Security

Exploits privileged pods, host mounts, runC CVEs, and exposed Docker sockets to break out of a container and reach the underlying host during an authorized…

Perform a thorough security review of the project, starting from a randomly selected file.

Install and use Tavily CLI (tvly) for web search/extract/crawl.

Create, edit, improve, review, audit, or clean up AgentSkills.

Gera um wizard bash interativo que conduz um humano por passos que só ele pode executar.

Solana token market data via Birdeye — prices, OHLCV, trades, token metadata, security checks, and trader activity

Free, no-auth multi-chain DEX pair data — prices, volume, liquidity, transactions, and token profiles

GitHub auth setup: HTTPS tokens, SSH keys, gh CLI login.

Audit a codebase, path, or branch diff for classic code smells against the 56-smell Luzkan catalog (PHP/Laravel and TS/React heuristics).

Edit video and audio with local FFmpeg from natural-language requests: cut, trim, join, resize/reframe (9:16, 1:1), speed change, captions and subtitles…

Audit completed results from literature, database, analysis, sequence, structure, or slide capabilities, then optionally assemble an explicitly adjudicated…

Extract and decrypt Windows DPAPI-protected secrets (Credential Manager, browser logins/cookies, Wi-Fi credentials, KeePass keys) online or offline using…

Edit prose that sounds machine-written while preserving the author's meaning and voice.

Make a repository's agent rulebook (AGENTS.md / CLAUDE.md) verifiable: vendor a deterministic checker, audit every rule and citation against the code…

Use when ai-badger's own machinery needs to be observed — "did that hook even run?", "enable debug logging", "why is the drift notice silent?", "turn on the…

Scan project and generate/audit CLAUDE.md files with stack auto-detection and Context7 docs.

Supply chain investigation, evidence recovery, and forensic analysis for GitHub repositories.

This skill should be used when the user asks to "open source this project", "prepare this repository for public release", "make this repo public", "check…

Design identity governance and lifecycle (IGA) programs on platforms like SailPoint, Saviynt, or Entra ID Governance, covering joiner-mover-leaver (JML)…

Detect NTLM relay attacks (T1557.001) by correlating Windows Event 4624 LogonType 3 for IP-to-hostname mismatches, identifying Responder/LLMNR poisoning…

SHA-256 hashes, environment snapshot, and activity-aware Methods text.

Capture a full DevTools-protocol trace of any browser automation — CDP firehose, screenshots, and DOM dumps — then bisect the stream into per-page searchable…

Generate API test suites from route definitions across frameworks: auth, input validation, contract, k6 load testing, mocking, and OpenAPI-driven generation.

Apple Human Interface Guidelines expert across iOS, iPadOS, macOS, watchOS, tvOS, and visionOS.