hardw00t/ai-security-arsenal

1

android-pentest Comprehensive Android mobile application penetration testing with rooted-device ADB and Frida-based MCP tooling.

hardw00t/ai-security-arsenal

74

2

api-security Router skill for API penetration testing across REST, GraphQL, gRPC, and WebSocket. Covers OWASP API Top 10 (2023) in…

hardw00t/ai-security-arsenal

31

3

container-security Container and Kubernetes security assessment — image vulnerability scanning, SBOM diff analysis, K8s cluster auditing…

hardw00t/ai-security-arsenal

24

4

ios-pentest iOS mobile application penetration testing with Frida and Objection on jailbroken or non-jailbroken devices. Use for …

hardw00t/ai-security-arsenal

24

5

sca-security Software Composition Analysis: find vulnerable dependencies, correlate CVE/GHSA/OSV across ecosystems, generate Cyclo…

hardw00t/ai-security-arsenal

24

6

threat-modeling Systematic threat modeling skill for applications, APIs, and systems using STRIDE, PASTA, Attack Trees, DREAD, LINDDU…

hardw00t/ai-security-arsenal

23

7

iac-security Infrastructure-as-Code security scanning router for Terraform, CloudFormation, Kubernetes manifests, Helm, ARM/Bicep.

hardw00t/ai-security-arsenal

21

8

sast-orchestration Static Application Security Testing orchestration — run and compose Semgrep, CodeQL, Bandit, gosec, Brakeman, SpotBug…

hardw00t/ai-security-arsenal

21

9

llm-security LLM and AI application security testing skill for prompt injection (direct, indirect, multimodal), system-prompt extr…

hardw00t/ai-security-arsenal

20

10

network-pentest Internal network and Active Directory penetration testing skill for corporate environments.

hardw00t/ai-security-arsenal

20

11

cloud-security Multi-cloud security assessment skill for AWS, Azure, and GCP.

hardw00t/ai-security-arsenal

19

12

dast-automation Automated Dynamic Application Security Testing (DAST) using Playwright MCP plus standard OS pentest tooling. Performs…

hardw00t/ai-security-arsenal

14