The Agent Skills Directory

[COMMAND_EXECUTION]: The skill documents commands using ffuf and curl for probing MFA endpoints and testing workflow bypasses. These are standard security auditing tools and are intended for use within an authorized scope.
[DYNAMIC_EXECUTION]: Provides a Python script utilizing asyncio and aiohttp to test for race conditions (TOCTOU) in MFA verification processes. The script is intended for execution in a controlled environment by a security researcher.
[DATA_EXPOSURE]: The instructions require the user to provide session cookies and target URLs to perform tests. The skill explicitly includes a 'Mandatory confirmation gate' that forces the agent to ask for written authorization and permitted scope before performing any active probing.

hunt-mfa-bypass