cve-triage
CVE lookup and triage — map discovered services/versions to known CVEs via the cve_lookup tool, score by CVSS/exploitability, and prioritize what to verify first.
☆2.09k repo stars⑂288 repo forks
DevOps & Security
DevOps & Security skills
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
intranet-pentest-advanced
内网渗透高级 — 横向移动、凭据窃取、提权、持久化、隧道代理、AD攻击、ADCS滥用、Exchange/SharePoint攻击
☆2.09k repo stars⑂288 repo forks
DevOps & Security
rapid-checklist
渗透速查与Payload — 快速Payload家族、绕过提醒、验证顺序、常见测试卡片，适用于已知测试方向后快速查找
☆2.09k repo stars⑂288 repo forks
DevOps & Security
resolve_cve
Automatically resolve CVEs by checking GitHub issues, verifying presence in codebase, and attempting various remediation strategies while documenting the process.
☆2.09k repo stars⑂1.25k repo forks
DevOps & Security
retry_flaky_tests
Automatically retry failed required CI checks on GitHub PRs, with smart waiting and filtering logic
☆2.09k repo stars⑂1.25k repo forks
DevOps & Security
web-pentest
Web应用渗透测试 — 针对Web应用的完整渗透流程，含技术栈识别、目录枚举、认证测试、输入验证、逻辑漏洞
☆2.09k repo stars⑂288 repo forks
DevOps & Security
360Guard
360-degree comprehensive security review Skill. Use before installing any Skill from ClawHub, GitHub, or other sources. Performs full security scans including all Skill Vetter checks plus extended system/privacy/behavior checks and automated scanning scripts. Supports static analysis, behavior detection, dependency auditing.
☆2.09k repo stars⑂310 repo forks
DevOps & Security
acl-rule-analysis
Vendor-agnostic ACL and firewall rule analysis with shadowed rule detection, overly permissive rule identification, unused rule discovery, redundant rule flagging, and rule ordering optimization. Covers ACLs (Cisco/JunOS/EOS) and firewall policies (PAN-OS/FortiGate/CheckPoint).
☆2.09k repo stars⑂310 repo forks
DevOps & Security
agent-bom
Open security platform for agentic infrastructure — broad scanning plus MCP discovery, CVEs, blast radius, SBOMs, CIS benchmarks (AWS, Azure, GCP, Snowflake), OWASP/NIST/MITRE compliance, AISVS v1.0, MAESTRO layer tagging, and vector database security checks. Use when the user mentions vulnerability scanning, MCP server trust, compliance, SBOM generation, CIS benchmarks, blast radius, or AI supply chain risk.
☆2.09k repo stars⑂310 repo forks
DevOps & Security