appsec
Free
OWASP Top 10 Triage
Map a change to OWASP risks quickly.
Free market · one skill at a time
Skills Market
214 free skills. Open a skill page to read the full system, then download a single .md. No bulk zip dumps — then go deep with $50 Ultimate packs.
214free skills
96cyber free
118builder / ops
1file per download
Browse & filter below → · open any card for a full SEO preview
No skills match
Try another category or clear search.
appsec
Free
Broken Access Control Hunt
Find IDOR and missing authZ.
appsec
Free
AuthN Review Basics
Session, JWT, password flows checklist.
appsec
Free
JWT Danger Checklist
alg, kid, expiry, audience mistakes.
appsec
Free
SSRF Defense Review
URL fetch sinks and allowlists.
appsec
Free
XSS Sink Mapping
Find HTML/JS sinks and encoding gaps.
appsec
Free
SQL Injection Review
Parameterized queries vs string build.
appsec
Free
CSRF Protection Check
Cookie sessions and state-changing POSTs.
appsec
Free
File Upload Hardening
Type, size, storage, execution risks.
appsec
Free
API Mass Assignment
Unexpected writable fields.
appsec
Free
Rate Limit Design
Auth and expensive endpoints.
appsec
Free
Security Headers Pass
CSP, HSTS, frame options basics.
appsec
Free
CORS Least Privilege
Origins and credentials.
appsec
Free
Open Redirect Review
Redirect params to safe allowlists.
appsec
Free
Path Traversal Check
File path params and downloads.
appsec
Free
Deserialization Caution
Untrusted pickle/JSON gadgets notes.
appsec
Free
GraphQL AuthZ Notes
Field and object checks.
appsec
Free
Webhook Receiver Safety
Secrets, replay, raw body verify.
appsec
Free
Password Reset Flow Review
Token entropy and host header.
appsec
Free
Admin Panel Exposure
Discover and lock admin surfaces.
cloud
Free
IAM Least Privilege
Overbroad roles and keys.
cloud
Free
S3 Bucket Public Check
Public ACL and policy mistakes.
cloud
Free
Secrets in Git Hunt
Find committed tokens patterns.
cloud
Free
CI Pipeline Poison Notes
Untrusted PR risks.
cloud
Free
Container Hardening Basics
Root, capabilities, read-only.
cloud
Free
K8s RBAC Quick Review
ClusterRole binding risks.
cloud
Free
Metadata Service SSRF
169.254.169.254 paths.
cloud
Free
Terraform Security Pass
Open SG, public IPs.
cloud
Free
Logging Without Secrets
Redact tokens in logs.
cloud
Free
Backup and Ransom Readiness
Offline backups and restore test.
cloud
Free
CDN WAF Rule Sanity
What WAF helps vs false safety.
cloud
Free
DNS and Subdomain Takeover
Dangling CNAME checks.
cloud
Free
TLS Config Basics
Old protocols and ciphers.
cloud
Free
Dependency Supply Chain
Lockfiles and suspicious installs.
cloud
Free
Feature Flag Kill Switch
Safe defaults under attack.
secure-coding
Free
Threat Model One Page
Assets, actors, entrypoints.
secure-coding
Free
Input Validation Standard
Allowlists at boundaries.
secure-coding
Free
Output Encoding Guide
Context-aware encoding.
secure-coding
Free
Crypto Use Caution
Don't roll your own.
secure-coding
Free
Secure Random IDs
Token entropy requirements.
secure-coding
Free
Error Message Safety
No stack traces to users.
secure-coding
Free
Multi-Tenant Isolation
Tenant id in every query.
secure-coding
Free
Payment Flow Review
Idempotency and webhooks.
secure-coding
Free
OAuth Redirect Safety
Redirect URI exact match.
secure-coding
Free
Session Fixation Notes
Rotate on login.
secure-coding
Free
File Parsing Danger
Zip bombs and XXE class.
secure-coding
Free
Prototype Pollution Guard
Unsafe merge of JSON.
secure-coding
Free
Command Injection Avoid
No shell with user input.
secure-coding
Free
Race Condition Checklist
TOCTOU on money/inventory.
secure-coding
Free
Secure Defaults PR Review
Flags default deny.
blue-team
Free
Alert Triage Rubric
Severity and false positive notes.
blue-team
Free
Log Source Map
What must be logged.
blue-team
Free
Incident First Hour
Contain, communicate, evidence.
