---
title: "Security - Air Market"
description: "181 listings in Security on Air Market, with what each one does and who publishes it."
canonical: "https://airmarket.ai/category/security"
---

[Air Market](/) / [Categories](/categories) / Security

Category

# Security

181 published listings in Security on Air Market.

**Published listings, with what each one does**

| Listing | Kind | Publisher | What it does |
| --- | --- | --- | --- |
| [Verification Before Completion](/app/verification-before-completion) | Skill | Jesse Vincent | You are about to say something is finished, fixed or passing, or about to commit or open a pull request. This makes sure the checks are act… |
| [Azure Compliance & Security Auditing](/app/azure-compliance) | Skill | Microsoft | You need to know whether your Azure setup holds up to a security or compliance check, and whether something is quietly about to expire. Thi… |
| [Security and Hardening](/app/security-and-hardening) | Skill | Addy Osmani | You are adding a feature that takes input from users, logs people in, or stores personal details, and you want it done without leaving secu… |
| [modelarmor (v1)](/app/gws-modelarmor) | Skill | Google Workspace | People type things into your product, and some of it should not go straight through. This runs that content through Google Model Armor, whi… |
| [modelarmor +create-template](/app/gws-modelarmor-create-template) | Skill | Google Workspace | Before content can be screened, something has to say what the screening looks like. This creates a new Model Armor template - the reusable… |
| [modelarmor +sanitize-prompt](/app/gws-modelarmor-sanitize-prompt) | Skill | Google Workspace | Someone types a prompt into your product and it is about to reach a model. This passes that prompt through a Model Armor template first. Re… |
| [modelarmor +sanitize-response](/app/gws-modelarmor-sanitize-response) | Skill | Google Workspace | A model has produced an answer and it is about to be shown to somebody. This passes that answer through a Model Armor template first. Reach… |
| [Security Requirement Extraction](/app/security-requirement-extraction) | Skill | Seth Hobson | A threat model tells you what could go wrong, but not what anyone should do on Monday. This helps you turn those threats, plus what the bus… |
| [STRIDE Analysis Patterns](/app/stride-analysis-patterns) | Skill | Seth Hobson | You have a system and a nagging sense that someone should think hard about how it could be attacked. This gives you a structured way of goi… |
| [Threat Mitigation Mapping](/app/threat-mitigation-mapping) | Skill | Seth Hobson | You have a list of security threats and no clear answer to "so what do we fix?". This helps you line up each threat against the controls an… |
| [Authentication & Authorization Implementation Patterns](/app/auth-implementation-patterns) | Skill | Seth Hobson | Deciding who someone is and what they are allowed to do is easy to get subtly wrong, and the consequences are bad. This covers the establis… |
| [Attack Tree Construction](/app/attack-tree-construction) | Skill | Seth Hobson | Talking about security risk in the abstract rarely convinces anyone or finds anything. An attack tree lays out the routes an attacker could… |
| [Implementing Flutter Integration Tests](/app/flutter-add-integration-test) | Skill | Flutter | You have a Flutter app and you keep checking the same screens by hand. This sets up the tooling that drives your app for you, and turns the… |
| [Solidity Security](/app/solidity-security) | Skill | Seth Hobson | Smart contracts are hard to fix once deployed, and the same vulnerabilities keep appearing in new ones. This covers the security practices… |
| [Kubernetes Security Policies](/app/k8s-security-policies) | Skill | Seth Hobson | A Kubernetes cluster is wide open by default: anything can talk to anything, and accounts often have more power than they need. This writes… |
| [Secrets Management](/app/secrets-management) | Skill | Seth Hobson | Passwords and keys have a way of ending up wherever the build can reach them, which is also wherever a leak can. This covers handling those… |
| [Protocol Reverse Engineering](/app/protocol-reverse-engineering) | Skill | Seth Hobson | Two things are talking over the network and there is no documentation for what they say. This helps you take the traffic apart, work out th… |
| [Authenticating to Google Cloud](/app/google-cloud-recipe-auth) | Skill | Google | You need your code or your account to prove who it is to a cloud service, and the options all sound similar. This explains how authenticati… |
| [Google Cloud Security](/app/google-cloud-waf-security) | Skill | Google | You have something running or planned on Google Cloud and need to know whether it is secure enough. This evaluates the workload, works out… |
| [Memory Forensics](/app/memory-forensics) | Skill | Seth Hobson | Something happened on a machine and the evidence you need was only ever in memory. This covers taking that memory image and going through i… |
