security▌

### offensive-social-engineering - Social engineering attack techniques beyond email phishing for authorized red team and physical penetration testing engagements. Covers pret - Practical, repeatable guidance for authorized security work. - Includes procedures, checks, and references for this skill.

### offensive-wifi - Wireless / 802.11 attack methodology for red team engagements and wireless security assessments. Covers monitor-mode setup, WPA/WPA2-PSK han - Practical, repeatable guidance for authorized security work. - Includes procedures, checks, and references for this skill.

### offensive-linux-privesc - Comprehensive Linux privilege escalation methodology for offensive security engagements. Covers the full attack surface from a low-privilege - Practical, repeatable guidance for authorized security work. - Includes procedures, checks, and references for this skill.

### offensive-z-wave - Z-Wave attack methodology — sniffing with Z-Force / EZ-Wave / RTL-SDR + ZniffMobile, S0 (legacy) network-key derivation flaw and key reuse, - Practical, repeatable guidance for authorized security work. - Includes procedures, checks, and references for this skill.

### browser-agent-security - Review agents that control a browser or GUI (clicking, typing, navigating, screenshotting) for prompt injection from page content, dangerous - Practical, repeatable guidance for authorized security work. - Includes procedures, checks, and references for this skill.

### agent-monitoring-review - Review supplied agent telemetry, hook configuration, collector code, and event exports to assess observation coverage, provenance, redaction - Practical, repeatable guidance for authorized security work. - Includes procedures, checks, and references for this skill.

### ai-security - Assess the security of an AI application, LLM agent, or RAG workflow using source review and scoped testing of instruction boundaries, tool - Practical, repeatable guidance for authorized security work. - Includes procedures, checks, and references for this skill.

### agent-plugin-marketplace-review - Review a plugin, extension, or marketplace listing before bulk or organization-wide install — publisher identity and history, permission req - Practical, repeatable guidance for authorized security work. - Includes procedures, checks, and references for this skill.

### offensive-network-attacks - Dense description covering ARP spoofing, LLMNR/NBT-NS/mDNS poisoning, DNS poisoning, MITM attacks, VLAN hopping, DHCP attacks, 802.1X/NAC by - Practical, repeatable guidance for authorized security work. - Includes procedures, checks, and references for this skill.

### offensive-shellcode - Shellcode development reference for offensive security engagements. Use when writing custom x86/x64 shellcode, implementing position-indepen - Practical, repeatable guidance for authorized security work. - Includes procedures, checks, and references for this skill.