CyberStrikeAI-SRC
Autonomous penetration testing, vulnerability hunting, and SRC reporting
All Skills in This Repository (50)
Pure Emerald Level Indicatorsdependency-confusion
Detect dependency confusion vulnerabilities across npm, pip, RubyGems, Maven, Composer, and Docker.
prototype-pollution
Detect prototype pollution vulnerabilities in JavaScript stacks via injection probes.
unauthorized-access-common-services
Verify unauthorized access to exposed databases, caches, and admin panels.
api-sec
Triage API security testing across REST, GraphQL, SOAP, and WebSocket interfaces.
ssti-server-side-template-injection
Detect and exploit server-side template injection vulnerabilities across web applications.
ctf-forensics
Analyze disk images, memory dumps, and network captures to recover flags.
csv-formula-injection
Detect CSV and spreadsheet formula injection vulnerabilities in exported files.
websocket-security
Detect WebSocket security vulnerabilities including CSWSH, missing authentication, and message injection.
graphql-and-hidden-parameters
Identify GraphQL API vulnerabilities including hidden parameters and authorization gaps.
ldap-injection-testing
Detect, exploit, and remediate LDAP injection vulnerabilities in directory-integrated applications.
ctf-misc
Solve miscellaneous CTF challenges with decoding, sandbox escapes, and constraint solving.
burp-mcp-vuln-check
Verify web vulnerabilities via Burp MCP proxy history and HTTP replay.
Frequently Asked Questions
FAQPage SchemaHow to install CyberStrikeAI-SRC?โผ
Run `npx skills add langbyyi/CyberStrikeAI-SRC --all -g -y` in your terminal to install all skills in this suite globally.
What does CyberStrikeAI-SRC actually do?โผ
It turns natural-language instructions into full authorized penetration testing workflows, covering recon, exploitation, privilege escalation, and evidence-backed vulnerability recording across web, API, cloud, mobile, and internal network targets.
Which vulnerability types do the skills cover?โผ
The playbooks cover the full OWASP range including SQL injection, XSS, SSRF, IDOR, SSTI, XXE, deserialization, authentication bypass, business logic flaws, plus Active Directory, cloud, and mobile attack techniques.
Does it work with Claude Code and other agents?โผ
Yes. All skills follow the universal SKILL.md standard and run in Claude Code, OpenClaw, Cursor, and Codex, and the platform itself connects to any OpenAI-compatible model API.
Is CyberStrikeAI-SRC legal to use?โผ
It is built for authorized testing only, such as bug bounty and SRC programs with written permission. The skills enforce scope discipline and require reproducible proof before any vulnerability is reported.
Related Repositories in Software Engineering
View All in Software Engineeringโopenclaw
Run a personal AI assistant across your devices and chat apps
superpowers
Gives coding agents a disciplined workflow from idea to merged code
react
AI agent skills for building, testing, and porting React core