# skills

Portable, evidence-bound security skills for authorized defensive assessment, penetration testing, red teaming, detection engineering, purple teaming, and engagement operations. The collection contains 56 skills in 10 installable plugins from zero-lab.ai.

- Tier: Indexed (plain plugin)
- Category: Security
- Page: https://www.flowy.sh/listings/zero-lab-ai-skills
- Source: https://github.com/zero-lab-ai/skills
- Price: free and open source

## Summary
Install it with the command on its page. It includes agent-runtime-validation, agent-surface-audit, agent-trust-boundary-audit. Its skills do not fire on their own yet. Free and open source.

## Install (Claude Code)
```
/plugin marketplace add zero-lab-ai/skills
```

## Skills
- agent-runtime-validation
- agent-surface-audit
- agent-trust-boundary-audit
- prompt-injection-assessment
- cloud-attack-path
- firmware-hardware-assessment
- mobile-application-assessment
- password-audit-plan
- persistence-surface-assessment
- web-assessment-coverage
- binary-fault-triage
- binary-fault-validation-readiness
- memory-forensics-triage
- rootkit-triage
- defensive-control-evidence-synthesis
- detection-engineering
- detection-resilience-test-plan
- detection-validate
- incident-validation-correlation
- telemetry-coverage-audit
- agent-action-proof
- ai-threat-model
- assessment-sequence-governance
- engagement-report-assembly
- findings-report
- security-test-tool-governance
- social-engineering-engagement-plan
- active-directory-attack-path
- adcs-exposure-audit
- credential-exposure-audit
- directory-persistence-audit
- kerberos-exposure-audit
- lateral-movement-map
- lateral-movement-readiness
- privilege-escalation-assessment
- dataset-integrity-assessment
- ml-decision-boundary-assessment
- model-artifact-lifecycle-audit
- model-serving-exposure-audit
- command-channel-defense-assessment
- covert-channel-assessment
- protocol-exploitation-assessment
- protocol-traffic-analysis
- wireless-assessment-plan
- rag-data-exposure-audit
- rag-surface-recon
- retrieval-integrity-assessment
- ai-surface-recon
- network-recon
- opsec-planning
- osint-scanner
- physical-recon
- recon-automation-governance
- situational-awareness
- social-engineering-recon
- target-profile-synthesis
- example-audit

## FAQ

### What is skills?
Portable, evidence-bound security skills for authorized defensive assessment, penetration testing, red teaming, detection engineering, purple teaming, and engagement operations. The collection contains 56 skills in 10 installable plugins from zero-lab.ai.

### How do I install skills?
Run these in Claude Code: /plugin marketplace add zero-lab-ai/skills. Then prompt normally.

### Does skills auto-invoke its skills?
Not yet. It is indexed on Flowy as a plain plugin.

### Is skills free?
Yes. Flowy is free and open source, with nothing gated. You can read every skill in full before you install.