rea
Reverse engineer anything with agents, from app behavior down to native binaries.
460k
@morlutoSecurity
Plugin
skills
Portable, evidence-bound security skills for authorized defensive assessment, penetration testing, red teaming, detection engineering, purple teaming, and engagement operations. The collection contains 56 skills in 10 installable plugins from zero-lab.ai.
Plugin Signal78/100Solid
maintained86
capable85
documented75
adopted46
Claude Code
> /plugin marketplace add zero-lab-ai/skills
Codex
$ npx skills add zero-lab-ai/skills --skill agent-runtime-validation agent-surface-audit agent-trust-boundary-audit prompt-injection-assessment cloud-attack-path firmware-hardware-assessment mobile-application-assessment password-audit-plan persistence-surface-assessment web-assessment-coverage binary-fault-triage binary-fault-validation-readiness memory-forensics-triage rootkit-triage defensive-control-evidence-synthesis detection-engineering detection-resilience-test-plan detection-validate incident-validation-correlation telemetry-coverage-audit agent-action-proof ai-threat-model assessment-sequence-governance engagement-report-assembly findings-report security-test-tool-governance social-engineering-engagement-plan active-directory-attack-path adcs-exposure-audit credential-exposure-audit directory-persistence-audit kerberos-exposure-audit lateral-movement-map lateral-movement-readiness privilege-escalation-assessment dataset-integrity-assessment ml-decision-boundary-assessment model-artifact-lifecycle-audit model-serving-exposure-audit command-channel-defense-assessment covert-channel-assessment protocol-exploitation-assessment protocol-traffic-analysis wireless-assessment-plan rag-data-exposure-audit rag-surface-recon retrieval-integrity-assessment ai-surface-recon network-recon opsec-planning osint-scanner physical-recon recon-automation-governance situational-awareness social-engineering-recon target-profile-synthesis example-audit -a codex
Cursor
$ npx skills add zero-lab-ai/skills --skill agent-runtime-validation agent-surface-audit agent-trust-boundary-audit prompt-injection-assessment cloud-attack-path firmware-hardware-assessment mobile-application-assessment password-audit-plan persistence-surface-assessment web-assessment-coverage binary-fault-triage binary-fault-validation-readiness memory-forensics-triage rootkit-triage defensive-control-evidence-synthesis detection-engineering detection-resilience-test-plan detection-validate incident-validation-correlation telemetry-coverage-audit agent-action-proof ai-threat-model assessment-sequence-governance engagement-report-assembly findings-report security-test-tool-governance social-engineering-engagement-plan active-directory-attack-path adcs-exposure-audit credential-exposure-audit directory-persistence-audit kerberos-exposure-audit lateral-movement-map lateral-movement-readiness privilege-escalation-assessment dataset-integrity-assessment ml-decision-boundary-assessment model-artifact-lifecycle-audit model-serving-exposure-audit command-channel-defense-assessment covert-channel-assessment protocol-exploitation-assessment protocol-traffic-analysis wireless-assessment-plan rag-data-exposure-audit rag-surface-recon retrieval-integrity-assessment ai-surface-recon network-recon opsec-planning osint-scanner physical-recon recon-automation-governance situational-awareness social-engineering-recon target-profile-synthesis example-audit -a cursor
Gemini CLI
$ npx skills add zero-lab-ai/skills --skill agent-runtime-validation agent-surface-audit agent-trust-boundary-audit prompt-injection-assessment cloud-attack-path firmware-hardware-assessment mobile-application-assessment password-audit-plan persistence-surface-assessment web-assessment-coverage binary-fault-triage binary-fault-validation-readiness memory-forensics-triage rootkit-triage defensive-control-evidence-synthesis detection-engineering detection-resilience-test-plan detection-validate incident-validation-correlation telemetry-coverage-audit agent-action-proof ai-threat-model assessment-sequence-governance engagement-report-assembly findings-report security-test-tool-governance social-engineering-engagement-plan active-directory-attack-path adcs-exposure-audit credential-exposure-audit directory-persistence-audit kerberos-exposure-audit lateral-movement-map lateral-movement-readiness privilege-escalation-assessment dataset-integrity-assessment ml-decision-boundary-assessment model-artifact-lifecycle-audit model-serving-exposure-audit command-channel-defense-assessment covert-channel-assessment protocol-exploitation-assessment protocol-traffic-analysis wireless-assessment-plan rag-data-exposure-audit rag-surface-recon retrieval-integrity-assessment ai-surface-recon network-recon opsec-planning osint-scanner physical-recon recon-automation-governance situational-awareness social-engineering-recon target-profile-synthesis example-audit -a gemini-cli