| [Binary Analysis Patterns](/app/binary-analysis-patterns) | Skill | Seth Hobson | Sometimes you have a compiled program and no source code, and you still need to know what it does. This covers the ways people read binarie… |
| [Anti-Reversing Techniques](/app/anti-reversing-techniques) | Skill | Seth Hobson | You are pulling apart a program and it is fighting back - packed, obfuscated, or behaving differently when it senses a debugger. This expla… |
| [SAST Configuration](/app/sast-configuration) | Skill | Seth Hobson | Security bugs in code are easier to catch by machine than by eye, but the scanning tools take setup. This covers configuring those tools so… |
| [mTLS Configuration](/app/mtls-configuration) | Skill | Seth Hobson | Your services talk to each other over the network, and right now anything that can reach them can talk to them too. This helps you set thin… |
| [Security Best Practices](/app/security-best-practices) | Skill | OpenAI | You have written something and want to know whether it is safe, not whether it is tidy. This reviews your code against security practices f… |
| [AI Prompt Engineering Safety Review & Improvement](/app/ai-prompt-engineering-safety-review) | Skill | GitHub | You wrote a prompt and you are not sure it holds up - it might be biased, easy to abuse, or just not doing what you meant. This reviews the… |
| [Agent Governance Patterns](/app/agent-governance) | Skill | GitHub | Your AI agent can touch real systems - APIs, databases, files - and right now nothing stands between it and a bad instruction. This covers… |
| [1Password CLI](/app/1password) | Skill | openclaw | You keep passwords and keys in 1Password, but the thing you are working on needs them too, and retyping or pasting them is a pain. This get… |
| [Threat Model Source Code Repo](/app/security-threat-model) | Skill | OpenAI | Before you can defend something you need to know how it could be attacked. This looks at the actual repository and writes out what is worth… |
| [Testing and Mocking Dart Applications](/app/dart-generate-test-mocks) | Skill | Flutter | The class you want to unit test depends on something big and external, like an API or a database, and you do not want the test to reach it.… |
| [Implementing Dart and Flutter Test Coverage](/app/dart-collect-coverage) | Skill | Flutter | You have tests but no clear picture of what they actually exercise. This gathers coverage from a run and turns it into an LCOV report, the… |
| [SecOps Detection Coverage Skill](/app/detection-engineering-coverage-evaluation) | Skill | Google | You read about a new attacker technique and want to know whether your detections would catch it. This takes the writeup, works out what sho… |
| [Differential Security Review](/app/differential-review) | Skill | Trail of Bits | Someone hands you a pull request and you need to know if it makes things less secure. This reviews the change with security in mind, uses t… |
| [Supply Chain Risk Auditor](/app/supply-chain-risk-auditor) | Skill | Trail of Bits | Your project pulls in code you did not write, and some of it may be unmaintained, controlled by one person, or running scripts the moment y… |
| [Web Application Penetration Testing](/app/web-pentest) | Skill | Nous Research | When you are allowed to check a web app for weaknesses, you still have to do the looking, confirm what is real, and write it up. This runs… |
| [OSS Security Forensics Skill](/app/oss-forensics) | Skill | Nous Research | Something your software depends on through GitHub may have been tampered with. This helps with the investigation: recovery, pulling out ind… |
| [Domain Intelligence - Passive OSINT](/app/domain-intel) | Skill | Nous Research | When you need to learn about a domain, for a security check or an investigation, this gathers what is already out there: its subdomains, it… |
| [Secret Scanning](/app/secret-scanning) | Skill | GitHub | Passwords and API keys end up committed by accident, and once they are in the history they are a problem. This helps you switch on the chec… |
| [GKE Platform Security](/app/gke-platform-security) | Skill | Google | You need the cluster itself locked down: who can administer it, what is allowed to run, and which security features are switched on. This p… |
| [GKE Workload Security](/app/gke-workload-security) | Skill | Google | You have apps running on Google Kubernetes Engine and you are not sure how much they can reach or who could reach them. This checks the cur… |
| [Secure Workflow Guide](/app/secure-workflow-guide) | Skill | Trail of Bits | You have contract code and you know it needs a security pass, but not where to start or what order to do things in. This walks you through… |
| [Sharp Edges Analysis](/app/sharp-edges) | Skill | Trail of Bits | Some code is not wrong, it is just easy to use wrongly - a setting that quietly turns off a protection, a function that fails open. This lo… |
| [AWS IAM - Common Pitfalls](/app/aws-iam) | Skill | Amazon Web Services | Permissions on AWS are full of small rules that behave differently from how people remember them, and a wrong guess quietly opens or blocks… |
