ghostsecurity/skills
- Licence
- Apache-2.0
- Maintainers
- 4 contributors · top author wrote 70%
- Size
- 584 lines · 2 code files
- Bundled tools
- none found
- Shares files with
- not checked
Before running it
Your right to use, modify or redistribute it is unclear
no
The install script is fetched when you run it, so what runs is not the version anyone reviewed
no
It sends data to a third party that is not the model provider
no
Part of what ships cannot be reviewed by reading the source
no
Its container is given access back to the host, so the boundary does not hold
no
skill
| Last updated | Category | Tool | Scope | Stars | Flags |
|---|---|---|---|---|---|
| ★ 1d | skill |
elementalsouls/Claude-BugHunter
new
A hunt skill for each web and API bug class, with a dispatcher that reads the scope and loads the ones that fit. Patterns from disclosed bug-bounty reports sit behind each one.
|
webappapientramobile | 5.2k | none |
| ★ 9d | skill |
SnailSploit/Claude-Red
new
One SKILL.md per attack surface, reaching into exploit development as well as web, Active Directory and network work. Nothing routes between them; you load the one that fits the target in front of you.
|
redteambinarywebappad | 7.6k | none |
| ★ 23d | skill |
ghostsecurity/skills
new
A vendor's application-security skills for a coding agent: it scans source, dependencies and secrets, then confirms a finding against the running app through a proxy before it reaches the report.
|
codewebapp | 412 | none |
| ★ 29d | skill |
zhaoxuya520/reverse-skill
new
Routes an agent handed an APK, a binary, obfuscated frontend JavaScript or a pentest target to the playbook that fits, then sets up the toolchain that playbook needs. Its playbooks also cover Windows identity attacks, beyond the reversing the name implies.
|
adbinarymobilewebapp | 43k | opaque |
| 33d | skill |
GhostManager/ghostwriter-skills
new
Works on the report an engagement ends in, inside Ghostwriter: it turns a sample Word report into a Ghostwriter template, drafts an executive summary traced back to the findings, and grades whether a finding or report is ready for final delivery. It runs offline on exported report data, or reads a live Ghostwriter over its GraphQL API.
|
reporting | 11 | none |
| 35d | skill |
Gabson0x/bountyforge
new
Pairs bug-bounty web and API hunting with smart-contract auditing across several chains, each audit backed by a reference of known vulnerability classes. It ends in a submission drafted for the bounty platform.
|
webappapicode | 455 | licence |
| 84d | skill |
transilienceai/communitytools
new
A broad penetration-testing skill set that also works through the OWASP LLM top ten as concrete tests. It ends in the report, with compliance formats and a risk prioritiser.
|
webappreconllmreporting | 583 | none |
| 89d | skill |
Mindgard/ai-ide-skills
new
Tests an AI coding IDE or its agent, such as Cursor, Cline or Claude Code, for the ways a hostile workspace can steer it. You map the surface first, work one vulnerability class per skill, then chain what you confirmed.
|
agentic | 64 | none |
| 142d | skill |
BrownFineSecurity/iothackbot
new
Works an IoT device from three sides: its companion Android app, its hardware debug and serial interfaces, and the network it sits on. Each hardware skill ships a small Python helper instead of assuming the tool is installed.
|
binarynetworkmobile | 865 | none |
| 230d | skill |
Netflix-Skunkworks/railguard-skill
new
Splits a code repository's vulnerability scan across several agents and merges what they find. A benchmark skill scores each scan against a known-vulnerable sample, so one setup can be compared with another.
|
code | 80 | licence |
| ★ 1d | skill |
trailofbits/skills
An audit firm's review practice published as plugins: how to approach an unfamiliar codebase, what to look at in it, and how to write up what you found.
|
agenticbinarycodewebapp | 7.7k | remote |
| ★ 1d | skill |
Masriyan/Claude-Code-CyberSecurity-Skill
Twenty-two skills, each carrying a methodology, the commands to run and a template for the write-up, reaching into OT and ICS, mobile and governance as well as the usual ground.
|
redteambinaryllm | 491 | none |
| ★ 2d | skill |
Security-Phoenix-demo/security-skills-claude-code
Works the defensive side: searches threat intelligence, generates Semgrep rules, puts a STRIDE model into a product spec, and gates a plan before anyone builds it.
|
code | 80 | none |
| ★ 7d | skill |
SpecterOps/skills
Packages SpecterOps' own engagement workflow as installable plugins, including the wiring that lets an agent drive BloodHound and Ghostwriter. It assumes you already run those.
|
adbinarycodeentranetworkreconredteamsocialwebapp | 719 | none |
| ★ 15d | skill |
0xSteph/pentest-ai-agents
Fifty subagents, one per specialism, that Claude routes between on its own as the task moves. Each offensive agent also names the detection its technique would trip.
|
redteamrecon | 2.4k | remote |
| ★ 23d | skill |
hypnguyen1209/offensive-claude
Organises its skills along the kill chain and adds a dispatcher that loads at the start of every session, so the scope check and the OPSEC note happen whether or not you remember to ask.
|
redteamad | 394 | remote |
| 47d | skill |
trilwu/secskills
Aims at the judgement rather than the commands: trace a finding to demonstrated impact, capture memory before the box is reimaged, notice the honeypot. Offence, defence and a shared core install separately.
|
redteamcode | 169 | none |
| 58d | skill |
ADScanPro/Claude-AD
Walks an internal AD engagement technique by technique, each step naming the command to run and the telemetry it leaves behind. It ships no code of its own and drives tools you already have installed.
|
ad | 213 | none |
| 147d | skill |
briiirussell/cybersecurity-skills
Written so someone who is not a security specialist can run an audit and follow the result, and built for Cursor and Codex as well as Claude Code.
|
reconwebapp | 427 | none |