GitHub Copilot
$ npx skills add zero-lab-ai/skills --skill agent-runtime-validation agent-surface-audit agent-trust-boundary-audit prompt-injection-assessment cloud-attack-path firmware-hardware-assessment mobile-application-assessment password-audit-plan persistence-surface-assessment web-assessment-coverage binary-fault-triage binary-fault-validation-readiness memory-forensics-triage rootkit-triage defensive-control-evidence-synthesis detection-engineering detection-resilience-test-plan detection-validate incident-validation-correlation telemetry-coverage-audit agent-action-proof ai-threat-model assessment-sequence-governance engagement-report-assembly findings-report security-test-tool-governance social-engineering-engagement-plan active-directory-attack-path adcs-exposure-audit credential-exposure-audit directory-persistence-audit kerberos-exposure-audit lateral-movement-map lateral-movement-readiness privilege-escalation-assessment dataset-integrity-assessment ml-decision-boundary-assessment model-artifact-lifecycle-audit model-serving-exposure-audit command-channel-defense-assessment covert-channel-assessment protocol-exploitation-assessment protocol-traffic-analysis wireless-assessment-plan rag-data-exposure-audit rag-surface-recon retrieval-integrity-assessment ai-surface-recon network-recon opsec-planning osint-scanner physical-recon recon-automation-governance situational-awareness social-engineering-recon target-profile-synthesis example-audit -a github-copilot
OpenCode
$ npx skills add zero-lab-ai/skills --skill agent-runtime-validation agent-surface-audit agent-trust-boundary-audit prompt-injection-assessment cloud-attack-path firmware-hardware-assessment mobile-application-assessment password-audit-plan persistence-surface-assessment web-assessment-coverage binary-fault-triage binary-fault-validation-readiness memory-forensics-triage rootkit-triage defensive-control-evidence-synthesis detection-engineering detection-resilience-test-plan detection-validate incident-validation-correlation telemetry-coverage-audit agent-action-proof ai-threat-model assessment-sequence-governance engagement-report-assembly findings-report security-test-tool-governance social-engineering-engagement-plan active-directory-attack-path adcs-exposure-audit credential-exposure-audit directory-persistence-audit kerberos-exposure-audit lateral-movement-map lateral-movement-readiness privilege-escalation-assessment dataset-integrity-assessment ml-decision-boundary-assessment model-artifact-lifecycle-audit model-serving-exposure-audit command-channel-defense-assessment covert-channel-assessment protocol-exploitation-assessment protocol-traffic-analysis wireless-assessment-plan rag-data-exposure-audit rag-surface-recon retrieval-integrity-assessment ai-surface-recon network-recon opsec-planning osint-scanner physical-recon recon-automation-governance situational-awareness social-engineering-recon target-profile-synthesis example-audit -a opencode
Windsurf
$ npx skills add zero-lab-ai/skills --skill agent-runtime-validation agent-surface-audit agent-trust-boundary-audit prompt-injection-assessment cloud-attack-path firmware-hardware-assessment mobile-application-assessment password-audit-plan persistence-surface-assessment web-assessment-coverage binary-fault-triage binary-fault-validation-readiness memory-forensics-triage rootkit-triage defensive-control-evidence-synthesis detection-engineering detection-resilience-test-plan detection-validate incident-validation-correlation telemetry-coverage-audit agent-action-proof ai-threat-model assessment-sequence-governance engagement-report-assembly findings-report security-test-tool-governance social-engineering-engagement-plan active-directory-attack-path adcs-exposure-audit credential-exposure-audit directory-persistence-audit kerberos-exposure-audit lateral-movement-map lateral-movement-readiness privilege-escalation-assessment dataset-integrity-assessment ml-decision-boundary-assessment model-artifact-lifecycle-audit model-serving-exposure-audit command-channel-defense-assessment covert-channel-assessment protocol-exploitation-assessment protocol-traffic-analysis wireless-assessment-plan rag-data-exposure-audit rag-surface-recon retrieval-integrity-assessment ai-surface-recon network-recon opsec-planning osint-scanner physical-recon recon-automation-governance situational-awareness social-engineering-recon target-profile-synthesis example-audit -a windsurf
In this plugin
- agent-runtime-validation
- agent-surface-audit
- agent-trust-boundary-audit
- prompt-injection-assessment
- cloud-attack-path
- firmware-hardware-assessment
- mobile-application-assessment
- password-audit-plan
- persistence-surface-assessment
- web-assessment-coverage
- binary-fault-triage
- binary-fault-validation-readiness
- memory-forensics-triage
- rootkit-triage