| [False Positive Check](/app/fp-check) | Skill | Trail of Bits | Someone reports a security bug and you do not yet know if it is real. This works through the suspected bug and comes back with a verdict -… |
| [Variant Analysis](/app/variant-analysis) | Skill | Trail of Bits | You just found a bug in one file, and now you are wondering if the same mistake was made somewhere else. This helps you go looking for the… |
| [SARIF Parsing Best Practices](/app/sarif-parsing) | Skill | Trail of Bits | Your scanners produced a big machine-readable results file and now you have to do something with it. This reads those files, filters them,… |
| [Security Ownership Map](/app/security-ownership-map) | Skill | OpenAI | Sensitive code sometimes ends up with nobody watching it, and the ownership file says otherwise. This reads the repository's git history to… |
| [Semgrep Rule Creator](/app/semgrep-rule-creator) | Skill | Trail of Bits | You spotted a bad pattern in your code and you don't want to find it by hand again. This writes a rule that scans for it automatically. Rea… |
| [Entry Point Analyzer](/app/entry-point-analyzer) | Skill | Trail of Bits | Before auditing a smart contract you need to know where it can be poked from the outside. This finds the externally callable functions that… |
| [Audit Prep Assistant](/app/audit-prep-assistant) | Skill | Trail of Bits | A security review is coming and the codebase is not in a state anyone wants to hand over. This walks the preparation with Trail of Bits' ch… |
| [Solana Vulnerability Scanner](/app/solana-vulnerability-scanner) | Skill | Trail of Bits | You have a Solana or Anchor program and want to know if it has the well-known holes before someone else finds them. This scans it for a set… |
| [Token Integration Analyzer](/app/token-integration-analyzer) | Skill | Trail of Bits | Tokens often do not behave the way the standard says, and a protocol that assumes they do can break. This looks at a token contract for odd… |
| [Firebase APK Security Scanner](/app/firebase-apk-scanner) | Skill | Trail of Bits | Mobile apps often talk to a cloud backend, and that backend is sometimes left unprotected. This scans an Android app package for those mist… |
| [Guidelines Advisor](/app/guidelines-advisor) | Skill | Trail of Bits | You have smart contract code and you want to know where it is weak before it matters. This reads the codebase and reports back on architect… |
| [Coverage Analysis](/app/coverage-analysis) | Skill | Trail of Bits | You have a fuzzer running but no idea how much of the code it really gets to. This measures which code was exercised during fuzzing. Reach… |
| [Writing Fuzzing Harnesses](/app/harness-writing) | Skill | Trail of Bits | You want to fuzz something, and the hard part is the harness: the small piece of code that hands input to the thing under test. This collec… |
| [Cargo Fuzz](/app/cargo-fuzz) | Skill | Trail of Bits | You have a Rust project and you want to find the inputs that break it. cargo-fuzz is the tool Rust projects using Cargo generally reach for… |
| [AddressSanitizer (ASan)](/app/address-sanitizer) | Skill | Trail of Bits | Fuzzing throws odd input at your program, but a memory bug can happen without the program obviously crashing. AddressSanitizer catches thos… |
| [Overcoming Fuzzing Obstacles](/app/fuzzing-obstacles) | Skill | Trail of Bits | Sometimes a fuzzer stalls because the code rejects everything it sends - a checksum does not match, or leftover state gets in the way. This… |
| [Semgrep Rule Variant Creator](/app/semgrep-rule-variant-creator) | Skill | Trail of Bits | You have a Semgrep rule that works, but your code is not all in one language. Give it the rule and the languages you want, and you get a se… |
| [Fuzzing Dictionary](/app/fuzzing-dictionary) | Skill | Trail of Bits | A fuzzer throwing random bytes at a parser rarely gets far, because it does not know the words the format uses. A dictionary gives it those… |
| [Constant-Time Testing](/app/constant-time-testing) | Skill | Trail of Bits | Some cryptographic code gives away secrets by how long it takes to run. That is a timing side channel, and it is hard to spot by reading. T… |
| [Algorand Vulnerability Scanner](/app/algorand-vulnerability-scanner) | Skill | Trail of Bits | You are reviewing an Algorand smart contract and there is a set of mistakes that come up again and again. This checks the contract for thos… |
| [Atheris](/app/atheris) | Skill | Trail of Bits | Fuzzing is usually talked about for C and C++, but Python code has bugs that odd input will find too. Atheris is a coverage-guided fuzzer f… |
| [AFL++](/app/aflpp) | Skill | Trail of Bits | You want to fuzz a C or C++ project and you have more than one processor core sitting idle. AFL++ is a fork of AFL built for that, with ext… |
| [OSS-Fuzz](/app/ossfuzz) | Skill | Trail of Bits | Fuzzing once finds what it finds; fuzzing continuously keeps finding things as the code changes. OSS-Fuzz runs that continuously for open s… |
| [TON Vulnerability Scanner](/app/ton-vulnerability-scanner) | Skill | Trail of Bits | You wrote a contract for TON and want the known dangerous patterns checked. This scans FunC contracts for a small set of critical issues: i… |