blue-team
Free
Phishing Email Analysis
Headers and IOCs carefully.
blue-team
Free
Malware Detonation Caution
Lab only rules.
blue-team
Free
Endpoint Hardening Basics
Disk encrypt, updates, least admin.
blue-team
Free
Email Auth SPF DKIM DMARC
Spoof resistance checklist.
blue-team
Free
Brute Force Detection Ideas
Signals and lockouts.
blue-team
Free
Data Exfil Indicators
Unusual egress patterns.
blue-team
Free
Ransomware Prep Checklist
Backups, IR contacts, offline copies.
blue-team
Free
Vulnerability Scan Prioritize
Exploitability over CVSS alone.
blue-team
Free
Security Questionnaire Answer
Honest B2B security answers.
blue-team
Free
Tabletop Exercise Script
Run a 60m incident game.
blue-team
Free
Access Review Monthly
Who still needs prod access.
blue-team
Free
Secret Rotation Runbook
Rotate leaked API keys.
labs
Free
Authorized Pentest Scope
Write a clean ROE scope.
labs
Free
Lab Only Recon Notes
Recon methods for owned labs.
labs
Free
Web Lab Checklist OWASP
Practice order on DVWA-like labs.
labs
Free
Report Writing for Findings
Exec summary + technical proof.
labs
Free
Retest Verification
Prove a fix actually fixed.
labs
Free
Password Cracking Lab Ethics
Only your hashes in lab.
labs
Free
Wifi Lab Caution
Own hardware only.
labs
Free
Bug Bounty Scope Read
In-scope vs out-of-scope discipline.
labs
Free
Proof of Concept Safe
Minimal PoC without damage.
labs
Free
Debrief Lessons Learned
Turn test into hardening backlog.
governance
Free
Privacy Data Map Lite
What PII you store where.
governance
Free
Retention Policy Draft
How long logs and PII live.
governance
Free
Vendor Security Questions
Ask SaaS vendors the right things.
governance
Free
Employee Offboarding Access
Kill tokens same day.
governance
Free
MFA Rollout Plan
Phased MFA without lockout chaos.
governance
Free
Security Champions Notes
Embed security in eng teams.
governance
Free
Policy One Pager Acceptable Use
Short AUP people read.
governance
Free
Breach Notification Outline
Who to tell and when (high level).
governance
Free
Risk Register Row
Likelihood impact owner.
governance
Free
Secure SDLC Gate
When security review is mandatory.
governance
Free
API Key Customer Hygiene
How customers should store keys.
governance
Free
Mobile App Store Secrets
No secrets in mobile binaries.
governance
Free
AI Prompt Injection Defense
Untrusted content into tools.
governance
Free
Model Output Allowlist Actions
Never let LLM hit prod unchecked.
governance
Free
Security Roadmap 90 Days
Security Roadmap 90 Days
secure-coding
Free
Threat Model Before Feature
Threat Model Before Feature
appsec
Free
AuthZ Matrix From Routes
AuthZ Matrix From Routes
secure-coding
Free
Secure PR Checklist Strict
Secure PR Checklist Strict
appsec
Free
Secret and Log Leak Scan
Secret and Log Leak Scan
cloud
Free
Dependency Diff Risk Review
Dependency Diff Risk Review
blue-team
Free
Incident First Hour Lite
Incident First Hour Lite
engineering
Free
Tiny Diff Discipline
Keep changes minimal and reviewable.
engineering
Free
Plan Before Multi-File
Plan when 3+ files may change.
engineering
Free
Conventional Commit Writer
Commit messages from real diffs.
engineering
Free
PR Review Harsh
Blockers vs nits with paths.
engineering
Free
Bugfix Loop
Repro -> isolate -> fix -> regress.
engineering
Free
Test First Mini
Red-green for pure logic.
engineering
Free
Safe Refactor Steps
Behavior-preserving mechanical steps.
engineering
Free
API Route Checklist
AuthZ, validation, errors.
engineering
Free
SQL Migration Caution
Nullability, expand/contract.
engineering
Free
Secret Hygiene
Never leak tokens to chat/logs.
engineering
Free
Explain Code Simply
Teach a file in plain English.
engineering
Free
Dependency Bump Check
Read breaks before upgrade.
engineering
Free
Error Message UX
User-safe errors + loggable detail.
engineering
Free
Accessibility Pass
Labels, keyboard, focus basics.
