About UnboundCompute/security-agent-skills
194 tool-agnostic security-testing skills for AI coding agents: white-box bug hunting, AI-agent and LLM red-teaming, code-interpreter sandbox and model-inference-endpoint abuse, server-side injection and deserialization depth across SQL, NoSQL, LDAP, expression-language, and object streams, cloud identity, secrets, and KMS trust, infrastructure-as-code and container/Kubernetes and host workload trust, network, wire-protocol, and multiplexing trust across HTTP/2, gRPC, message brokers, and mutual TLS, federation and token trust across SAML, OIDC, OAuth, and JWT, enterprise identity lifecycle across SCIM and JIT provisioning, directory sync, MFA and key lifecycle, Kerberos delegation, and break-glass and machine-identity trust, account-recovery and payment-and-commerce integrity, client-app trust surfaces across browser and editor extensions and Electron, mobile app security, smart-contract and DeFi review across EVM and Move plus web3 account-abstraction, cross-chain bridge, MEV, signature-replay, and wallet-drainer trust, browser third-party-script and clickjacking trust, IoT and edge BLE and firmware-update trust, skill and supply-chain trust, API and object-authorization depth, firmware and embedded-software trust, web and transport trust boundaries, authentication and session depth, rate-limiting and multi-tenant isolation, file-upload and resource-exhaustion depth, the classic web-attack classes across XSS, template and command injection, XXE, XPath, path traversal, formula and include injection, HTTP parameter pollution, and CRLF, the web trust-boundary classes across open redirect, CSRF, host-header and URL-parsing trust, cache deception, server-side rendering and SVG abuse, Unicode canonicalization bypass, and postMessage trust, Windows and Active Directory privilege escalation and domain identity abuse across services, DLL search order, tokens and privileges, ADCS, directory ACLs, NTLM coercion and relay, group policy, and credentials, native iOS and Android