- defensive-control-evidence-synthesis
- detection-engineering
- detection-resilience-test-plan
- detection-validate
- incident-validation-correlation
- telemetry-coverage-audit
- agent-action-proof
- ai-threat-model
- assessment-sequence-governance
- engagement-report-assembly
- findings-report
- security-test-tool-governance
- social-engineering-engagement-plan
- active-directory-attack-path
- adcs-exposure-audit
- credential-exposure-audit
- directory-persistence-audit
- kerberos-exposure-audit
- lateral-movement-map
- lateral-movement-readiness
- privilege-escalation-assessment
- dataset-integrity-assessment
- ml-decision-boundary-assessment
- model-artifact-lifecycle-audit
- model-serving-exposure-audit
- command-channel-defense-assessment
- covert-channel-assessment
- protocol-exploitation-assessment
- protocol-traffic-analysis
- wireless-assessment-plan
- rag-data-exposure-audit
- rag-surface-recon
- retrieval-integrity-assessment
- ai-surface-recon
- network-recon
- opsec-planning
- osint-scanner
- physical-recon
- recon-automation-governance
- situational-awareness
- social-engineering-recon
- target-profile-synthesis
- example-audit
What's inside
57 Skills
/agent-runtime-validationPlans and evaluates bounded runtime tests of AI agents, tools, memory, hooks, approvals, and scope enforcement. Use when static review is complete and an authorized assessment must determine how the deployed agent actually behaves./agent-surface-auditReviews an MCP server's tool surface for tool poisoning, over-broad parameters, missing descriptions, and privilege escalation paths. Use when auditing, onboarding, or writing an MCP server, or when a user asks whether a server is safe to connect to an agent./agent-trust-boundary-auditMaps identity, authority, instruction, data, memory, and approval propagation across agents and agent-to-agent handoffs. Use when reviewing multi-agent systems, orchestrators, delegated tools, or confused-deputy exposure./prompt-injection-assessmentAssesses whether direct, indirect, multi-turn, retrieved, or tool-mediated instructions can override an AI system's intended policy or scope. Use when conducting an authorized prompt-injection test with benign canaries and evidence-bound outcomes./cloud-attack-pathMaps cloud identity and authorization paths across AWS, Azure, GCP, and hybrid trust boundaries, separating proven access from plausible and blocked routes. Use during an authorized cloud penetration test when tracing how a starting identity could assume roles, use credentials,/firmware-hardware-assessmentTracks embedded-device and firmware assessment coverage across exact units, acquisition methods, debug interfaces, stored secrets, update trust, radios, physical safety, and delegated external systems. Use when planning, conducting, reviewing, or handing over an authorized
- /mobile-application-assessment
- /password-audit-plan
- /persistence-surface-assessment
- /web-assessment-coverage
- /binary-fault-triage
- /binary-fault-validation-readiness
- /memory-forensics-triage
- /rootkit-triage
- /defensive-control-evidence-synthesis
- /detection-engineering
- /detection-resilience-test-plan
- /detection-validate
- /incident-validation-correlation
- /telemetry-coverage-audit
- /agent-action-proof
- /ai-threat-model
- /assessment-sequence-governance
- /engagement-report-assembly
- /findings-report
- /security-test-tool-governance
- /social-engineering-engagement-plan
- /active-directory-attack-path
- /adcs-exposure-audit
- /credential-exposure-audit
- /directory-persistence-audit
- /kerberos-exposure-audit
- /lateral-movement-map
- /lateral-movement-readiness
- /privilege-escalation-assessment
- /dataset-integrity-assessment
- /ml-decision-boundary-assessment
- /model-artifact-lifecycle-audit
- /model-serving-exposure-audit
- /command-channel-defense-assessment
- /covert-channel-assessment
- /protocol-exploitation-assessment
- /protocol-traffic-analysis
- /wireless-assessment-plan
- /rag-data-exposure-audit
- /rag-surface-recon
- /retrieval-integrity-assessment
- /ai-surface-recon
- /network-recon
- /opsec-planning
- /osint-scanner
- /physical-recon
- /recon-automation-governance
- /situational-awareness
- /social-engineering-recon
- /target-profile-synthesis
- /example-audit
README
zero-lab skills
Portable, evidence-bound security skills for authorized defensive assessment, penetration testing, red teaming, detection engineering, purple teaming, and engagement operations.
The collection contains 56 skills in 10 installable plugins from
zero-lab.ai. Install a coherent bundle, or copy an
individual skill folder into any agent harness that reads SKILL.md.
Important These skills support authorized security work. They do not grant permission, expand scope, or replace an organization's rules of engagement. Skills that touch adversary behavior are designed to measure exposure, preserve evidence, and hand results back to defenders.
