End-to-end iOS red-team pipeline — IPA acquisition (App Store extraction, TestFlight, enterprise/ad-hoc sideload)…
This publisher has an account here and has not listed a server yet.
Security & Testing
69 agent skills — instructions the agent loads on demand. 69 of 69 are free. Median context cost 4.3k tokens.
Hunt LLM/AI feature bugs — prompt injection, indirect injection, exfiltration via tool-use/markdown, ASCII smuggling, agentic AI security…
Cloud IAM red-team attack chain across AWS, Azure, GCP — focused on EXTERNAL exploitation paths and post-credential-discovery privilege…
Companion to bb-ops/playbooks/{prompt-injection,indirect-prompt-injection}.yaml.
Companion to bb-ops/playbooks/{graphql,websocket}.yaml + api-analyzer role.
Companion to bb-ops/playbooks/{idor,broken-access-control,jwt,oauth,auth-bypass}.yaml.
Companion to bb-ops/playbooks/{ssrf,cloud-imds,config-review,secret-discovery,springboot}.yaml.
Companion to the handoff agent. These are the rules for writing tasks the human will actually execute.
Companion to bb-ops/playbooks/{sqli,nosqli,cmdi,ssti,lfi,xxe,deserialization,rce}.yaml.
Companion to bb-ops/playbooks/{business-logic,race-condition}.yaml.
Companion to verifier + bypass-researcher roles.
Companion to bb-ops/playbooks/{xss,xss-dalfox,dom-xss,cors,open-redirect,config-review,csrf,file-upload,http-smuggling,cache-poison,host-he…
The rest either hold an API key issued by the publisher or ask for nothing.
Listed without a verification tick. Read the listing before installing.