Your agent can do more. Find the skill that makes it happen.
Find your next superpower If you are an agent, refer to our llms.txt for full access.Teaches server management principles and decision-making for process management, monitoring strategy, and scaling. Emphasizes reasoning rather than specific commands.
Identify and exploit Server-Side Template Injection (SSTI) vulnerabilities within web applications. Use this skill when testing web applications that render dynamic content using template engines like Jinja2 (Python), Twig (PHP), Freemarker (Java), or Pug (Node.js). Covers identification via mathematical evaluation, context mapping, escaping sandboxes, and achieving Remote Code Execution (RCE).
Skill for the Services area of Securacy. 113 symbols across 25 files.
Session wrap-up - update handoff + commit + auto-record experience
Detect and exploit session fixation (WSTG-SESS-01, WSTG-SESS-03) and session exposure (WSTG-SESS-04) by testing whether the server issues a new session token post-authentication, whether pre-login tokens remain valid after login, and whether session IDs are transmitted over HTTP or included in GET parameters. Analyze token randomness via Burp Sequencer. Test JSESSIONID, ASP.NET Forms Auth cookies.…
Search and analyze your own session logs (older/parent conversations) using jq.
Triages session recordings around a question and checks findings against events, databases, and source code. Grades claims as measured, reconstructed, observed, or inferred, supporting investigations of drop-off, dead clicks, fixes, and existing claims across local and hosted replay sources.
Build a custom session search tool that indexes and queries past Claude Code CLI chat logs to retrieve historical findings, techniques, and context. Based on Critical Thinking Bug Bounty Podcast Episode 166.
Reads the session baton to restate the current goal and single next task, then opens documents marked for initial reading. It prepares the session without automatically starting the task.
Builds a safe, isolated environment for detonating and analyzing malware using virtualization, host-only or simulated networking, and snapshotting. Activates for requests about creating a malware lab, sandbox VM, isolated analysis environment, or safe detonation setup.
Sets up shell profiles so copilot, atlas, and cop launch with --agent oh-my-copilot:atlas --autopilot. Intended as a one-time configuration after installing oh-my-copilot.
Runs a bilingual English/Chinese setup wizard for autor to install dependencies, create configuration files, and configure API keys. Checks installed and missing components and helps troubleshoot the environment.
Skills give your agent reusable instructions for a specific job. Pick one, read what it does, and bring it into your workflow.
A name only tells half the story. Search the full description and instructions to find the right fit.
Read the skill, visit its source, and see exactly what you’re adding to your agent.
Copy the install command from a skill page and run it in your project.
npx skillycli add owner/repo --skill name