Agent Skills Hub

springboot-security

Spring Security best practices for Spring Boot: Auth, validation, CSRF protection, secret management, rate limiting, and dependency security.

mcp-rails

Implement a full Model Context Protocol (MCP) stack in Rails. Connect to external servers, expose your Rails app as an MCP server, or manage subprocess MCP containers via Docker with OAuth 2.1 PKCE support.

constant-time-analysis

Detects timing side-channel vulnerabilities in cryptographic code through static and dynamic analysis across multiple programming languages.

ossfuzz

Streamline continuous fuzzing for open-source projects using the OSS-Fuzz CLI framework to build harnesses, manage configurations, and generate coverage reports.

dependency-auditor

Automated security auditing for project dependencies. Scans package files (npm, pip, maven, etc.) for vulnerabilities, CVEs, and license issues, offering automated fix suggestions and integration for secure deployment workflows.

claude-rag-skills

A suite of professional tools for auditing, evaluating, chunking, and scaffolding production-ready RAG pipelines within Claude Code.

semgrep-rule-creator

Create, test, and validate custom Semgrep rules for security vulnerabilities and code pattern detection.

code-auditing

A systematic code auditing framework for identifying technical debt, security vulnerabilities, dead code, and code quality issues in software projects.

webapp-testing

Toolkit for testing local web applications using Playwright, featuring server lifecycle management, automated DOM inspection, and browser automation workflows.

solana-dev

A unified Solana development skill hub featuring multi-agent orchestration, progressive skill loading, and deep integrations for Anchor, Token-2022, DeFi protocols, and security auditing.

auth-patterns

Implement secure backend authentication (JWT, OAuth, Sessions) and authorization (RBAC, ABAC) patterns, including password hashing, MFA, and security best practices.

semgrep

Run Semgrep static analysis scans on codebases using parallel subagents, multi-language detection, and Pro-enabled cross-file taint tracking.