| [Cairo/StarkNet Vulnerability Scanner](/app/cairo-vulnerability-scanner) | Skill | Trail of Bits | You are auditing a contract written in Cairo and there is a short list of serious mistakes that keep showing up. This scans for them, inclu… |
| [Wycheproof](/app/wycheproof) | Skill | Trail of Bits | You have written or are reviewing cryptographic code and want to know it holds up against problems people have already found. Wycheproof su… |
| [Substrate Vulnerability Scanner](/app/substrate-vulnerability-scanner) | Skill | Trail of Bits | You are working on a Substrate or Polkadot runtime and want the known dangerous patterns checked before an audit. This scans your pallets f… |
| [LibAFL](/app/libafl) | Skill | Trail of Bits | Sometimes the target you want to fuzz does not fit any ready-made fuzzer, and you need to assemble one yourself. LibAFL is a library made o… |
| [Ruzzy](/app/ruzzy) | Skill | Trail of Bits | Fuzzing tools mostly assume you are working in C or Rust, which leaves Ruby out. Ruzzy is a coverage-guided fuzzer built for Ruby by Trail… |
| [Burp Project Parser](/app/burpsuite-project-parser) | Skill | Trail of Bits | You have a Burp Suite project file full of captured web traffic and you want to find something in it. This lets you search and explore that… |
| [Creating Secrets Using Best Practices](/app/creating-secrets-using-best-practices) | Skill | Amazon Web Services | You need to store a password or key for an app, and you know there is a right way to do it but not what that involves. This walks the creat… |
| [GitHub Actions Hardening](/app/github-actions-hardening) | Skill | GitHub | CI runs with real permissions, and a workflow that looks fine can still let outside code do damage. This reviews your GitHub Actions workfl… |
| [Setting Up EC2 Instance Profiles](/app/setting-up-ec2-instance-profiles) | Skill | Amazon Web Services | Something running on an EC2 instance needs to reach another AWS service, and the quick way is to paste credentials onto the machine. This s… |
| [Security Review](/app/security-review) | Skill | Hunter Bown | You want to know whether your code has real security holes, not just a list of lint warnings. This reviews where trusted and untrusted part… |
| [Crypto Protocol Diagram](/app/crypto-protocol-diagram) | Skill | Trail of Bits | Protocols are hard to follow when they only exist as source code, a spec document, or prose. This pulls the back-and-forth of messages out… |
| [Audit Augmentation](/app/audit-augmentation) | Skill | Trail of Bits | You have findings from several tools and a picture of how the code fits together, but they live in different places. This lays those findin… |
| [Trailmark Structural Analysis](/app/trailmark-structural) | Skill | Trail of Bits | Sometimes you want the whole structural read on a codebase at once rather than asking one question at a time. This builds the graph, runs t… |
| [Mermaid to ProVerif](/app/mermaid-to-proverif) | Skill | Trail of Bits | You have drawn your cryptographic protocol as a sequence diagram, and now you want to know whether it actually holds up. This turns that di… |
| [Vector Forge](/app/vector-forge) | Skill | Trail of Bits | You have code implementing a cryptographic algorithm and a set of tests, but no real confidence the tests exercise it. This locates the imp… |
| [C/C++ Security Review](/app/c-review) | Skill | Trail of Bits | You have C or C++ code and need to know whether it can be broken. This reviews it for the classic problems: memory corruption, numbers over… |
| [Authentication Code Review](/app/review-standards) | Skill | promptfoo | Authentication is the code you least want to get wrong and the hardest to review yourself. Ask for a review of it and this looks over that… |
| [Security Audit](/app/security-audit) | Skill | Donchitos | Before a game goes public, or multiplayer opens up, there are ways people will try to break it: editing saves, cheating, exploiting the net… |
| [CodeQL Code Scanning](/app/codeql) | Skill | GitHub | You want automatic security checks running on your code, and the setup involves workflow files and command-line flags you would rather not… |
| [AWS Auth (Amazon Cognito)](/app/aws-auth) | Skill | Amazon Web Services | Adding accounts to an app means a login page, password rules, tokens and deciding who can reach your API. This covers that with Cognito and… |
| [AWS Security](/app/aws-security) | Skill | Amazon Web Services | Something across your AWS accounts may be exposed, misconfigured or already flagged, and the findings live in several different services. T… |
| [YARA Rule Authoring](/app/yara-authoring) | Skill | elizaOS | You have seen something bad and want to catch it everywhere else it is hiding. This helps write and test YARA rules, the signatures used to… |
| [ThreatModel](/app/threatmodel) | Skill | Daniel Miessler 🛡️ | You have accounts, machines and data spread around, and no clear picture of what a break-in would reach. This maps where the sensitive thin… |
