Agent Skills by zakirkun
There are 12 agent skills in our directory.
zakirkun publishes 12 AI agent skills in our directory. Browse them below — each links back to its source repository.
Updated June 2026
- Cross-Site Scripting (XSS) DetectionDetects DOM-based Cross-Site Scripting (XSS) vulnerabilities in JavaScript
- Dangling Markup InjectionDetects HTML injection that, even without script execution, can exfiltrate page content via dangling attributes and tags.
- guardian-cli>
- iOS Realm Database Without EncryptionDetects iOS Realm database instances configured without encryption key.
- JSON Web Token (JWT) WeaknessesDetects insecure JWT implementations, such as accepting 'none' algorithms or using hardcoded secrets.
- Mass AssignmentDetects frameworks binding raw HTTP payload bodies directly to database models or internal objects without field allow-lists.
- Missing Input Size LimitsDetects API endpoints without request body size limits, enabling denial of service via oversized payloads.
- MongoDB Without AuthenticationDetects MongoDB connections without authentication credentials or configurations that disable authorization.
- Ruby Marshal DeserializationDetects Marshal.load() or Marshal.restore() on untrusted data, enabling code execution.
- Sensitive Data in NSUserDefaultsDetects storage of sensitive information in NSUserDefaults which is unencrypted and accessible in device backups.
- Server-Side Include (SSI) InjectionDetects user-controlled input reflected in pages processed by SSI, enabling file disclosure and command execution.
- Subdomain Takeover RiskDetects CNAME records pointing to cloud services that may be dangling, and configurations referencing external services vulnerable to takeover.