AGENT SKILLS · 任务装备 / transilienceai

transilienceai · Agent Skills

20 skills with substantive source documentation and an official publisher or observed installation demand. Read each skill’s original documentation through its card.

transilienceai

社区

blockchain-security

Smart contract security testing and blockchain CTF exploitation. Covers Solidity vulnerability analysis, EVM storage manipulation, delegatecall attacks, CREATE/CREATE2 address prediction, and common DeFi exploit patterns. Use when analyzing Solidity contracts, solving blockchain challenges, or testing smart contract security.

安装量: 4
GitHub Stars: 582
最近更新: 7月29日

attack-path-stitcher

Stitches confirmed single-asset findings into multi-hop attack paths across the organization. Builds a graph where nodes are assets and edges are confirmed exploit hops citing the findings that enable them.

安装量: 2
GitHub Stars: 560
最近更新: 7月29日

authenticated-session-acquisition

Acquire an authenticated session THROUGH MFA/OTP on an in-scope target and emit a reusable session artifact (Playwright storageState + Bearer) so executors can test the post-auth attack surface. Use when the highest-value authenticated classes (BOLA/IDOR/mass-assignment/injection on the real data APIs) are blocked because login is gated by SMS-OTP or TOTP MFA. Distinct from the authentication skill (which ATTACKS auth); this one legitimately authenticates and hands the session to the rest of the

安装量: 1
GitHub Stars: 534
最近更新: 7月29日

client-side

Client-side vulnerability testing - XSS (reflected/stored/DOM), CSRF, CORS misconfiguration, Clickjacking, DOM-based attacks, and Prototype Pollution.

安装量: 1
GitHub Stars: 534
最近更新: 7月29日

coordination

Pentest coordination — orchestrates executor and validator agents with context-controlled spawning. Entry point for all engagements.

安装量: 1
GitHub Stars: 534
最近更新: 7月29日

cve-risk-score

Retrieve CVE risk scores from NVD. Auto-invoked whenever a CVE ID is mentioned to display CVSS score, severity, CWE, and description.

安装量: 1
GitHub Stars: 534
最近更新: 7月29日

dfir

Digital forensics and incident response - Windows event log analysis, PCAP forensics, filesystem artifact analysis, AD attack detection, and timeline correlation. Use when investigating security incidents, analyzing Sherlocks, or performing threat hunting on provided evidence files.

安装量: 1
GitHub Stars: 534
最近更新: 7月29日

hackthebox

HackTheBox platform operations and automations to solve challenges, machines and capture the flags hacking competitions

安装量: 1
GitHub Stars: 534
最近更新: 7月29日

infrastructure

Network infrastructure testing - port scanning, DNS attacks, MITM, VLAN hopping, IPv6, SMB/NetBIOS, sniffing, and DoS assessment.

安装量: 1
GitHub Stars: 534
最近更新: 7月29日

mobile-security

Mobile application security testing (Android + iOS) mapped to OWASP MASVS/MASTG — static reversing (Flutter AOT, Unity IL2CPP, React Native/Hermes, native ARM64, Mach-O/Swift), SAST (manifest/IPC, storage, crypto, signing), dynamic analysis (Frida/objection, TLS-pinning + root/jailbreak bypass, traffic interception), and privacy testing.

安装量: 1
GitHub Stars: 534
最近更新: 7月29日

patt-fetcher

Fetches and extracts payloads from PayloadsAllTheThings on demand. Bake into executor prompts for live payload enrichment.

安装量: 1
GitHub Stars: 534
最近更新: 7月29日

pci-secure-software

Automated PCI Secure Software Standard (SSS) v2.0 readiness gap-assessment of an application from its source code and documentation. Deterministically enumerates every applicable Test Requirement from a pinned catalog, gathers source/doc evidence, and emits an evidence-bound per-requirement verdict (MET / NOTMET / PARTIALLYMET / NOTAPPLICABLE / REQUIRESMANUALREVIEW) with file+line citations, then a Transilience gap report. Use when asked to assess, gap-assess, or check an application's readiness

安装量: 1
GitHub Stars: 534
最近更新: 7月29日

risk-prioritiser

Risk-based prioritisation of confirmed attack paths. Combines exploit feasibility, technical CVSS severity, and asset business impact into a single ranked list driving remediation roadmaps.

安装量: 1
GitHub Stars: 534
最近更新: 7月29日

script-generator

Generates optimized, syntax-validated scripts on demand. Never executes — only generates, optimizes, and validates.

安装量: 1
GitHub Stars: 534
最近更新: 7月29日

server-side

Server-side vulnerability testing - SSRF, HTTP Request Smuggling, Path Traversal, File Upload, Insecure Deserialization, and Host Header injection.

安装量: 1
GitHub Stars: 534
最近更新: 7月29日

skill-update

Skill creation, update and management — generates skill directory structure, validates against best practices, enforces line count limits. Use when creating, updating, or improving skills.

安装量: 1
GitHub Stars: 534
最近更新: 7月29日

source-code-scanning

Security-focused source code review and SAST. Scans for vulnerabilities (OWASP Top 10, CWE Top 25), CVEs in third-party dependencies/packages, hardcoded secrets, malicious code, and insecure patterns. Use when given source code, a repo path, or asked to "audit", "scan", "review" code security, or "check dependencies for CVEs".

安装量: 1
GitHub Stars: 534
最近更新: 7月29日

techstack-identification

OSINT-based technology stack identification. Routes to 6 domain sub-skills (frontend, backend, infra, security, osint, correlation) to discover a target's stack from publicly available signals.

安装量: 1
GitHub Stars: 534
最近更新: 7月29日

ti-ingest

Threat-intel signal ingest — converts a CVE + affected-asset + claim payload into a queued engagement-scope row for the validation pipeline.

安装量: 1
GitHub Stars: 534
最近更新: 7月29日

transilience-report-style

Generate a Transilience-branded PDF report (pentest, vuln assessment, compliance, threat intel) from a single findings JSON using the bundled ReportLab generator. Use whenever an engagement needs its final report/deliverable PDF in Transilience house style.

安装量: 1
GitHub Stars: 534
最近更新: 7月29日

MIT5 文件

查看详情 →