| [OAuth and OpenID Connect Expert](/app/oauth-expert) | Skill | RightNow | Sign-in standards have several flows that look similar and are not interchangeable, and the wrong one is a problem you find out about late.… |
| [Infisical Sync Expert Knowledge](/app/infisical-sync-skill) | Skill | RightNow | Working with a secrets vault means getting API calls and error messages right, and mistakes there are the kind you want to avoid. This give… |
| [Applied Cryptography Expertise](/app/crypto-expert) | Skill | RightNow | Cryptography is the one area where a reasonable guess can be quietly wrong. This brings expertise on TLS, symmetric and asymmetric encrypti… |
| [AWS Shield Advanced](/app/shieldadvanced) | Skill | Amazon Web Services | Something of yours is exposed to the internet and you want more protection against being flooded with traffic than the default gives you. T… |
| [Prompt Guard](/app/prompt-guard) | Skill | Orchestra Research | People can hide instructions inside text your app feeds to a model, and the model may follow them. This is a detector from Meta that inspec… |
| [NeMo Guardrails - Programmable Safety for LLMs](/app/nemo-guardrails) | Skill | Orchestra Research | An LLM app in front of real users can be pushed into saying things it should not, or into leaking things it should not. This adds checks ar… |
| [LlamaGuard - AI Content Moderation](/app/llamaguard) | Skill | Orchestra Research | If people can type anything into your app, some of it should not reach the model, and some of what the model says should not reach them. Th… |
| [Security Reviewer](/app/security-reviewer) | Skill | Jeffallan | You have code or infrastructure and no clear picture of where it is exposed. This looks for security weaknesses, writes up what it found wi… |
| [Secure Code Guardian](/app/secure-code-guardian) | Skill | Jeffallan | Login, permissions and anything a user types are where applications get broken into, and the safe way is not the obvious way. This helps yo… |
| [Safe File Deletion](/app/safe-file-deletion) | Skill | OpenMem | It is unnerving when files disappear without you being asked. This puts your explicit permission in front of any deletion, so nothing is re… |
| [Agent OWASP ASI Compliance Check](/app/agent-owasp-compliance) | Skill | GitHub | Your AI agent is heading for production and someone is going to ask whether it is secure. This checks an agent codebase against the OWASP l… |
| [Recon And Methodology](/app/recon-and-methodology) | Skill | yaklang.io Project | You have a new target and no idea where to begin. This is the groundwork step: what exists, what it runs on, and what order to look at it i… |
| [SQL Injection](/app/sqli-sql-injection) | Skill | yaklang.io Project | When something a user types ends up inside a database query, they may be able to change what that query does. This walks through where to l… |
| [Business Logic Vulnerabilities](/app/business-logic-vulnerabilities) | Skill | yaklang.io Project | Some flaws are not broken code at all: the app does exactly what it was built to do, and that is the problem. This covers thinking through… |
| [Rust Security Review](/app/rust-review) | Skill | Trail of Bits | Rust protects you until the moment you write unsafe, cross into C, or share state between threads, and then the ordinary guarantees stop. T… |
| [Cloudflare Analytics + Rule Management](/app/cloudflare) | Skill | Civitai | Odd traffic is arriving and you need to see who and what is behind it, then do something about it. This looks at your HTTP analytics - top… |
| [Unauthorized Access To Common Services](/app/unauthorized-access-common-services) | Skill | yaklang.io Project | Sometimes an admin service is sitting on the network with no password on it at all. This is a checklist of the usual ones and what you can… |
| [Skill Vetter 🔒](/app/skill-vetter) | Skill | NetEase Youdao | Someone sends you a skill and you have no idea what it will do once it is running on your machine. This reads it first and points out the p… |
| [Security Quick Audit](/app/security) | Skill | Florian BRUNIAUX | There is a well-known list of the security problems that turn up most often in web software. This does a quick assessment of your code agai… |
| [Sandbox Status Command](/app/sandbox-status) | Skill | Florian BRUNIAUX | The sandbox is doing its job quietly and you have no idea what it is set to or what it has stopped. This shows its current status, its conf… |
| [Unblock a session slowed by the sandbox](/app/sandbox-unblock) | Skill | Florian BRUNIAUX | Something looks blocked and you are about to ask whoever controls the settings to change them. This walks you through a set of checks first… |
| [Cyber Defense Team Skill](/app/cyber-defense-team) | Skill | Florian BRUNIAUX | You have server logs and a worry that something happened. This runs them through a set of agents that look for threats, flag odd access pat… |
| [Android Intent Security](/app/android-intent-security) | Skill | Android | Android apps can leave parts of themselves open to other apps, often without meaning to. This reviews how your components are configured an… |
