EvilFreelancer/secs
SECS (SECurity aSsistant) turns an AI coding agent (Claude Code, Cursor, Codex) into an authorized information-security assistant - 35 security Agent Skills, a Debian/Ubuntu/Kali toolchain installer, and a local Metasploitable 3 practice la
ARCHETYPE
Skill Collector
Ten-plus skills loaded on demand. A procedural-knowledge library.
Copy this rig
$ git clone --depth 1 https://github.com/EvilFreelancer/secs MCP servers are added to Claude Code at local scope; env vars are shown as YOUR_… placeholders — we never store values. Files are fetched with degit into a separate folder so you can review before merging.
$ npx degit EvilFreelancer/secs/.agents/skills/analyzing-binaries .claude/skills/analyzing-binaries $ npx degit EvilFreelancer/secs/.agents/skills/analyzing-malware .claude/skills/analyzing-malware $ npx degit EvilFreelancer/secs/.agents/skills/analyzing-memory-images .claude/skills/analyzing-memory-images $ npx degit EvilFreelancer/secs/.agents/skills/analyzing-network-traffic .claude/skills/analyzing-network-traffic $ npx degit EvilFreelancer/secs/.agents/skills/analyzing-phishing-emails .claude/skills/analyzing-phishing-emails $ npx degit EvilFreelancer/secs/.agents/skills/attacking-active-directory .claude/skills/attacking-active-directory $ npx degit EvilFreelancer/secs/.agents/skills/attacking-wireless-networks .claude/skills/attacking-wireless-networks $ npx degit EvilFreelancer/secs/.agents/skills/auditing-code-for-vulnerabilities .claude/skills/auditing-code-for-vulnerabilities $ npx degit EvilFreelancer/secs/.agents/skills/auditing-mcp-servers .claude/skills/auditing-mcp-servers $ npx degit EvilFreelancer/secs/.agents/skills/auditing-supply-chain .claude/skills/auditing-supply-chain $ npx degit EvilFreelancer/secs/.agents/skills/container-security .claude/skills/container-security $ npx degit EvilFreelancer/secs/.agents/skills/cracking-passwords .claude/skills/cracking-passwords $ npx degit EvilFreelancer/secs/.agents/skills/engineering-detections .claude/skills/engineering-detections $ npx degit EvilFreelancer/secs/.agents/skills/enumerating-network-services .claude/skills/enumerating-network-services $ npx degit EvilFreelancer/secs/.agents/skills/escalating-linux-privileges .claude/skills/escalating-linux-privileges $ npx degit EvilFreelancer/secs/.agents/skills/escalating-windows-privileges .claude/skills/escalating-windows-privileges $ npx degit EvilFreelancer/secs/.agents/skills/establishing-persistence .claude/skills/establishing-persistence $ npx degit EvilFreelancer/secs/.agents/skills/exploiting-cloud-platforms .claude/skills/exploiting-cloud-platforms $ npx degit EvilFreelancer/secs/.agents/skills/hardening-cloud-posture .claude/skills/hardening-cloud-posture $ npx degit EvilFreelancer/secs/.agents/skills/hunting-threats .claude/skills/hunting-threats $ npx degit EvilFreelancer/secs/.agents/skills/hunting-web-backdoors .claude/skills/hunting-web-backdoors $ npx degit EvilFreelancer/secs/.agents/skills/iac-security .claude/skills/iac-security $ npx degit EvilFreelancer/secs/.agents/skills/investigating-aws-incidents .claude/skills/investigating-aws-incidents $ npx degit EvilFreelancer/secs/.agents/skills/investigating-azure-incidents .claude/skills/investigating-azure-incidents $ npx degit EvilFreelancer/secs/.agents/skills/investigating-gcp-incidents .claude/skills/investigating-gcp-incidents $ npx degit EvilFreelancer/secs/.agents/skills/investigating-m365-entra .claude/skills/investigating-m365-entra $ npx degit EvilFreelancer/secs/.agents/skills/investigating-windows-endpoints .claude/skills/investigating-windows-endpoints $ npx degit EvilFreelancer/secs/.agents/skills/maintaining-engagement-state .claude/skills/maintaining-engagement-state $ npx degit EvilFreelancer/secs/.agents/skills/managing-vulnerabilities .claude/skills/managing-vulnerabilities $ npx degit EvilFreelancer/secs/.agents/skills/mapping-attack-techniques .claude/skills/mapping-attack-techniques $ npx degit EvilFreelancer/secs/.agents/skills/orchestrating-vulnerability-research .claude/skills/orchestrating-vulnerability-research $ npx degit EvilFreelancer/secs/.agents/skills/performing-reconnaissance .claude/skills/performing-reconnaissance $ npx degit EvilFreelancer/secs/.agents/skills/performing-social-engineering .claude/skills/performing-social-engineering $ npx degit EvilFreelancer/secs/.agents/skills/producing-threat-intelligence .claude/skills/producing-threat-intelligence $ npx degit EvilFreelancer/secs/.agents/skills/recognizing-deception .claude/skills/recognizing-deception $ npx degit EvilFreelancer/secs/.agents/skills/reporting-security-findings .claude/skills/reporting-security-findings $ npx degit EvilFreelancer/secs/.agents/skills/responding-to-incidents .claude/skills/responding-to-incidents $ npx degit EvilFreelancer/secs/.agents/skills/reviewing-cryptography .claude/skills/reviewing-cryptography $ npx degit EvilFreelancer/secs/.agents/skills/securing-ai-systems .claude/skills/securing-ai-systems $ npx degit EvilFreelancer/secs/.agents/skills/testing-apis .claude/skills/testing-apis
This rig commits no guardrails. Here is the community baseline instead — the deny/ask rules most often found across all 7,204 rigs:
{
"permissions": {
"deny": [
"Read(./.env)",
"Read(**/.env)",
"Read(~/.ssh/**)",
"Bash(rm -rf *)",
"Read(**/*.pem)",
"Bash(rm -rf /)",
"Bash(git push --force:*)",
"Bash(sudo *)",
"Read(.env)",
"Bash(rm -rf /*)",
"Read(./.env.*)",
"Read(~/.aws/**)",
"Bash(git push --force*)",
"Bash(rm -rf:*)",
"Read(**/*.key)",
"Read(**/.env.*)",
"Bash(sudo:*)",
"Bash(git reset --hard*)",
"Bash(git reset --hard:*)",
"Read(.env.*)"
],
"ask": [
"Bash(git push:*)",
"Bash(git push *)",
"Bash(git commit:*)",
"Bash(rm *)",
"Bash(rm:*)",
"Bash(git rebase *)",
"Bash(wget *)",
"Bash(npm publish:*)",
"Bash(git commit *)",
"Bash(gh pr merge *)"
]
}
} Skills (49)
analyzing-binariesanalyzing-malwareanalyzing-memory-imagesanalyzing-network-trafficanalyzing-phishing-emailsattacking-active-directoryattacking-wireless-networksauditing-code-for-vulnerabilitiesauditing-mcp-serversauditing-supply-chaincontainer-securitycracking-passwordsengineering-detectionsenumerating-network-servicesescalating-linux-privilegesescalating-windows-privilegesestablishing-persistenceexploiting-cloud-platformshardening-cloud-posturehunting-threatshunting-web-backdoorsiac-securityinvestigating-aws-incidentsinvestigating-azure-incidentsinvestigating-gcp-incidentsinvestigating-m365-entrainvestigating-windows-endpointsmaintaining-engagement-statemanaging-vulnerabilitiesmapping-attack-techniquesorchestrating-vulnerability-researchperforming-reconnaissanceperforming-social-engineeringproducing-threat-intelligencerecognizing-deceptionreporting-security-findingsresponding-to-incidentsreviewing-cryptographysecuring-ai-systemstesting-apistesting-ics-ot-protocolstesting-mobile-applicationstesting-web-applicationsthreat-modelingtransferring-filestriaging-security-alertsvetting-agent-extensionswriting-sigma-ruleswriting-yara-rules
Similar rigs
alunduil/alunduil-chezmoi
Personal chezmoi-managed dotfiles and host config: bootstrap a fresh host from bare OS to a working setup in one command.
Skill Collector 6.1k tok ·
Cristhianzl/claude-skills-czl
Battle-tested Claude Code configs — opinionated CLAUDE.md baselines, skills, slash commands and enforcement hooks you drop into any project
Skill Collector 7.5k tok ·
mihaimurra001/preConfigProject
Visual configurator & hub for AI coding agent skills, rules, MCP servers & themes (Google Antigravity & Claude Code)
Skill Collector 7.4k tok ·
pvillega/claude-templates
Templates for new Claude repos
Skill Collector 3.4k tok ·