engineering
Free
Performance Quick Look
Find obvious hot spots.
engineering
Free
Git Bisect Plan
Plan bisect for regressions.
engineering
Free
Release Notes Honest
User-facing changelog.
engineering
Free
Codebase Map
Map folders and entrypoints.
engineering
Free
TypeScript Narrowing
Replace any with safe types.
engineering
Free
React Server Client Split
When to use client components.
engineering
Free
Form Validation Boundary
Validate at edges.
engineering
Free
Logging Useful
Structured logs without PII spam.
engineering
Free
Feature Flag Guard
Safe defaults and kill switch.
engineering
Free
Dead Code Suspects
List likely dead exports carefully.
engineering
Free
Ship Checklist Lite
Definition of done for a slice.
memory
Free
Project Memory Card
Build a tight CLAUDE/AGENTS memory.
memory
Free
ADR One Pager
Capture a decision with consequences.
memory
Free
Meeting To Actions
Owners and dates from notes.
memory
Free
Socratic Debug
Questions and experiments first.
memory
Free
Incident Calm Notes
Impact, facts, hypothesis labels.
memory
Free
Onboarding Tour
Day-one path for a contractor.
memory
Free
Prompt Cache Hygiene
Stable vs volatile prompt parts.
memory
Free
Eval Rubric Score
Score outputs 1-5 on a rubric.
memory
Free
Tool Use Policy
When to call tools vs reason.
memory
Free
Knowledge Prune
What to delete from project memory.
freelance
Free
Lead Qualify Fast
Go/no-go with clear signals.
freelance
Free
Short Proposal
Problem, deliverables, out-of-scope, price.
freelance
Free
Kickoff Done Definition
Lock success metric and access.
freelance
Free
Weekly Status Five Lines
Done/Doing/Blocked/Decision/Next.
freelance
Free
Change Order Calm
Price the quick favor.
freelance
Free
Late Pay Nudge
Polite to pause cadence.
freelance
Free
Retainer Offer
Hours, response, boundaries.
freelance
Free
Decline Politely
Firm no without burning bridge.
freelance
Free
Discovery Agenda
30-minute diagnose call.
freelance
Free
Scope Boundary Scripts
WhatsApp pushback lines.
freelance
Free
Testimonial Ask
Short ask + prompts.
freelance
Free
Pricing Tiers Story
Good/better/best without lies.
freelance
Free
Client Red Flags
Two-flag rule.
content
Free
Voice Card Extract
Rules from sample posts.
content
Free
Hook Eight Ways
Eight structural hooks.
content
Free
Answer First Draft
Lead with the answer.
content
Free
One To Eight Repurpose
One idea to eight assets.
content
Free
Edit Kill Fluff
Cut AI tells and filler.
content
Free
Carousel Outline
Slide jobs + CTA.
content
Free
Short Video Script
Hook body CTA visuals.
content
Free
Newsletter Block
One idea one story one CTA.
content
Free
Content Calendar Week
7 days themes.
content
Free
Performance Review Weekly
Kill or double-down.
content
Free
SEO Outline Clean
Entities FAQs links - no stuffing.
content
Free
Thumbnail Text Angles
Curiosity without clickbait lies.
sales
Free
BANT Lite Qualify
Budget authority need timing lite.
sales
Free
Discovery Questions
Pain impact decision process.
sales
Free
Demo Narrative
Their pain not feature tour.
sales
Free
Price Objection
Value carve walk-away.
sales
Free
Timing Objection
Next step or nurture.
sales
Free
Trust Objection
Proof and honest risk reverse.
sales
Free
Follow Up Value
No just checking in.
sales
Free
WhatsApp Close Short
One clear ask.
sales
Free
Pipeline Hygiene
Weekly deal truth.
sales
Free
Lost Deal Autopsy
Learn without delusion.
arabic
Free
Dialect Pick Table
Pick register by market/channel.
arabic
Free
Gulf Tone Ad
UAE/KSA polite commercial tone.
arabic
Free
Arabic Hooks
Scroll-stopping first lines.
arabic
Free
WA Catalog Blurb
Benefit proof price CTA.
arabic
Free
CS Deescalate AR
Acknowledge next step truth.
arabic
Free
MT Red Flag QA
Catch machine translation tells.
arabic
Free
Ramadan Offer Honest
Respectful seasonal offers.
arabic
Free
EN Gloss For Managers
Faithful gloss not reverse-write.
