zero-lab-ai / skills

# zero-lab skills
Portable, evidence-bound security skills for authorized defensive assessment,
penetration testing, red teaming, detection engineering, purple teaming, and
engagement operations.
The collection contains **56 skills in 10 installable plugins** from
zero-lab.ai. Install a coherent bundle, or copy an
individual skill folder into any agent harness that reads `SKILL.md`.
> [!IMPORTANT]
> These skills support authorized security work. They do not grant permission,
> expand scope, or replace an organization's rules of engagement. Skills that
> touch adversary behavior are designed to measure exposure, preserve evidence,
> and hand results back to defenders.
## Contents
- Install
- Bundles
- Skill index
- Compatibility
- Trust and safety
- Repository structure
- Contributing
- Contributors
- Security
- License
## Install
### Claude Code
 [code] 
Select the bundle you need from the marketplace menu.
### Codex
Codex reads the same marketplace metadata directly:
 [code] 
### ChatGPT Workspace Marketplace
Use this repository's `.claude-plugin/marketplace.json` for workspace imports.
Each skill includes `agents/openai.yaml` with its display name, description,
Zero Lab mark, and brand color.
### Other agent harnesses
Install the cross-agent skills tree:
 [code] 
You can also copy a single
`plugins/ /skills/ /` directory into the location your harness
scans. Nothing outside that skill directory is required at runtime.
## Bundles
| Plugin | Skills | Purpose |
| --- | ---: | --- |
| `agent-security` | 4 | Agent surfaces, prompt injection, runtime validation, and trust boundaries |
| `recon-operations` | 9 | Network, public-exposure, human, physical, and AI-system reconnaissance |
| `identity-security` | 8 | Directory, credential, privilege, and lateral-movement security |
| `application-endpoint-security` | 6 | Cloud, web, mobile, firmware, endpoint, and password assessment coverage |
| `network-protocol-security` | 5 | Wireless, traffic, protocol, command-channel, and egress security |
| `binary-forensics` | 4 | Binary-fault, memory, and rootkit triage |
| `detection-validation` | 6 | Detection engineering, validation, telemetry, resilience, and control evidence |
| `engagement-operations` | 7 | Planning, AI threat modeling, evidence proof, findings, and report assembly |
| `rag-security` | 3 | Retrieval-surface, integrity, tenant, data-exposure, and cleanup assessment |
| `ml-system-security` | 4 | Model artifacts, decision boundaries, datasets, and serving exposure |
## Skill index
### Agent and AI systems
Install `agent-security`.
| Skill | Use it when… |
| --- | --- |
| `agent-surface-audit` | Reviewing agent tools for poisoning, excess privilege, unsafe parameters, and deployment blast radius |
| `agent-runtime-validation` | Validating deployed tools, memory, hooks, approvals, identities, and scope controls with benign sentinels |
| `prompt-injection-assessment` | Assessing instruction influence and policy bypass across direct, indirect, re