Browse reusable instructions for your AI tools. Copy and customize a prompt, or download a skill for a supported agent.
Hunt vector-store / embedding-layer weaknesses in RAG pipelines (OWASP LLM08 Vector and Embedding Weaknesses)
Hunting skill for rce vulnerabilities. Built from 67 public bug bounty reports. Use when hunting rce on any target.
Hunt SAML / SSO attacks.
Hunt Session Management vulnerabilities
Hunt shadow / zombie / undocumented API surface (OWASP API9 Improper Inventory Management)
Hunt source code and build artifact leakage
Discover a single-page-app's hidden backend API from its public JS bundle, then test that API for broken access control / missing authentication.
Hunt Spring Boot specific vulnerabilities
Hunting skill for sqli vulnerabilities.
Hunting skill for ssrf vulnerabilities.
Hunt server-side template injection (SSTI) across Jinja2 (Flask/Django), Twig (Symfony), Freemarker (Java), ERB (Rails), Spring, Velocity, Mako, Thymeleaf, Smarty.
Hunting skill for subdomain takeover vulnerabilities.
Hunt TLS/SSL and DNS misconfigurations
Hunt WebSocket vulnerabilities
Hunting skill for xss vulnerabilities.
Hunting skill for xxe vulnerabilities.
Authorized assessment of federated identity systems: SAML, OIDC, OAuth2 flows, SSO misconfiguration, and token-confusion issues.
Provide systematic methodologies for identifying and exploiting Insecure Direct Object Reference (IDOR) vulnerabilities in web applications.
Implement incident management processes and escalation procedures. Configure on-call schedules and post-incident reviews. Use when managing production incidents.
Implement ISO 27001 Information Security Management System. Configure ISMS controls and risk management. Use when implementing enterprise security frameworks.
Guide for NetworkPolicy, RBAC, and Pod Security Admission/Standards (PodSecurityPolicy was removed in Kubernetes1.25) in Kubernetes.
Implement Kubernetes security contexts, Pod Security Standards, and network policies.
Security auditor for Laravel applications. Analyzes code for vulnerabilities, misconfigurations, and insecure practices using OWASP standards and Laravel security best practices.
Apply CIS benchmarks and secure Linux servers.
Try another platform, a broader search, or fewer filters.
Explore all resourcesResource formats: Prompts are ready to copy into a conversation. Skills install into the compatible agent shown on their page.
How it worksInclude the instructions, intended platforms, author, and license. Submissions are reviewed before publication.