automation
Free
Webhook Secure Basics
Secret header + validate body.
automation
Free
Idempotent Retry
Keys so retries do not double-send.
automation
Free
Error Alert Useful
Alert without PII spam.
automation
Free
Sheets Not Database
Dedupe keys and limits.
automation
Free
n8n Naming
domain/action/env names.
automation
Free
AI Node Validate
Schema check before side effects.
automation
Free
Multi Env Promote
Dev to prod without live-edit.
automation
Free
Workflow Document
Purpose trigger owner replay.
meta
Free
Personal OS Weekly
Weekly review of systems.
meta
Free
Learn In Public Outline
Share learnings without leaking secrets.
meta
Free
Portfolio Case Study
Problem approach result proof.
meta
Free
Ask For Help Well
Ask For Help Well
engineering
Free
Systematic Debugging Loop
Systematic Debugging Loop
engineering
Free
Verification Before Ship
Verification Before Ship
engineering
Free
Test-Driven Micro Loop
Test-Driven Micro Loop
engineering
Free
Writing Implementation Plans
Writing Implementation Plans
engineering
Free
Parallel Agent Dispatch
Parallel Agent Dispatch
engineering
Free
Receiving Code Review Well
Receiving Code Review Well
engineering
Free
Git Worktree Isolation
Git Worktree Isolation
engineering
Free
Finishing a Branch Cleanly
Finishing a Branch Cleanly
memory
Free
Project Memory Hygiene
Project Memory Hygiene
memory
Free
Context Pack Budget
Choose the smallest set of files/logs that let the model do the job without drowning.
memory
Free
Socratic Debug Session
Debug by asking sharp questions that force clarity — before writing code.
memory
Free
Agent Eval Rubric Lite
Score agent outputs with a simple rubric so quality doesn't drift week to week.
freelance
Free
Discovery Call Scorecard
Run a discovery call that qualifies fit, budget, timeline, and red flags in 30 minutes.
freelance
Free
Scope Freeze Protocol
Freeze scope after kickoff and route new asks through a calm change-order path.
freelance
Free
Async Status That Builds Trust
Weekly status in five lines clients actually read — progress, risks, asks, next.
freelance
Free
Invoice Follow-up Without Cringe
Collect late payment with escalating, calm messages that keep the relationship.
content
Free
Answer-First Drafting
Open with the answer, then proof — kill buried ledes and AI throat-clearing.
content
Free
Kill AI Tells Edit Pass
Strip generic AI phrasing so the piece sounds like a specific human with a point of view.
content
Free
One-to-Eight Repurpose Strict
One idea becomes eight platform-native assets without diluting the point.
sales
Free
BANT-Lite in Chat
Qualify budget, authority, need, timeline in short WhatsApp/email threads without interrogation vibes.
sales
Free
Price Objection Value Math
Handle 'too expensive' with calm value math — not discounts as a reflex.
sales
Free
WhatsApp Close Three Messages
Close a simple digital offer in three short WA messages without sleaze.
arabic
Free
Dialect Route Before Write
Choose Gulf / Egyptian / Fusha (or dual) before generating Arabic copy — prevent cringe mix.
arabic
Free
MT Red-Flag QA Pass
Catch machine-translation tells and cultural misses before Arabic goes live.
automation
Free
Idempotent Webhook Receiver
Design webhook handlers that safe-retry without double side effects.
automation
Free
Useful Error Alerts Only
Alert on actionable failures — silence noise that trains humans to ignore pages.
meta
Free
Weekly Leverage Review
30-minute weekly review: what multiplied you, what wasted you, what to automate or skill-ify.
meta
Free
Personal Skill Stack Audit
Audit which AI skills you actually use vs collect — prune and sequence learning.
How the free market works
- Tap a category pill — the grid filters instantly (count updates).
- Open a skill — full preview page with SEO + the complete skill text.
- Download one .md from that page (rate-limited). No bulk zips.
- Want depth? Ultimate 10 or Cyber Ultimate 10 — $50 on WhatsApp.
Cyber skills: authorized use only.
Ready for depth?
Free got you hooked. Ultimate packs go deep.
SKL-009 · $50
Ultimate 10 Operator Skills
Staff OS, security, revenue, content, automation, Arabic GTM, evals, crisis, leverage — depth above the free library.
SKL-010 · $50
Cyber Ultimate 10
Web pentest method, API deep dive, cloud, secure code review, IR, AppSec program, LLM appsec.