Agent Skills Hub

xss-testing

Automated security skill for identifying and validating XSS vulnerabilities, including Reflected, Stored, and DOM-based attacks across various contexts.

code-review

Perform comprehensive code reviews with a focus on security vulnerabilities, performance optimization, maintainability, and code correctness.

entry-point-analyzer

Map the attack surface of smart contract codebases by identifying and categorizing state-changing entry points.

Auditing Security

Perform systematic security audits, vulnerability scanning, and risk assessments with OWASP-aligned methodology for robust code protection.

dojo-debug

Diagnose and resolve connection, sync, subscription, and type issues in Dojo.js applications. Use for troubleshooting Torii, entity queries, and state updates.

Security Code Review

Analyze source code for security vulnerabilities based on OWASP Top 10 guidelines and suggest remediation strategies.

clawsec-nanoclaw

Security advisory monitoring for NanoClaw WhatsApp bots, providing vulnerability scanning, skill safety checks, and integrity protection through MCP tools.

dependency-auditor

Automated security auditing for project dependencies. Scans package files (npm, pip, maven, etc.) for vulnerabilities, CVEs, and license issues, offering automated fix suggestions and integration for secure deployment workflows.

security-review

A comprehensive security auditing and hardening assistant that applies best practices for authentication, input validation, secrets management, and SQL injection prevention to your codebase.

indirect-injection-detection

Detects indirect prompt injection and goal hijacking in AI agents by evaluating how they process external content like RAG, documents, and web data.

toh-framework

Security-first auditing framework for AI-generated code. Provides multi-level protection including hardcoded secret detection, dangerous pattern identification, and comprehensive vulnerability audits for modern web applications.

codeql

Perform deep security analysis on codebases using CodeQL for interprocedural data flow, taint tracking, and automated vulnerability detection across multiple languages.