yaklangOfficial·63 Agent Skills Included

hack-skills

Complete offensive security playbook library for AI-driven penetration testing

Guides AI agents through real-world security testing across 14 domains: web, API, cloud, Active Directory, binary exploitation, and LLM attacks. Replaces scattered cheat sheets with structured routers, payload matrices, and decision trees for each vulnerability class. Helps testers move from recon to exploitation faster with step-by-step playbooks for authorized engagements.

2,013|265

↗

npx skills add yaklang/hack-skills --all -g -y

All Skills in This Repository (63)

Pure Emerald Level Indicators

📦 In Repo

yaklang

file-access-vuln

Identify and test file-access and upload workflow vulnerabilities across download endpoints and file paths.

injection-checking

Map attacker-controlled input to relevant injection deep-dive skills.

saml-sso-assertion-attacks

Validate SAML assertions for signature coverage, audience checks, and ACS handling.

api-sec

Route API security assessments to focused testing workflows based on observed indicators.

format-string-exploitation

Identify and exploit printf-style format string vulnerabilities in C programs.

steganography-techniques

Identify and extract hidden data from images, audio, text, and files.

graphql-and-hidden-parameters

Probe GraphQL schemas for hidden fields and authorization gaps.

xxe-xml-external-entity

Identify and exploit XML external entity vulnerabilities to read local files.

traffic-analysis-pcap

Analyze PCAP network captures for malicious activity, credentials, and covert channels.

llm-prompt-injection

Identify and analyze direct and indirect LLM prompt injection techniques for defensive testing.

hack

Route web and API security tasks to testing methodologies and vulnerability categories.

classical-cipher-analysis

Break classical ciphers using frequency analysis and Kasiski examination.

Official

Advanced

Frequently Asked Questions

FAQPage Schema

How to install hack-skills?▼

Run `npx skills add yaklang/hack-skills --all -g -y` in your terminal to install the full skill library globally.

What does hack-skills cover?▼

It covers web and API security, authentication attacks, privilege escalation, Active Directory, containers, binary exploitation, cryptography, and AI/LLM security through 100+ structured playbooks.

How does the hack master router work?▼

The `hack` skill acts as a master entry point that maps observed target behavior to the right category router, which then loads deep topic skills on demand.

Is hack-skills safe to use?▼

The content is distilled for authorized penetration testing, bug bounty, and CTF use only. You must have explicit permission before testing any target.

Which AI agents support hack-skills?▼

All skills follow the standard SKILL.md format and work with Claude Code, OpenClaw, Cursor, and other agents that support the skills protocol.