AGENT SKILLS · EQUIPO DE MISIÓN / transilienceai

transilienceai · Agent Skills

20 skills with substantive source documentation and an official publisher or observed installation demand. Read each skill’s original documentation through its card.

transilienceai

Comunidad

blockchain-security

Smart contract security testing and blockchain CTF exploitation. Covers Solidity vulnerability analysis, EVM storage manipulation, delegatecall attacks, CREATE/CREATE2 address prediction, and common DeFi exploit patterns. Use when analyzing Solidity contracts, solving blockchain challenges, or testing smart contract security.

instalaciones: 4
GitHub Stars: 582
Actualizado: 29 jul

attack-path-stitcher

Stitches confirmed single-asset findings into multi-hop attack paths across the organization. Builds a graph where nodes are assets and edges are confirmed exploit hops citing the findings that enable them.

instalaciones: 2
GitHub Stars: 560
Actualizado: 29 jul

authenticated-session-acquisition

Acquire an authenticated session THROUGH MFA/OTP on an in-scope target and emit a reusable session artifact (Playwright storageState + Bearer) so executors can test the post-auth attack surface. Use when the highest-value authenticated classes (BOLA/IDOR/mass-assignment/injection on the real data APIs) are blocked because login is gated by SMS-OTP or TOTP MFA. Distinct from the authentication skill (which ATTACKS auth); this one legitimately authenticates and hands the session to the rest of the

instalaciones: 1
GitHub Stars: 534
Actualizado: 29 jul

client-side

Client-side vulnerability testing - XSS (reflected/stored/DOM), CSRF, CORS misconfiguration, Clickjacking, DOM-based attacks, and Prototype Pollution.

instalaciones: 1
GitHub Stars: 534
Actualizado: 29 jul

coordination

Pentest coordination — orchestrates executor and validator agents with context-controlled spawning. Entry point for all engagements.

instalaciones: 1
GitHub Stars: 534
Actualizado: 29 jul

cve-risk-score

Retrieve CVE risk scores from NVD. Auto-invoked whenever a CVE ID is mentioned to display CVSS score, severity, CWE, and description.

instalaciones: 1
GitHub Stars: 534
Actualizado: 29 jul

dfir

Digital forensics and incident response - Windows event log analysis, PCAP forensics, filesystem artifact analysis, AD attack detection, and timeline correlation. Use when investigating security incidents, analyzing Sherlocks, or performing threat hunting on provided evidence files.

instalaciones: 1
GitHub Stars: 534
Actualizado: 29 jul

hackthebox

HackTheBox platform operations and automations to solve challenges, machines and capture the flags hacking competitions

instalaciones: 1
GitHub Stars: 534
Actualizado: 29 jul

infrastructure

Network infrastructure testing - port scanning, DNS attacks, MITM, VLAN hopping, IPv6, SMB/NetBIOS, sniffing, and DoS assessment.

instalaciones: 1
GitHub Stars: 534
Actualizado: 29 jul

mobile-security

Mobile application security testing (Android + iOS) mapped to OWASP MASVS/MASTG — static reversing (Flutter AOT, Unity IL2CPP, React Native/Hermes, native ARM64, Mach-O/Swift), SAST (manifest/IPC, storage, crypto, signing), dynamic analysis (Frida/objection, TLS-pinning + root/jailbreak bypass, traffic interception), and privacy testing.

instalaciones: 1
GitHub Stars: 534
Actualizado: 29 jul

patt-fetcher

Fetches and extracts payloads from PayloadsAllTheThings on demand. Bake into executor prompts for live payload enrichment.

instalaciones: 1
GitHub Stars: 534
Actualizado: 29 jul

pci-secure-software

Automated PCI Secure Software Standard (SSS) v2.0 readiness gap-assessment of an application from its source code and documentation. Deterministically enumerates every applicable Test Requirement from a pinned catalog, gathers source/doc evidence, and emits an evidence-bound per-requirement verdict (MET / NOTMET / PARTIALLYMET / NOTAPPLICABLE / REQUIRESMANUALREVIEW) with file+line citations, then a Transilience gap report. Use when asked to assess, gap-assess, or check an application's readiness

instalaciones: 1
GitHub Stars: 534
Actualizado: 29 jul

risk-prioritiser

Risk-based prioritisation of confirmed attack paths. Combines exploit feasibility, technical CVSS severity, and asset business impact into a single ranked list driving remediation roadmaps.

instalaciones: 1
GitHub Stars: 534
Actualizado: 29 jul

script-generator

Generates optimized, syntax-validated scripts on demand. Never executes — only generates, optimizes, and validates.

instalaciones: 1
GitHub Stars: 534
Actualizado: 29 jul

server-side

Server-side vulnerability testing - SSRF, HTTP Request Smuggling, Path Traversal, File Upload, Insecure Deserialization, and Host Header injection.

instalaciones: 1
GitHub Stars: 534
Actualizado: 29 jul

skill-update

Skill creation, update and management — generates skill directory structure, validates against best practices, enforces line count limits. Use when creating, updating, or improving skills.

instalaciones: 1
GitHub Stars: 534
Actualizado: 29 jul

source-code-scanning

Security-focused source code review and SAST. Scans for vulnerabilities (OWASP Top 10, CWE Top 25), CVEs in third-party dependencies/packages, hardcoded secrets, malicious code, and insecure patterns. Use when given source code, a repo path, or asked to "audit", "scan", "review" code security, or "check dependencies for CVEs".

instalaciones: 1
GitHub Stars: 534
Actualizado: 29 jul

techstack-identification

OSINT-based technology stack identification. Routes to 6 domain sub-skills (frontend, backend, infra, security, osint, correlation) to discover a target's stack from publicly available signals.

instalaciones: 1
GitHub Stars: 534
Actualizado: 29 jul

ti-ingest

Threat-intel signal ingest — converts a CVE + affected-asset + claim payload into a queued engagement-scope row for the validation pipeline.

instalaciones: 1
GitHub Stars: 534
Actualizado: 29 jul

transilience-report-style

Generate a Transilience-branded PDF report (pentest, vuln assessment, compliance, threat intel) from a single findings JSON using the bundled ReportLab generator. Use whenever an engagement needs its final report/deliverable PDF in Transilience house style.

instalaciones: 1
GitHub Stars: 534
Actualizado: 29 jul

MIT5 Archivos

Ver detalles →