Agent Skills Hub

otto

🛡️ GDPR & LGPD Privacy Guardian: Automated compliance scanner that detects PII exposure, insecure logging, and tracking violations in your codebase to prevent regulatory fines.

k8s-security-policies

Implement production-grade Kubernetes security using NetworkPolicy, RBAC, Pod Security Standards, and OPA Gatekeeper policies.

variant-analysis

Find similar vulnerabilities and bugs across codebases using pattern-based analysis. Use when hunting bug variants, building CodeQL/Semgrep queries, or performing systematic code audits.

memory-forensics

Master memory forensics with techniques for acquisition, process analysis, and artifact extraction using Volatility 3 for incident response and malware analysis.

ms365-tenant-manager

Expert Microsoft 365 tenant administration skill for setup, user lifecycle, security policy configuration, compliance, and automated PowerShell scripting for Global Administrators.

wycheproof

Validates cryptographic implementations using the Google Wycheproof test vector suite to detect security edge cases and known vulnerabilities.

dependency-auditor

Automated security auditing for project dependencies. Scans package files (npm, pip, maven, etc.) for vulnerabilities, CVEs, and license issues, offering automated fix suggestions and integration for secure deployment workflows.

vibesafe

Manage Vibesafe units to scan, generate, test, and verify AI-written code with cryptographically-secure hash-locked checkpoints.

protocol-reverse-engineering

Perform network protocol reverse engineering, including packet capture, traffic analysis, protocol dissection, and custom format documentation.

solo-validate

End-to-end startup idea validation using S.E.E.D. niche checks, STREAM 6-layer analysis, and Devil's Advocate inversion to generate PRDs.

substrate-vulnerability-scanner

Analyze Substrate/Polkadot runtimes and FRAME pallets for 7 critical vulnerabilities including arithmetic overflow, DoS, and improper origin checks.

solana-vulnerability-scanner

Scans Solana programs (native/Anchor) for 6 critical vulnerabilities, including arbitrary CPI, improper PDA validation, and missing ownership checks, providing detailed fix recommendations.