recon-operations
claudeProvides authorized network, public-exposure, human, physical, and AI-system reconnaissance with explicit scope, contact, noise, evidence, and automation boundaries.
9 skills
152
claude
application-endpoint-security
Tracks authorized security assessment coverage across web, cloud, mobile, firmware, endpoint persistence, and offline password auditing without turning missing evidence into clean results.
/
Plugin application-endpoint-security from marketplace zero-lab in zero-lab-ai/skills. Commands read from the repo's manifest — 19 days ago.
What it installs
Skills (6)
cloud-attack-pathMaps cloud identity and authorization paths across AWS, Azure, GCP, and hybrid trust boundaries, separating proven access from plausible and blocked routes. Use during an authorized cloud penetration test when tracing how a starting identity could assume roles, use credentials, execute workloads, cr
firmware-hardware-assessmentTracks embedded-device and firmware assessment coverage across exact units, acquisition methods, debug interfaces, stored secrets, update trust, radios, physical safety, and delegated external systems. Use when planning, conducting, reviewing, or handing over an authorized hardware or IoT penetratio
mobile-application-assessmentTracks Android and iOS application assessment coverage across packages, platform components, local storage, device behavior, WebViews, native code, network trust, and delegated backend APIs. Use when planning, conducting, reviewing, or handing over an authorized mobile app penetration test.
password-audit-planPlans authorized offline password-strength audits across supplied hash datasets while enforcing compute budgets, progressive pass order, cohort coverage, aggregate-only reporting, and restricted handling. Use when preparing or documenting password cracking without online authentication, spraying, st
persistence-surface-assessmentMeasures local Windows and Linux endpoint persistence exposure from supplied evidence by deriving consumer, authority, lifecycle, prevention, context, telemetry, and coverage state. Use when auditing durable-execution risk without creating, activating, testing, ranking, or removing a persistence mec
web-assessment-coverageTracks web application assessment coverage across endpoints, inputs, roles, authentication states, and test families, preventing untested or blocked work from being reported as clean. Use when planning, conducting, reviewing, or handing over an authorized web or API penetration test.
More from zero-lab-ai/skills
All 10 plugins →identity-security
claudeAssesses Active Directory, AD CS, Kerberos, credentials, privilege escalation, lateral movement, and durable identity exposure while separating structural paths from demonstrated access.
8 skills
152
engagement-operations
claudeProvides engagement planning, AI threat modeling, action-proof review, security-tool governance, findings writing, and report assembly with defensible evidence boundaries.
7 skills
152
detection-validation
claudeBuilds and validates detections, audits telemetry coverage, tests defensive resilience, correlates incident evidence, and synthesizes control evidence without inflating coverage.
6 skills
152
Plans and assesses wireless, network-protocol, traffic, command-channel, and bounded covert-channel security work with explicit scope, safety, evidence, and detection boundaries.
5 skills
152
agent-security
claudeReviews agent and MCP surfaces, tests prompt-injection and runtime controls, and maps identity and authority across agent handoffs.
4 skills
152
Maintain application-endpoint-security?
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.
claude & codex plugins10 plugins