Agent Skills Hub

command-executor

Safely execute, test, and verify commands discovered in documentation with real output capture, performance tracking, and git-aware safety protocols.

code-security

Comprehensive secure coding guidelines for 15+ languages, covering OWASP Top 10, infrastructure security, and best practices to identify vulnerabilities in code, configurations, and cloud setups.

migrate-oai-app

Migrate existing OpenAI Apps SDK applications to the MCP Apps SDK, including step-by-step guidance, API mapping tables, and CSP investigation workflows.

security-audit

Automated security validation, RLS enforcement, OWASP compliance, and vulnerability scanning for AI-assisted development workflows.

security-review

A comprehensive security auditing and hardening assistant that applies best practices for authentication, input validation, secrets management, and SQL injection prevention to your codebase.

indirect-injection-detection

Detects indirect prompt injection and goal hijacking in AI agents by evaluating how they process external content like RAG, documents, and web data.

upstash-ratelimit-ts

A connectionless, HTTP-based rate limiting SDK for TypeScript, ideal for serverless, edge functions, and distributed environments using Upstash Redis.

n8n-security-testing

Automated security scanning for n8n workflows: detects credential exposure, validates OAuth flows, tests API key management, and checks data sanitization.

security-testing

Automated security vulnerability scanner implementing OWASP Top 10 testing for SAST/DAST, dependency auditing, and auth/authorization validation in CI/CD pipelines.

commit-safe

A secure Git commit workflow agent that prevents accidental mass commits and promotes surgical, file-specific staging and semantic commits.

otto

🛡️ GDPR & LGPD Privacy Guardian: Automated compliance scanner that detects PII exposure, insecure logging, and tracking violations in your codebase to prevent regulatory fines.

auth-patterns

Implement secure backend authentication (JWT, OAuth, Sessions) and authorization (RBAC, ABAC) patterns, including password hashing, MFA, and security best practices.