| [cve - skill0](/app/cve) | Skill | x-cmd | Someone hands you a vulnerability id and you need to know what it is. This looks the record up for you, with no API key and no sign-up. Res… |
| [Agent Supply Chain Integrity](/app/agent-supply-chain) | Skill | GitHub | You installed plugins and tools into your agent and you cannot be sure they are still what they were. This produces checksums for them and… |
| [MCP Security Audit](/app/mcp-security-audit) | Skill | GitHub | Your project has a config file listing which MCP servers it loads, and that file can hide problems: a secret typed in plain, a version that… |
| [CI/CD SECURITY - Pipeline Attack Surface](/app/cicd-security) | Skill | Md Shariar Shanaz Shuvon | A target has public repos and an automated build system, and that build system is a place bugs get missed. This goes hunting there: workflo… |
| [Secure Code Review Checklist](/app/secure-code-review) | Skill | AIMING Lab | Some code sits where mistakes turn into security problems: anything touching user input, logins, files, the network, or a database. This go… |
| [Input Validation and Sanitization](/app/input-validation-and-sanitization) | Skill | AIMING Lab | Anything a stranger can send you can be wrong, malformed, or hostile. This checks and cleans that data before your code does anything with… |
| [Vulnerability Triage Brocards](/app/vulnerability-triage-brocards) | Skill | Trail of Bits | Security reports arrive faster than anyone can read them, and most of the work is deciding which ones are real. This applies a fixed set of… |
| [Patching CVEs in the Docker Image](/app/patch-cve) | Skill | HolmesGPT | A scan came back on your container image with vulnerabilities listed, and now you have to do something about them. This takes over that job… |
| [WPS PIN Attacks](/app/offensive-wps) | Skill | SnailSploit \| Kai Aizen | Consumer and ISP-supplied routers often ship with a one-touch setup feature left enabled, and it has been attackable for years. This covers… |
| [Android - check SharedPreferences](/app/offensive-jwt) | Skill | SnailSploit \| Kai Aizen | An app hands out signed login tokens and you need to know whether one can be forged or tampered with. This covers the ways that goes wrong:… |
| [Offensive Fuzzing](/app/offensive-fuzzing) | Skill | SnailSploit \| Kai Aizen | You want to find bugs by feeding a program input it never expected, but setting that up properly is fiddly. This walks the whole campaign:… |
| [Wi-Fi Reconnaissance](/app/offensive-wifi-recon) | Skill | SnailSploit \| Kai Aizen | Before attacking a wireless network you need to know what is there: which access points, on which channels, with which protections, and whi… |
| [Wireless / 802.11 - Offensive Testing Methodology](/app/offensive-wifi) | Skill | SnailSploit \| Kai Aizen | You have been asked to test a company's Wi-Fi, or you are walking an estate to see what its wireless looks like from outside. This lays out… |
| [SQL Injection - Offensive Testing Methodology](/app/offensive-sqli) | Skill | SnailSploit \| Kai Aizen | You are testing an application and want to know whether its inputs reach the database in a way they should not. This covers the whole range… |
| [Penetration Test Reporting - Professional Methodology](/app/offensive-reporting) | Skill | SnailSploit \| Kai Aizen | The testing is done and now you have to write it up, which is the part nobody enjoys and clients judge you on. This covers how to structure… |
| [Offensive OSINT Methodology](/app/offensive-osint) | Skill | SnailSploit \| Kai Aizen | Before touching anything, you want to know what is already visible about a company, a person or a domain. This gathers it: the domains and… |
| [Offensive Mobile](/app/offensive-mobile) | Skill | SnailSploit \| Kai Aizen | You have an app on a phone and you need to know what it is doing and what it leaks. This covers reading it without running it, hooking into… |
| [LoRaWAN & Sub-GHz Attacks](/app/offensive-lorawan-sub-ghz) | Skill | SnailSploit \| Kai Aizen | Plenty of things talk over unlicensed radio: garage openers, doorbells, tyre pressure sensors, city-wide sensor networks. This covers how t… |
| [KRACK & FragAttacks](/app/offensive-krack-fragattacks) | Skill | SnailSploit \| Kai Aizen | There is a family of Wi-Fi attacks from a few years back, and most modern devices are no longer vulnerable to them. This covers how to test… |
| [Business Logic - Offensive Testing Methodology](/app/offensive-business-logic) | Skill | SnailSploit \| Kai Aizen | The usual web vulnerability list has been covered and the app still has holes - the kind where you get an item for less than it costs, or c… |
| [Bluetooth Classic (BR/EDR) Attacks](/app/offensive-bluetooth-classic) | Skill | SnailSploit \| Kai Aizen | Some equipment still runs the older flavour of Bluetooth - car kits, industrial sensors, aging medical devices, audio accessories. This is… |
| [Bluetooth Low Energy (BLE) Attacks](/app/offensive-bluetooth-ble) | Skill | SnailSploit \| Kai Aizen | You are testing a device that talks over Bluetooth Low Energy - a smart lock, a tracker, a medical gadget, a beacon. This lays out how to g… |
