Agent Skills Hub

indirect-injection-detection

Detects indirect prompt injection and goal hijacking in AI agents by evaluating how they process external content like RAG, documents, and web data.

migrate-oai-app

Migrate existing OpenAI Apps SDK applications to the MCP Apps SDK, including step-by-step guidance, API mapping tables, and CSP investigation workflows.

skill-vetter

Security-first vetting protocol for AI agent skills. Detects red flags like credential theft, obfuscated code, and unauthorized data exfiltration before installation.

code-review-expert

Expert code review agent that performs systematic audits of git changes for SOLID violations, security vulnerabilities, performance regressions, and architectural smells.

otto

🛡️ GDPR & LGPD Privacy Guardian: Automated compliance scanner that detects PII exposure, insecure logging, and tracking violations in your codebase to prevent regulatory fines.

compliance-testing

Automate regulatory compliance testing for GDPR, CCPA, HIPAA, SOC2, and PCI-DSS to ensure legal adherence, prepare for audits, and secure sensitive data.

swift-review

Expert Swift code review for macOS/iOS. Detects memory leaks, threading bugs, concurrency issues, and accessibility gaps using parallel analysis agents.

prompt-injection-test

A testing utility designed to simulate prompt injection attacks and validate security scanners for AI agent skills.

springboot-security

Spring Security best practices for Spring Boot: Auth, validation, CSRF protection, secret management, rate limiting, and dependency security.

plugin-best-practices

Validates Claude Code plugins against architectural standards, checking manifest files, frontmatter, and tool invocation patterns to ensure high-quality, compliant plugin development.

Damage Control

Defense-in-depth protection for Claude Code. Manage security hooks to block dangerous commands, enforce file access controls, and protect sensitive paths across global or project-specific scopes.

dependency-auditor

Automated security auditing for project dependencies. Scans package files (npm, pip, maven, etc.) for vulnerabilities, CVEs, and license issues, offering automated fix suggestions and integration for secure deployment workflows.