as-foss/aegis-skills

as-foss/aegis-skills · skills/code/api-security/SKILL.md · Audit playbook module for API-specific security failures covering mass assignment, missing rate limits and pagination…

as-foss/aegis-skills · skills/code/authn-session/SKILL.md · Detect authentication and session management failures across login, password storage, password reset, MFA, session…

as-foss/aegis-skills · skills/code/authz-access-control/SKILL.md · Detects broken function-level and object-level authorization (BFLA/BOLA), vertical and horizontal privilege escalation…

as-foss/aegis-skills · skills/code/baas-platform/SKILL.md · Audits Backend-as-a-Service and managed-platform configuration - Supabase RLS, Firebase security rules…

as-foss/aegis-skills · skills/code/business-logic-races/SKILL.md · Audit playbook module for business logic flaws and race conditions covering workflow and state-machine bypass, price…

as-foss/aegis-skills · skills/code/cloud-iam/SKILL.md · Audit playbook module for cloud IAM and identity misconfiguration recovered from repository and IaC artifacts -…

as-foss/aegis-skills · skills/code/configuration-hardening/SKILL.md · Audit repositories for insecure defaults and hardening gaps across debug modes, exposed admin and actuator surfaces…

as-foss/aegis-skills · skills/code/crypto/SKILL.md · Detects cryptographic failures including weak/legacy algorithms, cipher-mode and nonce misuse, broken key management…

as-foss/aegis-skills · skills/code/denial-of-service/SKILL.md · Detects application-layer denial-of-service and resource-exhaustion flaws (ReDoS regexes, unbounded parsing and…

as-foss/aegis-skills · skills/code/deserialization/SKILL.md · Detect unsafe deserialization of untrusted data (native serializers, XXE, YAML, prototype pollution) across all major…

as-foss/aegis-skills · skills/code/dns-takeover/SKILL.md · Audit playbook module for DNS attack surface and subdomain takeover (CWE-350), covering claimed-hostname inventory…

as-foss/aegis-skills · skills/code/email-sms/SKILL.md · Audit playbook module for email and SMS/OTP flows, covering outbound spoofing protection evidence (SPF/DKIM/DMARC…

as-foss/aegis-skills · skills/code/file-handling/SKILL.md · Audit playbook module for detecting path traversal, LFI/RFI, unsafe file upload/download/delete, Zip Slip and archive…

as-foss/aegis-skills · skills/code/gaming-security/SKILL.md · Audit playbook module for video-game and multiplayer-service backends, hunting client-trust violations in simulation…

as-foss/aegis-skills · skills/code/http-protocol/SKILL.md · Audit playbook module for detecting HTTP protocol-level attack surface in proxied internet-facing applications -…

as-foss/aegis-skills · skills/code/injection/SKILL.md · Audit playbook module for detecting and remediating the full injection family (SQL, NoSQL, OS command, template…

as-foss/aegis-skills · skills/code/llm-ai/SKILL.md · Audit playbook module for application-code LLM integrations covering direct and indirect prompt injection, insecure…

as-foss/aegis-skills · skills/code/malicious-code/SKILL.md · Hunts deliberately malicious constructs — obfuscated payloads, exfil beacons, backdoor routes, install-time implants…

as-foss/aegis-skills · skills/code/memory-safety/SKILL.md · Detects memory-safety defects in native code (C/C++/Objective-C and unsafe Rust/FFI boundaries) including buffer…

as-foss/aegis-skills · skills/code/oauth-sso/SKILL.md · Deep-audit checks for OAuth 2.0, OIDC, and SAML federation covering flow misuse, redirect_uri validation, state and…

as-foss/aegis-skills · skills/code/secrets-data-exposure/SKILL.md · Detects hardcoded credentials, secrets leaked into VCS history and build artifacts, runtime information disclosure, PII…

as-foss/aegis-skills · skills/code/ssrf-url-security/SKILL.md · Audit playbook module for server-side request forgery (CWE-918) and open-redirect failures (CWE-601), covering…

as-foss/aegis-skills · skills/code/supply-chain/SKILL.md · Audits dependency manifests, lockfiles, vendored code, and CI/CD definitions for supply-chain weaknesses such as…

as-foss/aegis-skills · skills/code/web-client/SKILL.md · Detects and remediates browser-facing web vulnerabilities including reflected, stored, and DOM-based XSS, CSRF…

as-foss/aegis-skills · skills/operations/blue-team-detection/SKILL.md · Detection-engineering companion that converts every vulnerability class this playbook's red-team modules can find into…

as-foss/aegis-skills · skills/operations/dfir-triage/SKILL.md · First-60-120-minute DFIR triage for a suspected-compromised Linux host or Kubernetes node - volatile capture, session…

as-foss/aegis-skills · skills/operations/incident-response/SKILL.md · Dual-purpose incident-response module that audits whether an organization actually possesses IR capability and provides…

as-foss/aegis-skills · skills/operations/vuln-mgmt-process/SKILL.md · Defines the recurring vulnerability-management loop that consumes this skillset's audit outputs and keeps every finding…

as-foss/aegis-skills · skills/server/api-token-security/SKILL.md · Audits the full lifecycle of bearer/API tokens protecting an internet-exposed HTTP API — minting entropy and format…

as-foss/aegis-skills · skills/server/backup-dr/SKILL.md · Audits backup hygiene and disaster-recovery readiness for Linux hosts — job inventory and coverage-gap analysis…

as-foss/aegis-skills · skills/server/cloudflared-tunnel/SKILL.md · Audits Cloudflare Tunnel (cloudflared) deployments for daemon credential exposure, imprecise ingress rules, origin…

as-foss/aegis-skills · skills/server/db-server-hardening/SKILL.md · Audits database server hardening for PostgreSQL, MySQL/MariaDB, Redis, and MongoDB — network placement and binding…

as-foss/aegis-skills · skills/server/firewall-edge/SKILL.md · Audits host firewall state and network-edge exposure on Linux hosts — listener inventory and wildcard bindings…

as-foss/aegis-skills · skills/server/host-secrets/SKILL.md · Inventories and hardens secrets stored on a Linux host — env and config files, systemd environments, cron and history…

as-foss/aegis-skills · skills/server/kubernetes-cluster/SKILL.md · Audits Kubernetes cluster security posture across API server access, RBAC blast radius, admission control, workload…

as-foss/aegis-skills · skills/server/linux-baseline/SKILL.md · Audits Linux OS baseline hardening across accounts/sudo, sshd, PAM/password policy, kernel sysctl, filesystem…

as-foss/aegis-skills · skills/server/logging-monitoring/SKILL.md · Audits Linux logging, monitoring and intrusion detection on servers — journald persistence, rsyslog coverage and…

as-foss/aegis-skills · skills/server/service-sandboxing/SKILL.md · Audit Linux service and process containment covering root-running units, systemd sandboxing directives, MAC system…

as-foss/aegis-skills · skills/server/tls-proxy/SKILL.md · Hardening-audit module for reverse-proxy edges and TLS termination (nginx primary; Caddy, HAProxy, Apache secondary)…

as-foss/aegis-skills · skills/server/updates-patching/SKILL.md · Audits Linux server patch discipline and attack-surface minimization — distro EOL posture, pending security updates…