Agent Skills Hub

api-security

API security guardrail enforcing OWASP Top 10, authentication, input validation, and XSS prevention for secure backend development.

Python Security Scan

Advanced Python security vulnerability scanner for Flask, Django, and FastAPI projects. Audits OWASP Top 10, dependencies, hardcoded secrets, and framework-specific flaws.

owasp-mobile-security-checker

Automated security auditing for Flutter applications based on OWASP Mobile Top 10 (2024). Perform vulnerability scans for hardcoded secrets, insecure storage, dependency risks, and network configuration issues.

Security Code Review

Analyze source code for security vulnerabilities based on OWASP Top 10 guidelines and suggest remediation strategies.

xss-testing

Automated security skill for identifying and validating XSS vulnerabilities, including Reflected, Stored, and DOM-based attacks across various contexts.

WordPress Penetration Testing

Conduct automated security assessments of WordPress sites using WPScan, enumeration techniques, and vulnerability scanning for themes, plugins, and users.

multi-llm-advisor

Fetches expert perspectives from OpenAI Codex and Google Gemini for architecture, code reviews, and debugging, with transparent LLM synthesis.

code-security

Comprehensive secure coding guidelines for 15+ languages, covering OWASP Top 10, infrastructure security, and best practices to identify vulnerabilities in code, configurations, and cloud setups.

skill-code-review

Multi-LLM code review pipeline using consensus-based analysis to detect security, architectural, and quality issues.

backend-core

Language-agnostic backend architectural patterns covering API design, authentication, security protocols, and database modeling.

sbom-syft

Generate Software Bill of Materials (SBOM) for container images and filesystems using Syft. Supports 28+ ecosystems, multiple formats like CycloneDX and SPDX, and integration into CI/CD for supply chain security.

security-audit

Automated security validation, RLS enforcement, OWASP compliance, and vulnerability scanning for AI-assisted development workflows.