| [Active Directory - Offensive Testing Methodology](/app/offensive-active-directory) | Skill | SnailSploit \| Kai Aizen | You have permission to attack a company's Windows network and you need a method rather than a pile of half-remembered tricks. This walks th… |
| [TOCTOU - Time-of-Check / Time-of-Use Exploitation](/app/offensive-toctou) | Skill | SnailSploit \| Kai Aizen | When you are security-testing something and worried about the gap between when a check happens and when the thing is actually used, this wa… |
| [IoT & Embedded - Offensive Testing Methodology](/app/offensive-iot) | Skill | SnailSploit \| Kai Aizen | You have a physical device to test - a smart home gadget, an industrial controller, something embedded - and the interesting parts are insi… |
| [Writing Flutter Widget Tests](/app/flutter-add-widget-test) | Skill | Flutter | You have a widget and you want to be sure it displays the right data and reacts when someone taps, scrolls or types into it. This writes a… |
| [Trailmark Finding Triage](/app/trailmark-finding-triage) | Skill | Trail of Bits | You have one flagged issue - from a scanner, an annotation, a report, or just a function that looks wrong - and you need to know whether it… |
| [Trailmark Variant Neighborhood](/app/trailmark-variant-neighborhood) | Skill | Trail of Bits | You found one bug. The same mistake is often repeated elsewhere by the same hands or through the same interface. This takes the issue you f… |
| [Trailmark Review Gate](/app/trailmark-review-gate) | Skill | Trail of Bits | A change can look fine line by line and still open something up - a new way in, a check quietly deleted, input now reaching somewhere sensi… |
| [Exposure Risk Quantification](/app/exposure-risk-quantification) | Skill | Sachin Sharma | You have a heap of security findings and someone upstairs wants to know how bad it is, in money. This turns those findings into a risk scor… |
| [Email Domain Security](/app/email-domain-security) | Skill | Sachin Sharma | Someone can often send email that looks like it came from your company, even when you think your records prevent it. This reads your domain… |
| [KeyStore Files with Nethereum](/app/keystore) | Skill | Nethereum | A private key sitting in plain text is a problem, so the usual answer is to wrap it in a password-protected file. This shows you how to do… |
| [Chief Security Officer Audit](/app/cso) | Skill | CWing | Most security passes read the code and stop, missing the secrets in your history, what your dependencies pull in, and your build pipeline.… |
| [harden](/app/agents-harden) | Skill | Amazon Web Services | Your agent works, and now it has to survive real users. This covers narrowing its permissions, controlling who can call it, handling secret… |
| [Using Secrets Safely with Agents](/app/aws-secrets-manager) | Skill | Amazon Web Services | When you let an AI assistant work with your cloud setup, it may try to read your passwords and keys out loud, which puts them in the conver… |
| [Security Patterns](/app/security-patterns) | Skill | CloudAI-X | You're building the parts where a mistake matters: signing people in, deciding what they can touch, and keeping keys and passwords somewher… |
| [MASTG Mobile Security Audit Skill](/app/mastg) | Skill | codecolorist | Mobile security reviews have a long standard checklist, and working through it by hand is tedious. This runs a checklist-driven audit acros… |
| [IGF (Grapefruit) CLI Skill](/app/igf) | Skill | codecolorist | When you are examining a mobile app while it is actually running, you need a way to reach into it. This is a command-line way into the Grap… |
| [Security Scan Diff](/app/security-scan-diff) | Skill | dyoshikawa | Code has gone in since your last tagged release and you want to know whether anything in it is hostile before you ship. This looks through… |
| [Security & Credentials](/app/axiom-security) | Skill | Charles Wiltgen | Some parts of an app you do not want to improvise: where secrets live, how stored data is encrypted, how people sign in, and the certificat… |
| [Security & Privacy Scanner Agent](/app/axiom-scan-security-privacy) | Skill | Charles Wiltgen | Before an app goes to the App Store there is a round of checking nobody enjoys: are there passwords sitting in the source, is sensitive dat… |
| [Project Hardening Audit](/app/harden) | Skill | Sterling Chin | You have a project that works but you are not sure how well it would hold up - security holes, thin tests, secrets sitting in the code. Thi… |
| [Careful](/app/careful) | Skill | Garry Tan | Everybody who works from a command line eventually types something they wish they hadn't, and the commands that make that mistake expensive… |
| [Freeze](/app/freeze) | Skill | Garry Tan | Say you are working on one part of a project and do not want anything else touched. This keeps edits inside the folder you choose, and the… |
| [Guard](/app/guard) | Skill | Garry Tan | You let an assistant run commands and change files on your machine, and you would rather it did not delete anything important or touch file… |