Contents
- Install
- Bundles
- Skill index
- Compatibility
- Trust and safety
- Repository structure
- Contributing
- Contributors
- Security
- License
Install
Claude Code
/plugin marketplace add zero-lab-ai/skills
/plugin menu
Select the bundle you need from the marketplace menu.
Codex
Codex reads the same marketplace metadata directly:
codex plugin marketplace add zero-lab-ai/skills
codex plugin list
codex plugin add <bundle-name>@zero-lab
ChatGPT Workspace Marketplace
Use this repository's .claude-plugin/marketplace.json for workspace imports.
Each skill includes agents/openai.yaml with its display name, description,
Zero Lab mark, and brand color.
Other agent harnesses
Install the cross-agent skills tree:
npx skills add zero-lab-ai/skills
You can also copy a single
plugins/<bundle>/skills/<skill>/ directory into the location your harness
scans. Nothing outside that skill directory is required at runtime.
Bundles
| Plugin | Skills | Purpose |
|---|---|---|
agent-security | 4 | Agent surfaces, prompt injection, runtime validation, and trust boundaries |
recon-operations | 9 | Network, public-exposure, human, physical, and AI-system reconnaissance |
identity-security | 8 | Directory, credential, privilege, and lateral-movement security |
application-endpoint-security | 6 | Cloud, web, mobile, firmware, endpoint, and password assessment coverage |
network-protocol-security | 5 | Wireless, traffic, protocol, command-channel, and egress security |
binary-forensics | 4 | Binary-fault, memory, and rootkit triage |
detection-validation | 6 | Detection engineering, validation, telemetry, resilience, and control evidence |
engagement-operations | 7 | Planning, AI threat modeling, evidence proof, findings, and report assembly |
rag-security | 3 | Retrieval-surface, integrity, tenant, data-exposure, and cleanup assessment |
ml-system-security | 4 | Model artifacts, decision boundaries, datasets, and serving exposure |
Skill index
Agent and AI systems
Install agent-security.
| Skill | Use it when… |
|---|---|
agent-surface-audit | Reviewing agent tools for poisoning, excess privilege, unsafe parameters, and deployment blast radius |
agent-runtime-validation | Validating deployed tools, memory, hooks, approvals, identities, and scope controls with benign sentinels |
prompt-injection-assessment | Assessing instruction influence and policy bypass across direct, indirect, retrieval, and tool-output channels |
agent-trust-boundary-audit | Auditing authentication, authorization, delegated authority, and effect across agent handoffs |
Reconnaissance and exposure mapping
Install recon-operations.
| Skill | Use it when… |
|---|---|
network-recon | Enforcing IP scope, planning reconnaissance, or auditing scan coverage |
osint-scanner | Mapping public exposure from third-party data without contacting the target |
social-engineering-recon | Mapping passive, privacy-preserving human-layer exposure |
physical-recon | Assessing supplied public-vantage physical-security observations |
target-profile-synthesis | Joining validated cross-domain evidence into exposure themes and priorities |
situational-awareness | Assessing a foothold without exceeding an operation's noise budget |
opsec-planning | Connecting objectives to artifacts, detection risk, abort conditions, and cleanup |
recon-automation-governance | Governing jobs, budgets, retries, stop controls, and evidence custody |
ai-surface-recon | Mapping models, retrieval paths, agents, tools, guardrails, endpoints, and privileged consumers |
Retrieval-augmented AI security
Install rag-security.
| Skill | Use it when… |
|---|---|
retrieval-integrity-assessment | Assessing source, tenant, retrieval, context, citation, output, and cleanup integrity with benign canaries |
rag-surface-recon | Mapping RAG sources, connectors, indexes, filters, ranking, caches, citations, and exposed fields |
rag-data-exposure-audit | Measuring tenant and authorization boundaries with controlled fixtures and explicit exposure states |
Model and ML system security
Install ml-system-security.
| Skill | Use it when… |
|---|---|
model-artifact-lifecycle-audit | Auditing model artifacts from intake through loading, execution, revocation, and retirement |
ml-decision-boundary-assessment | Testing whether model-output changes alter downstream security decisions or protected effects |
dataset-integrity-assessment | Auditing dataset sources, transformations, review, lineage, retraining, and rollback evidence |
model-serving-exposure-audit | Auditing model-serving APIs, identities, administrative surfaces, data stores, and access evidence |
Identity and directory security
Install identity-security.
