cloudflare / security-audit-skill

A coding-agent skill that runs multi-phase security audits with isolated agents and independently verified, machine-readable findings.

zhaoxuya520 / reverse-skill

A routing pack that tells AI coding agents which reverse-engineering or pentest methodology and tools to use for APKs, binaries, JS crypto, PCAPs, and CTFs.

rawfilejson / awesome-osint-arsenal

Curated list and one-command installer for 750+ open-source intelligence and security tools across 50 categories.

danielmiessler / SecLists

A collection of security testing wordlists covering usernames, passwords, URLs, fuzzing payloads, web shells, and sensitive data patterns.

edoardottt / awesome-hacker-search-engines

A curated Markdown list of search engines for security work, covering servers, vulnerabilities, exploits, leaks, and threat intelligence.

OWASP / wstg

A community-written guide covering methods and test cases for security testing web applications and web services.

OWASP / Top10

Official repository for the OWASP Top 10 document, a ranked list of the most critical web application security risks.