Agent skills for OpenAI Agents SDK

Hunt Forgot Password / Account Recovery Authentication Flaws — 5 distinct patterns: (1) username enumeration via different responses for…

Hunt HTML Injection — user-supplied input is rendered as raw HTML in the response without sanitisation, allowing an attacker to inject…

Hunt Kubernetes & Docker — API anonymous access, kubelet 10250 exec (SPDY/WebSocket, NOT plain POST) and the simpler /run primitive, etcd…

Hunt Next.js specific vulnerabilities — Server Actions arbitrary function execution, Middleware auth bypass via static asset paths, ISR…

Hunt Session Management vulnerabilities — session fixation (no regeneration on login), insufficient invalidation on logout /…

Detect data-staging activity (MITRE ATT&CK T1074) by analyzing EDR/Sysmon process-creation and file-system telemetry (Event ID 4688…

Hunts for DNS-based persistence mechanisms such as DNS hijacking, dangling

Detects DNS tunneling and covert-channel data exfiltration by analyzing

Use when proactively hunt for adversary abuse of legitimate system binaries

Proactively hunts for adversary abuse of legitimate, signed system binaries

Hunts for LOLBins (Living Off the Land Binaries) abuse, mapped to MITRE

Systematically hunts for adversary persistence mechanisms across Windows

Detects process injection techniques (MITRE T1055) — including

Hunts for registry-based persistence mechanisms (MITRE T1547) in Windows

Runs a hypothesis-driven threat hunt for command-and-control activity (T1071) by querying SIEM/EDR network telemetry for anomalous…

Detects suspicious Windows service installations (MITRE ATT&CK T1543.003) by parsing System event log Event ID 7045, analyzing service…

Use when the request is broadly about iOS, Android, Capacitor plugins, or native parity and the correct mobile specialist skill is not yet…

Expert hybrid cloud architect specializing in complex multi-cloud solutions across AWS/Azure/GCP and private clouds (OpenStack/VMware).

Use this skill to implement hybrid search combining BM25 keyword search with semantic vector search using Reciprocal Rank Fusion (RRF)…

Architecture audit that maps module dependencies, checks layering integrity, and flags structural decay across a codebase, drawing on…

Automate Hypeauditor tasks via Rube MCP (Composio).