| Skill | Use it when… |
|---|---|
active-directory-attack-path | Analyzing evidence-backed AD paths while separating reachability from authorized traversal |
adcs-exposure-audit | Auditing certificate templates, CA policy, PKI ACLs, enrollment, and mapping controls |
kerberos-exposure-audit | Auditing sanitized Kerberos policy, protection, monitoring, and evidence controls |
directory-persistence-audit | Auditing directory-service governance for durable-control exposure |
credential-exposure-audit | Auditing supplied credential evidence without using the credential material |
privilege-escalation-assessment | Ranking Windows, Linux, or cloud elevation paths without overstating achieved privilege |
lateral-movement-map | Mapping movement routes without confusing transport reachability with access |
lateral-movement-readiness | Reviewing movement candidates before a separate validation handoff |
Application, cloud, and endpoint assessment
Install application-endpoint-security.
| Skill | Use it when… |
|---|---|
cloud-attack-path | Mapping cloud identity, workload, credential, and trust transitions |
web-assessment-coverage | Tracking application surfaces, roles, and test-family coverage |
mobile-application-assessment | Tracking evidence-backed Android and iOS assessment coverage |
firmware-hardware-assessment | Assessing device identity, firmware acquisition, update trust, and physical safety |
persistence-surface-assessment | Measuring Windows and Linux persistence exposure from supplied evidence |
password-audit-plan | Planning bounded offline password audits and restricted result handling |
Network, protocol, and channel security
Install network-protocol-security.
| Skill | Use it when… |
|---|---|
wireless-assessment-plan | Planning authorized Wi-Fi, Bluetooth, RFID/NFC, SDR, or other radio testing |
protocol-traffic-analysis | Turning supplied captures into evidence-bound conversations and limitations |
protocol-exploitation-assessment | Assessing protocol candidates without promoting weak signals into proven vulnerabilities |
covert-channel-assessment | Measuring whether bounded synthetic channels are blocked, visible, detected, and cleaned up |
command-channel-defense-assessment | Measuring defensive coverage against opaque command-channel scenarios |
Binary and forensic analysis
Install binary-forensics.
| Skill | Use it when… |
|---|---|
binary-fault-triage | Triaging supplied binary fault evidence without execution or weaponization |
binary-fault-validation-readiness | Checking whether fault evidence is ready for separate isolated validation |
memory-forensics-triage | Triaging supplied volatile-memory images while preserving evidentiary limits |
rootkit-triage | Triaging suspected rootkits or bootkits with independent evidence views |
Stars on GitHub
Momentum
- stars in total
- 152
File tree
Similar plugins.
@morlutoreverse-skill
A skill pack for authorized reverse engineering, security research, and penetration testing that routes tasks to the right skill and sets up needed tools on demand. It covers API security assessment and Android APK analysis, among others.
46 skills45k
@zhaoxuya520cybersecurity-skills
Gives an AI agent the step-by-step workflow a senior security analyst follows, covering when to use each technique, what to check first, how to run it and how to verify the result. Covers incident response, forensics, threat intelligence, malware analysis, penetration testing and red teaming.
200 skills36k
@mukul975watermarks-remover
Agent skill + stdlib Python service to strip multi-vendor AI provenance marks from text and files, for privacy and hygiene on content you own. The skill is a thin client: it drives the machinery over HTTP, so the agent host needs no Python.
2 skills1 hook27k
@guillaumemeyerQuestions about skills.
Portable, evidence-bound security skills for authorized defensive assessment, penetration testing, red teaming, detection engineering, purple teaming, and engagement operations. The collection contains 56 skills in 10 installable plugins from zero-lab.ai. Install it with the command on its page. It includes agent-runtime-validation, agent-surface-audit, agent-trust-boundary-audit. Its skills do not fire on their own yet. Free and open source.
- What is skills?
- Portable, evidence-bound security skills for authorized defensive assessment, penetration testing, red teaming, detection engineering, purple teaming, and engagement operations. The collection contains 56 skills in 10 installable plugins from zero-lab.ai.
- How do I install skills?
- Run these in Claude Code: /plugin marketplace add zero-lab-ai/skills. Then prompt normally.
- Does skills auto-invoke its skills?
- Not yet. It is indexed on Flowy as a plain plugin.
- Is skills free?
- Yes. Flowy is free and open source, with nothing gated. You can read every skill in full before you install.
- Which coding agents can use skills's skills?
- skills installs in Claude Code, and its skills also install in Codex, Cursor, Gemini CLI, GitHub Copilot, OpenCode and Windsurf with the skills CLI. Each skill's page has the install command. Flowy's auto-invocation, which fires a skill when your prompt matches, runs in Claude Code only.
Is this plugin yours?
Claim it with GitHubSubmit a pluginPromote it