Maintainer of this skill?
by zero-lab-ai
Portable, evidence-bound security skills for authorized defensive assessment, red teaming, penetration testing, detection engineering, and engagement operations.
# Add to your Claude Code skills
git clone https://github.com/zero-lab-ai/skillsSee how skills compares with popular alternatives.
skills is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by zero-lab-ai. Portable, evidence-bound security skills for authorized defensive assessment, red teaming, penetration testing, detection engineering, and engagement operations. It has 53 GitHub stars.
skills's catalog security scan is still queued. You can run an instant dependency and prompt-injection check now with the "Scan for vulnerabilities" button above.
Clone the repository with "git clone https://github.com/zero-lab-ai/skills" and add it to your Claude Code skills directory (see the Installation section above).
skills is primarily written in Python. It is open-source under zero-lab-ai on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh skills against similar tools.
No comments yet. Be the first to share your thoughts!
Available after the catalog security scan passes.
⚠️ Third-Party Software Notice
This skill is third-party open-source software developed and hosted independently on GitHub. SkillsLLM is an informational directory and does not control or maintain the underlying repository.
Any security checks, ratings, or warnings displayed by SkillsLLM are automated and limited in scope. They do not constitute a security certification or guarantee that the software is safe, error-free, or free from malicious code, vulnerabilities, compromised dependencies, or prompt-injection risks.
Review the source code, permissions, dependencies, and configuration before installing or running any third-party skill. Use is at your own risk. To the maximum extent permitted by applicable law, SkillsLLM is not liable for losses arising from third-party software.
The deep catalog scan for this skill is still queued. Run an instant dependency check now instead.
Portable, evidence-bound security skills for authorized defensive assessment, penetration testing, red teaming, detection engineering, purple teaming, and engagement operations.
The collection contains 56 skills in 10 installable plugins from
zero-lab.ai. Install a coherent bundle, or copy an
individual skill folder into any agent harness that reads SKILL.md.
[!IMPORTANT] These skills support authorized security work. They do not grant permission, expand scope, or replace an organization's rules of engagement. Skills that touch adversary behavior are designed to measure exposure, preserve evidence, and hand results back to defenders.
/plugin marketplace add zero-lab-ai/skills
/plugin menu
Select the bundle you need from the marketplace menu.
Codex reads the same marketplace metadata directly:
codex plugin marketplace add zero-lab-ai/skills
codex plugin list
codex plugin add <bundle-name>@zero-lab
Use this repository's .claude-plugin/marketplace.json for workspace imports.
Each skill includes agents/openai.yaml with its display name, description,
Zero Lab mark, and brand color.
Install the cross-agent skills tree:
npx skills add zero-lab-ai/skills
You can also copy a single
plugins/<bundle>/skills/<skill>/ directory into the location your harness
scans. Nothing outside that skill directory is required at runtime.
| Plugin | Skills | Purpose |
|---|---|---|
agent-security |
4 | Agent surfaces, prompt injection, runtime validation, and trust boundaries |
recon-operations |
9 | Network, public-exposure, human, physical, and AI-system reconnaissance |
identity-security |
8 | Directory, credential, privilege, and lateral-movement security |
application-endpoint-security |
6 | Cloud, web, mobile, firmware, endpoint, and password assessment coverage |
network-protocol-security |
5 | Wireless, traffic, protocol, command-channel, and egress security |
binary-forensics |
4 | Binary-fault, memory, and rootkit triage |
detection-validation |
6 | Detection engineering, validation, telemetry, resilience, and control evidence |
engagement-operations |
7 | Planning, AI threat modeling, evidence proof, findings, and report assembly |
rag-security |
3 | Retrieval-surface, integrity, tenant, data-exposure, and cleanup assessment |
ml-system-security |
4 | Model artifacts, decision boundaries, datasets, and serving exposure |
Install agent-security.
| Skill | Use it when… |
|---|---|
agent-surface-audit |
Reviewing agent tools for poisoning, excess privilege, unsafe parameters, and deployment blast radius |
agent-runtime-validation |
Validating deployed tools, memory, hooks, approvals, identities, and scope controls with benign sentinels |
prompt-injection-assessment |
Assessing instruction influence and policy bypass across direct, indirect, retrieval, and tool-output channels |
agent-trust-boundary-audit |
Auditing authentication, authorization, delegated authority, and effect across agent handoffs |
Install recon-operations.
| Skill | Use it when… |
|---|---|
network-recon |
Enforcing IP scope, planning reconnaissance, or auditing scan coverage |
osint-scanner |
Mapping public exposure from third-party data without contacting the target |
social-engineering-recon |
Mapping passive, privacy-preserving human-layer exposure |
physical-recon |
Assessing supplied public-vantage physical-security observations |
target-profile-synthesis |
Joining validated cross-domain evidence into exposure themes and priorities |
situational-awareness |
Assessing a foothold without exceeding an operation's noise budget |
opsec-planning |
Connecting objectives to artifacts, detection risk, abort conditions, and cleanup |
recon-automation-governance |
Governing jobs, budgets, retries, stop controls, and evidence custody |
ai-surface-recon |
Mapping models, retrieval paths, agents, tools, guardrails, endpoints, and privileged consumers |
Install rag-security.
| Skill | Use it when… |
|---|---|
retrieval-integrity-assessment |
Assessing source, tenant, retrieval, context, citation, output, and cleanup integrity with benign canaries |
rag-surface-recon |
Mapping RAG sources, connectors, indexes, filters, ranking, caches, citations, and exposed fields |
rag-data-exposure-audit |
Measuring tenant and authorization boundaries with controlled fixtures and explicit exposure states |
Install ml-system-security.
| Skill | Use it when… |
|---|---|
model-artifact-lifecycle-audit |
Auditing model artifacts from intake through loading, execution, revocation, and retirement |
ml-decision-boundary-assessment |
Testing whether model-output changes alter downstream security decisions or protected effects |
dataset-integrity-assessment |
Auditing dataset sources, transformations, review, lineage, retraining, and rollback evidence |
model-serving-exposure-audit |
Auditing model-serving APIs, identities, administrative surfaces, data stores, and access evidence |
Install identity-security.
| Skill | Use it when… |
|---|---|
active-directory-attack-path |
Analyzing evidence-backed AD paths while separating reachability from authorized traversal |
adcs-exposure-audit |
Auditing certificate templates, CA policy, PKI ACLs, enrollment, and mapping controls |
kerberos-exposure-audit |
Auditing sanitized Kerberos policy, protection, monitoring, and evidence controls |
directory-persistence-audit |
Auditing directory-service governance for durable-control exposure |
credential-exposure-audit |
Auditing supplied credential evidence without using the credential material |
privilege-escalation-assessment |
Ranking Windows, Linux, or cloud elevation paths without overstating achieved privilege |
lateral-movement-map |
Mapping movement routes without confusing transport reachability with access |
lateral-movement-readiness |
Reviewing movement candidates before a separate validation handoff |
Install application-endpoint-security.
| Skill | Use it when… |
|---|---|
cloud-attack-path |
Mapping cloud identity, workload, credential, and trust transitions |
web-assessment-coverage |
Tracking application surfaces, roles, and test-family coverage |
mobile-application-assessment |
Tracking evidence-backed Android and iOS assessment coverage |
firmware-hardware-assessment |
Assessing device identity, firmware acquisition, update trust, and physical safety |
persistence-surface-assessment |
Measuring Windows and Linux persistence exposure from supplied evidence |
[password-audit-plan](plugins/application-endpoint-security/skills/password-a |