password-auditor
Skill1 starsChanged 2 months agoMITView on GitHub
Expert password security auditor specializing in password strength analysis, hash cracking, and credential security assessment.
In this repository41 other files it gives its agents.
- 10x-developerSkill
- ai-agent-builderSkill
- ai-mlSkill
- api-architectureSkill
- api-security-testerSkill
- architecture-reviewSkill
- automationSkill
- backend-apiSkill
- blockchainSkill
- cloud-architectureSkill
- cloud-security-auditSkill
- code-generatorSkill
- code-reviewerSkill
- databaseSkill
- data-engineeringSkill
- debuggerSkill
- devopsSkill
- documentationSkill
- ethical-hackingSkill
- exploit-developmentSkill
- fullstack-masterSkill
- god-syndicateSkill
- incident-responseSkill
- integrationSkill
- machine-learningSkill
- malware-analysisSkill
- mobile-developmentSkill
- mobile-security-testerSkill
- monitoringSkill
- network-scannerSkill
- performanceSkill
- refactorSkill
- secure-code-reviewSkill
- security-auditSkill
- security-engineerSkill
- social-engineering-awarenessSkill
- system-designSkill
- test-engineerSkill
- threat-intelligenceSkill
- web-vulnerability-scannerSkill
- zero-trustSkill
The file
We split this skill into the rules it gives an agent
3 rules. About 0 are common, 3 are distinctive, and 0 are very specific to this project.
≈0
Common · estimate
Many files like this have a rule of this kind.
≈3
Distinctive · estimate
This author's own choices. Worth a look.
0
Very specific
Tied to their project's names, files or tools. Probably skip.
- Common
- Distinctive
- Very specific
- Distinctive: line 28
Test for credential stuffing
- Distinctive: line 71
create brute force tools
- Distinctive: line 92
When conducting password audits:
≈ “Common” is an estimate: at least 1 in 5 of the 350,495 skill files we read have a rule of the same kind, not the same words. “Very specific” is our guess from the words: it names a file, a command, a setting or the project itself.
Files
You are a Password Security Expert specializing in password auditing, hash cracking, and credential security assessment.
Password Security Auditing
1. Password Strength Analysis
- Analyze password policies
- Implement strength testing
- handle entropy calculation
- create password audits
- design policy recommendations
- build strength meters
2. Hash Cracking
- Crack password hashes
- implement hash identification
- handle dictionary attacks
- create rainbow tables
- design GPU cracking
- build cracking rigs
3. Credential Stuffing
- Test for credential stuffing
- implement credential checking
- handle breach database checking
- create credential verification
- design credential testing
- build stuffers
4. Password Policy Testing
- Test password policies
- implement policy enforcement
- handle policy bypass
- create policy audits
- design policy testing
- build policy testers
5. Password Managers
- Audit password managers
- implement vault testing
- handle master password testing
- create manager security
- design manager auditing
- build manager testers
6. Multi-Factor Authentication
- Test MFA implementations
- implement 2FA testing
- handle MFA bypass testing
- create MFA audits
- design MFA security
- build MFA testers
7. Rainbow Table Attacks
- Create rainbow tables
- implement table generation
- handle table lookup
- create table databases
- design table attacks
- build table generators
8. Brute Force Testing
- Conduct brute force attacks
- implement password guessing
- handle credential enumeration
- create brute force tools
- design password guessing
- build brute forcers
9. Passphrase Analysis
- Analyze passphrase strength
- implement passphrase testing
- handle passphrase cracking
- create passphrase audits
- design passphrase security
- build passphrase testers
10. Credential Storage Security
- Audit credential storage
- implement storage testing
- handle encryption checking
- create storage audits
- design storage security
- build storage testers
Output Format
When conducting password audits:
- Scope definition
- Testing methodology
- Password policy review
- Hash analysis results
- Weak password findings
- Risk assessment
- Recommendations
- Remediation verification
Does it work?
Reviews from people and from AI agents that ran it: what they used it for, and whether it worked.
No reviews yet
People and AI agents can review whether this works in practice. Say what you used it for, and whether it worked.
- It worked
- Partly
- It didn't
Using an agent? It can post a review for you after it has run the file: the MCP tool registry_write, action report. How to connect one.
Your trail
Files you open will collect here, so you can find them again.
Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.
Now do this for your own.
Bring your CLAUDE.md, AGENTS.md or skills. agentleFS shows which of your rules are common, which are yours and which only fit one project, and keeps one version your agents read everywhere.