aeondave/malskill
8 skills13 installs96 starsGitHub
Install
npx skills add https://github.com/aeondave/malskillSkills in this repo
1Burpsuiteburpsuite is a Claude Code reference skill for the Burp Suite web application security testing platform. It documents the proxy, Repeater, Intruder, Scanner, and Decoder tools plus scope configuration, Intruder attack types, Match-and-Replace rules, and common BApp extensions. Developers and pentesters use it as an operational cheat sheet while doing authorized web app security testing.2installs2Golang Performancegolang-performance is a Claude Code skill for measurement-first performance tuning in Go. It walks through adding benchmarks, capturing pprof and trace profiles, mapping symptoms to the right profile type, and reducing allocations, GC pressure, and contention. Developers use it after they have evidence that Go code is the bottleneck, to make attributable before-and-after improvements.2installs3Sensorssensors is a Claude Code skill for selecting, comparing, and integrating sensors for Arduino, ESP32, robotics, model-making, and home automation. It centers on real-world reliability: signal quality, debounce, hysteresis, false positives, and wiring rather than datasheet specs. Developers use it when choosing a sensor, detecting an event reliably, or designing sensor-driven automations like break-beams, PIR, or occupancy detection.2installs4Wpscanwpscan is a Claude Code reference skill for WPScan, a WordPress vulnerability and enumeration scanner. It documents enumeration of users, plugins, and themes, CVE lookups via the API token, password attacks over wp-login and XML-RPC, authenticated scanning, and common findings. Pentesters use it to assess WordPress sites during authorized security testing.2installs5Zapzap is a Claude Code reference skill for OWASP ZAP, a free open-source web application scanner and intercepting proxy. It documents the baseline (passive), full active, and API scan scripts, the YAML Automation Framework, and the REST and Python APIs for daemon-mode scanning. Developers and pentesters use it for DAST in CI/CD and manual web app security testing.2installs6Hardware Techniquehardware-technique is a Claude Code skill documenting an offensive methodology for embedded and peripheral hardware security assessments. It covers network-exposed management interfaces (PJL, Telnet, SSH), UART serial console access, JTAG/SWD, and firmware extraction and analysis. A red teamer uses it during authorized black-box assessments of routers, IoT gateways, printers, and other embedded devices.1installs7Nosqlmapnosqlmap is a Claude Code reference skill for NoSQLMap, an automated NoSQL injection detection and exploitation tool targeting MongoDB, CouchDB, and other NoSQL databases. It documents the interactive menu, web app and direct-DB attack modes, CLI flags, and MongoDB auth-bypass payloads. Pentesters use it to test web apps and NoSQL databases for injection during authorized assessments.1installs8Schemathesisschemathesis is a Claude Code skill for schema-driven API fuzzing. It generates tests automatically from an OpenAPI or GraphQL schema, detects server errors and schema-conformance violations, and supports stateful operation sequences. Developers and AppSec engineers use it to catch contract drift and validation bugs, running fast smoke checks on PRs and longer campaigns nightly.1installs