DEDUPED Hot AI repos, turned into use cases Get 5 a day

What you can do with Skills

A collection of 56 portable security skills in 10 installable plugins for authorized defensive assessment, red teaming, penetration testing, detection engineering, and engagement operations.

Trended earlier

zero-lab-ai/skills on GitHub

Third-party repos we don't own or vouch for. AI-generated use cases can be wrong: review everything and run at your own risk.

Authorization notice. This tool is dual-use. Only use it on software, sites and systems you own or have explicit permission to test, and follow the relevant licenses and terms of service.

What do you want to do?

4 use cases

  • Audit agent tools for poisoning and excess privilege

    Review an agent's tool definitions for poisoning, excess privilege, and deployment blast radius before rollout.

    View prompt
    Using the agent-surface-audit skill from the zero-lab-ai/skills repo, review the tool definitions for <agent-name> that I am authorized to assess. Return findings for poisoning, excess privilege, unsafe parameters, and deployment blast radius, each with the tool definition it cites. Verify that every finding quotes a definition I provided.

  • Test RAG tenant boundaries with controlled fixtures

    Measure whether one tenant's documents can surface for another tenant using benign fixtures you control.

    View prompt
    Using the rag-data-exposure-audit skill from the zero-lab-ai/skills repo, test the retrieval endpoint <endpoint-url> with the canary fixtures I created in tenants <tenant-a> and <tenant-b>. Return one exposure state per boundary, with the query and the returned canary. Verify that every canary returned belongs to the tenant named in the result.

  • Plan an authorized engagement and assemble findings

    Turn your rules of engagement into a plan, then build evidence-backed findings and a report draft.

    View prompt
    Using the engagement-operations skills from the zero-lab-ai/skills repo, draft an engagement plan for <client-name> based only on the rules of engagement I provide. Return the plan, a findings list with evidence references, and a report outline. Verify that no target or action appears that is outside the scope I gave.

  • Review AD certificate template exposure from exports

    Audit certificate templates, CA policy, and enrollment controls from supplied directory exports.

    View prompt
    Using the adcs-exposure-audit skill from the zero-lab-ai/skills repo, audit the certificate template and CA policy exports for <domain-name> that I provide. Return each control with an exposure rating and the export line it cites. Verify that every rating cites a line from the exports I supplied.

How to use Skills

  1. Check you have what it needs: Written authorization and rules of engagement for the target system; A coding agent that reads SKILL.md, such as Claude Code or Codex; Supplied evidence for the assessment, such as tool definitions, exported policy, or test-tenant fixtures.
  2. Open zero-lab-ai/skills on GitHub and read the README and license.
  3. Install the plugin marketplace in Claude Code with /plugin marketplace add zero-lab-ai/skills.
  4. Run /plugin menu and select the agent-security bundle.
  5. Give the agent-surface-audit skill the tool definitions and deployment context you are authorized to review.
  6. Check each finding against the tool's real permissions before changing any configuration.

These steps come from our top use case, Audit agent tools for poisoning and excess privilege, which also has a copy-paste agent prompt.

Skills alternatives · Best AI repos for Security and science

About this repo

  • Who it is forSecurity engineers, red and purple team operators, and AI platform teams who are authorized to assess their own systems and want agent-readable checklists for evidence-bound review.
  • Why it is hot
  • LanguagePython
  • Sourcegithub.com/zero-lab-ai/skills · Back to Hot repos

Requirements

  • Written authorization and rules of engagement for the target system
  • A coding agent that reads SKILL.md, such as Claude Code or Codex
  • Supplied evidence for the assessment, such as tool definitions, exported policy, or test-tenant fixtures
Maintain Skills? Add the Featured on Deduped badge

Paste this into your README:

[![Featured on Deduped](https://dedupedai.com/badge/zero-lab-ai-skills.svg)](https://dedupedai.com/use-cases/zero-lab-ai-skills/?ref=badge)

More badge styles and HTML

Questions about Skills

What is Skills?

A collection of 56 portable security skills in 10 installable plugins for authorized defensive assessment, red teaming, penetration testing, detection engineering, and engagement operations. It is an open-source project on GitHub: https://github.com/zero-lab-ai/skills.

Who is Skills for?

Security engineers, red and purple team operators, and AI platform teams who are authorized to assess their own systems and want agent-readable checklists for evidence-bound review.

What can I do with Skills?

4 use cases so far, for example: Audit agent tools for poisoning and excess privilege; Test RAG tenant boundaries with controlled fixtures; Plan an authorized engagement and assemble findings. Each has steps and a copy-paste agent prompt.

What do I need to run Skills?

Written authorization and rules of engagement for the target system; A coding agent that reads SKILL.md, such as Claude Code or Codex; Supplied evidence for the assessment, such as tool definitions, exported policy, or test-tenant fixtures.

What are alternatives to Skills?

Other hot AI repos in Security and science: Rea, Reverify, Ablation, Claude AD, Awesome Reverse Engineered.

Is Skills safe to run?

Deduped does not own, audit or vouch for it. Read the README and license, run it on your own systems first and review every command before you run it.