Detects npm/pip package lifecycle scripts that download and execute code, a common malicious package technique.
EnglishDetects iOS custom URL scheme handling that processes sensitive data without sender verification.
EnglishDetects MongoDB connections without authentication credentials or configurations that disable authorization.
EnglishDetects e-commerce logic that trusts client-submitted prices instead of server-side calculation.
EnglishDetects API keys, private keys, and credentials accidentally included in npm/pip packages via missing .npmignore or .pypiignore.
EnglishDetects CNAME records pointing to cloud services that may be dangling, and configurations referencing external services vulnerable to takeover.
English
AGENT SKILLS ATLASIncludes Dangerous Package Lifecycle Scripts, IOS URL Scheme Hijacking, Mongo DB Without Authentication, and other workflows.
Claude Code
Codex
Cursor
GitHub Copilot
Gemini CLISupported by the Atlas install prompt. Skill-specific requirements vary.
Pack stats
What’s included
Dangerous Package Lifecycle Scripts
Detects npm/pip package lifecycle scripts that download and execute code, a common malicious package technique.
IOS URL Scheme Hijacking
Detects iOS custom URL scheme handling that processes sensitive data without sender verification.
Mongo DB Without Authentication
Detects MongoDB connections without authentication credentials or configurations that disable authorization.
Price Manipulation Vulnerability
Detects e-commerce logic that trusts client-submitted prices instead of server-side calculation.
Secrets Bundled in Published Packages
Detects API keys, private keys, and credentials accidentally included in npm/pip packages via missing .npmignore or .pypiignore.
Subdomain Takeover Risk
Detects CNAME records pointing to cloud services that may be dangling, and configurations referencing external services vulnerable to takeover.
Quick start
- Choose your skills. Select individual skills above, or choose the entire pack.
- Copy the install prompt. Use Copy install prompt above the list.
- Send it to your agent. Paste into your coding agent’s chat. Your agent reviews the source and guides the setup.
Try it with your agent
After installation, start with a request like:
Use the Dangerous Package Lifecycle Scripts skill to help with my task.
Ask me for the context you need before getting started.Requirements & license
- A coding agent that can access your project files and install skills.
- Your agent checks each skill’s instructions, dependencies, and permissions during setup.
- License details are not provided in these listings. Check the author’s terms before using the skills.