| [Unfreeze](/app/unfreeze) | Skill | Garry Tan | Suppose part of your project was put under a freeze so nothing in it could be edited, and now that work is finished. This clears the freeze… |
| [Review Renovate GitHub Actions PRs](/app/review-renovate) | Skill | Michael Ramos | A bot opened a pull request bumping your GitHub Actions and it is tempting to just merge. This reviews it instead: does the pinned commit a… |
| [Audit Dependencies](/app/audit-dependencies) | Skill | Payload | Some of the building blocks your project relies on have been flagged as unsafe, or your automated check just failed because of it. This hel… |
| [Data Breach Blast Radius Analyzer](/app/data-breach-blast-radius) | Skill | GitHub | If someone got in tomorrow, what would they walk away with, and what would it cost you? This takes stock of the sensitive data in your syst… |
| [Teleport Access List Review](/app/teleport-acl-review) | Skill | Teleport | Access lists come due for review and it is hard to know which ones. This finds the Teleport access lists that are due for audit and helps y… |
| [MCP Implementation Security Review](/app/mcp-implementation-security-review) | Skill | GitHub | You wrote an MCP server or client and you are about to release it, and you would rather someone looked hard at it first. This reads the sou… |
| [Teleport Session Recording Review](/app/teleport-session-review) | Skill | Teleport | You need to know what someone actually did during a session, and scrubbing recordings by hand is slow. This searches and reviews Teleport s… |
| [Teleport Investigate](/app/teleport-investigate) | Skill | Teleport | Something looks off around a user or a machine and you want to see the activity. This covers investigating identity and resource activity i… |
| [Teleport Access Review](/app/teleport-access-review) | Skill | Teleport | Someone asks who can get to a particular server, or you have an audit to answer for. This reviews access in a Teleport cluster: who can rea… |
| [Teleport Access List Lifecycle](/app/teleport-acl-lifecycle) | Skill | Teleport | Someone needs access, or someone's access needs taking away. This handles Teleport access lists from the command line: listing what is out… |
| [Verify Agent Action](/app/verify-agent-action) | Skill | GitHub | Sometimes an AI agent is about to do something with real consequences: run a command, deploy, send a message, spend money, touch credential… |
| [Electric - Postgres Security Checklist](/app/electric-postgres-security) | Skill | Electric | You are about to put this in front of real users, or a permission error is blocking you and the message does not say which grant is missing… |
| [Security Scan](/app/security-scan) | Skill | zereight | Before code goes out, it's worth a look for the obvious problems: known weaknesses, credentials left in a file, risky dependencies. This ru… |
| [Fuzzing Go expert](/app/fuzzing-go-expert) | Skill | Google | Fuzzing means feeding a program a flood of strange input to see what makes it fall over. This does that for open source Go projects. Reach… |
| [Fuzzing JVM expert](/app/fuzzing-jvm-expert) | Skill | Google | Fuzzing means feeding a program a flood of strange input to see what makes it fall over. This does that for open source projects on the JVM… |
| [Atmos Secrets](/app/atmos-secrets) | Skill | Cloud Posse | You need real credentials at run time but do not want them sitting in a config file. This declares secrets as references and fetches their… |
| [Atmos AWS Security Finding Analysis](/app/atmos-aws-security) | Skill | Cloud Posse | A security tool hands you a finding and you still have to figure out which part of your setup it belongs to and what to change. This traces… |
| [Atmos SBOM Provenance](/app/atmos-sbom) | Skill | Cloud Posse | Somebody has asked for a list of every component your infrastructure depends on. This generates it in CycloneDX or SPDX form, built from wh… |
| [Atmos AWS Compliance](/app/atmos-aws-compliance) | Skill | Cloud Posse | Someone asks how you are doing against a security standard and the answer is buried in a console. This pulls a compliance report for your A… |
| [x osv - Open Source Vulnerabilities](/app/x-osv) | Skill | x-cmd | Your project depends on other people's code, and some of it has known security problems. This lets you ask Google's OSV database about a pa… |
| [x kev - Known Exploited Vulnerabilities](/app/x-kev) | Skill | x-cmd | There are always more vulnerabilities than time to fix them, and most are not being attacked. CISA keeps a catalogue of the ones that are,… |
| [Plano Filter Chains and Guardrails](/app/plano-filter-guardrails) | Skill | Katanemo | You have filters and guards in a Plano setup and want them to actually hold. This covers setting up MCP filters, what a prompt guard respon… |
| [Plano Deployment and Security](/app/plano-deployment-security) | Skill | Katanemo | You are about to run Plano somewhere real and want the production questions answered before they bite. This covers Docker networking, where… |

---

Canonical URL: <https://airmarket.ai/category/security>