL.md standard and run in Claude Code, Cursor, and other compatible agents with structured JSON output.

Can I run a full automated pentest with one command?▼

Yes. The `auto` command chains crawling, vulnerability detection, weaponization, and report generation into a single workflow against your authorized target.

Is aimy-sikll legal to use?▼

Only use it on systems you own or have written authorization to test, such as bug bounty programs. Unauthorized scanning or exploitation is illegal.