Skills for Real Engineers. Straight from my .agents directory.
39 skills
file-access-vuln
Agent skill from
Entry P1 category router for file access and upload workflows. Use when testing download endpoints, file paths, local file inclusion, upload flows, preview pipelines, archive extraction, or storage and sharing boundaries.
How to install file-access-vuln
install file-access-vuln
# install the hack-skills pack with the skills CLI
npx skills add yaklang/hack-skills# or add only this skill to Claude Code: copy the folder
skills/file-access-vuln/
# into
~/.claude/skills/file-access-vuln/ (all projects)
.claude/skills/file-access-vuln/ (one project)
1# File Access Router23This is the routing entry point for filesystem paths, download endpoints, upload pipelines, and file preview handling.45## When to Use67- Parameters, filenames, download endpoints, or import flows influence file paths8- The target supports upload, preview, transcoding, extraction, sharing, download, or proxied file access9- You need to decide whether this is path traversal/LFI or an upload-validation/processing-chain issue1011## Skill Map1213- [Path Traversal LFI](../path-traversal-lfi/SKILL.md): path traversal, file read, wrapper abuse, include chains14- [Upload Insecure Files](../upload-insecure-files/SKILL.md): upload validation, storage paths, processing chains, overwrite risk, preview/share boundaries1516## Recommended Flow17181. First identify whether the entry point is a path parameter, download endpoint, or upload workflow192. Then locate whether the issue appears in accept, store, process, or serve stages203. Small path-chain and upload-bypass samples are merged into the main topic skills; no separate payload entry is needed2122## Related Categories2324- [injection-checking](../injection-checking/SKILL.md)25- [business-logic-vuln](../business-logic-vuln/SKILL.md)
Excerpt shown under the repository's MIT license.
More skills in hack-skills
Keep exploring
Similar skill repositories
An agentic skills framework & software development methodology that works.
15 skills
Public repository for Agent Skills
20 skills
Makes your AI agent think like the laziest senior dev in the room. The best code is the code you never wrote.
CCCU6 skills
Persistent Context Across Sessions for Every Agent – Captures everything your agent does during sessions, compresses it with AI, and injects relevant context back into future sessions. Works with Claude Code, OpenClaw, Codex, Gemini, Hermes, Copilot, OpenCode + More
CCCXGHGM+135 skills
Production-grade engineering skills for AI coding agents.
CCCXCU25 skills