timsonner/agent-skills

1

curl Use for HTTP, HTTPS, and data-transfer validation during authorized pentests. Trigger on controlled request replay, h…

timsonner/agent-skills

2

2

gitleaks Use for repository and filesystem secret discovery during authorized pentests. Trigger on code review, repository hyg…

timsonner/agent-skills

2

3

kubectl Use for Kubernetes control-plane and workload validation during authorized pentests. Trigger on cluster inventory, RB…

timsonner/agent-skills

2

4

netcat Use for basic TCP or UDP connectivity, banner grabbing, listener setup, and controlled data-path validation during au…

timsonner/agent-skills

2

5

nmap Use for network discovery, service enumeration, exposure verification, and narrow retesting during authorized pentest…

timsonner/agent-skills

2

6

podman Use when creating, running, exec'ing, composing, or tearing down Podman containers on this host (incl. Cockpit). Pref…

timsonner/agent-skills

2

7

proxmox-system-administration Use when operating a Proxmox VE host with least-privilege workflows, reusable VM templates, and auditable hardening.

timsonner/agent-skills

2

8

proxmox-vm-recovery Handles troubleshooting and recovery of virtual machines (VMs) stuck during boot on Proxmox VE hosts. Activate this s…

timsonner/agent-skills

2

9

rclone Use for tightly scoped file transfer and cloud-storage access validation during authorized pentests. Trigger on appro…

timsonner/agent-skills

2

10

smbclient Use for SMB share review and file access validation during authorized internal assessments. Trigger on share enumerat…

timsonner/agent-skills

2

11

snmpwalk Use for SNMP enumeration during authorized pentests. Trigger on network device discovery, management plane review, co…

timsonner/agent-skills

2

12

socat Use for tightly scoped socket relays, port forwarding, and protocol bridging during authorized pentests. Trigger on a…

timsonner/agent-skills

2

13

tcpdump Use for packet capture and protocol troubleshooting during authorized pentests. Trigger on validating network observa…

timsonner/agent-skills

2

14

testssl-sh Use for TLS and certificate posture review during authorized pentests. Trigger on checking protocol support, cipher p…

timsonner/agent-skills

2

15

trivy Use for container, filesystem, and IaC review during authorized pentests. Trigger on image assessment, dependency and…

timsonner/agent-skills

2

16

wireshark Use for packet-level protocol review, detection visibility checks, and troubleshooting during authorized pentests. Tr…

timsonner/agent-skills

2

17

wsl-containers Build, run, debug, and publish Linux containers with Microsoft wslc on Windows (no Docker Desktop). Covers wslc CLI, …

timsonner/agent-skills

2

18

7zip Use for tightly scoped archive creation, compression, and packaging during authorized pentests. Trigger on approved e…

timsonner/agent-skills

1

19

amass Use for external asset discovery, subdomain mapping, and ownership-focused reconnaissance during authorized pentests.…

timsonner/agent-skills

1

20

aws-cli Use for AWS control-plane validation during authorized pentests. Trigger on credentialed cloud review, IAM boundary c…

timsonner/agent-skills

1

21

az-cli Use for Azure control-plane validation during authorized pentests. Trigger on credentialed Azure review, role and sub…

timsonner/agent-skills

1

22

browser-read-bypass Alias for windows-ui-inject. Inject mouse and keyboard on Windows via user32 when computer-use is screenshot-only or …

timsonner/agent-skills

1

23

burp-suite Use for manual web and API testing, authenticated workflow review, request replay, and controlled validation during a…

timsonner/agent-skills

1

24

dirsearch Use for web path and file enumeration during authorized pentests. Trigger on hidden endpoint discovery, lightweight c…

timsonner/agent-skills

1

25

dnsenum Use for domain and subdomain enumeration during authorized pentests. Trigger on DNS-backed host discovery, record rev…

timsonner/agent-skills

1

26

dnsrecon Use for DNS enumeration during authorized pentests. Trigger on zone review, host discovery, record correlation, and b…

timsonner/agent-skills

1

27

feroxbuster Use for recursive web content discovery during authorized pentests. Trigger on hidden directory discovery, route enum…

timsonner/agent-skills

1

28

ffuf Use for controlled web content discovery, endpoint enumeration, and narrow retest of hidden routes during authorized …

timsonner/agent-skills

1

29

gcloud Use for GCP control-plane validation during authorized pentests. Trigger on credentialed Google Cloud review, project…

timsonner/agent-skills

1

30

gobuster Use for directory, DNS, and virtual host enumeration during authorized pentests. Trigger on hidden content discovery,…

timsonner/agent-skills

1

31

gowitness Use for visual triage of web assets, login portals, and exposed interfaces during authorized pentests. Trigger on scr…

timsonner/agent-skills

1

32

httpx Use for HTTP service probing, web asset confirmation, technology hints, and endpoint inventory during authorized pent…

timsonner/agent-skills

1

33

kube-bench Use for Kubernetes CIS benchmark review during authorized pentests. Trigger on cluster hardening assessment, node and…

timsonner/agent-skills

1

34

kube-hunter Use for Kubernetes exposure and attack-surface review during authorized pentests. Trigger on cluster endpoint discove…

timsonner/agent-skills

1

35

masscan Use for high-speed network exposure discovery during authorized pentests. Trigger on very large approved address spac…

timsonner/agent-skills

1

36

mcp-server Specification for building Model Context Protocol servers using Python

timsonner/agent-skills

1

37

nessus Use for credentialed or non-credentialed vulnerability scanning during authorized pentests. Trigger on baseline expos…

timsonner/agent-skills

1

38

nikto Use for web server misconfiguration review and broad HTTP hygiene checks during authorized pentests. Trigger on inter…

timsonner/agent-skills

1

39

nuclei Use for templated vulnerability checks, exposure validation, and misconfiguration review during authorized pentests. …

timsonner/agent-skills

1

40

openvas Use for vulnerability scanning and baseline exposure review during authorized pentests. Trigger on broad host hygiene…

timsonner/agent-skills

1

41

owasp-zap Use for OWASP-focused web and API testing during authorized pentests. Trigger on proxy-based web review, automated or…

timsonner/agent-skills

1

42

prowler Use for cloud control-plane posture review, identity analysis, logging coverage checks, and configuration drift asses…

timsonner/agent-skills

1

43

read-canvas-browser Use this skill when browser text and accessibility tools fail because the page renders content in a canvas and you ne…

timsonner/agent-skills

1

44

scoutsuite Use for cloud posture review across AWS, Azure, and GCP during authorized pentests. Trigger on control-plane inventor…

timsonner/agent-skills

1

45

sqlmap Use for controlled SQL injection validation during authorized web and API assessments. Trigger on manually triaged in…

timsonner/agent-skills

1

46

subfinder Use for fast passive subdomain enumeration during authorized external reconnaissance. Trigger on internet-facing scop…

timsonner/agent-skills

1

47

theharvester Use for passive OSINT collection during authorized pentests. Trigger on email, domain, subdomain, and public-source m…

timsonner/agent-skills

1

48

trufflehog Use for repository, filesystem, and remote source secret discovery during authorized pentests. Trigger on secret hunt…

timsonner/agent-skills

1

49

wpscan Use for WordPress-specific assessment during authorized pentests. Trigger on confirmed WordPress installations, plugi…

timsonner/agent-skills

1