Autonomous penetration testing via local PentestGPT CLI. Subprocess wrapper around a private fork of GreyDGL/PentestGPT for CTF challenges, Hack The Box machines, and authorized engagements. Streams walkthrough, detects flags, maintains session state. Isolates upstream's adversarial system prompt.
Plugin redcap-gpt from marketplace redcap in GITDIDDY69/redcap. Commands read from the repo's manifest — 1 month ago.
redcap-gptAutonomous penetration testing via the local PentestGPT CLI (private fork of GreyDGL/PentestGPT). Use when the user wants to run an autonomous pentest on a Capture-the-Flag challenge, Hack The Box machine, or explicitly authorized engagement — where the tool's reasoning tree, persistent enumeration,
Android APK / XAPK / JAR / AAR decompilation with jadx and Fernflower/Vineflower. Extract HTTP API endpoints (Retrofit, OkHttp, Volley), trace call flows from UI to network, locate compile-time feature gates. Optional Androguard integration for programmatic call-graph and cross-reference analysis. Adopted from SimoneAvogadro/android-reverse-engineering-skill under Apache 2.0.
1 skill · 1 command
Meta-dispatcher for the redcap suite. Routes red-team and device-research intent to the appropriate sibling skill. Start here when the right sibling isn't obvious or when a task needs multiple siblings chained.
1 skill
Security compliance baseline audit using ComplianceAsCode/content. Compare a target system or device config to a hardening baseline — SCAP, STIG (DISA), CIS benchmarks, PCI-DSS, OSPP, USGCB. Emit deviation report with specific rule references (OVAL, XCCDF, CCE).
1 skill
Binary reverse engineering with ImHex. Hex editing, Pattern Language for structured binary parsing, YARA, diffing, multi-ISA disassembly (ARM32/64, x86, MIPS, RISC-V), entropy and magic-byte analysis. Uses ImHex's native MCP server when installed, otherwise teaches the pattern language for manual use.
1 skill
Firmware and kernel analysis workbench. Unpack MTK scatter / squashfs / ubifs / ext4 partitions. Grep for compile-time feature gates (em_support, show_5g_toggle, engineer_mode, debug_mode). Audit advertised features vs actual compile-time state. Detect FCC-filing gaps. Corpus grows as you acquire trees and dumps.
1 skill
Offensive payload library lookup. SQL injection, XSS, SSTI, LDAP, XXE, CSRF, CRLF, SSRF, deserialization, auth bypass, WAF bypass, CVE-specific exploits. Thin wrapper around a local clone of swisskyrepo/PayloadsAllTheThings with topic-folder navigation and Intruder wordlist retrieval.
1 skill
Harness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses
200 skills · 98 commands · 71 agents · 1 MCP server · hooks
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.
hooks
Cross-installation agent federation with zero-trust security, PII-gated data flow, and compliance-grade audit trails
3 skills · 1 command · 1 agent
Install the "AAS Security Engineer" workflow plugin from Agentic Awesome Skills.
12 skills
Duende development skills and agents for Claude Code — covering OAuth/OIDC protocols, IdentityServer, token management, ASP.NET Core authentication/authorization, BFF patterns, and secure identity architecture
24 skills · 2 agents
SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening
5 skills · 3 commands · 2 agents
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.