Agent Skills Hub

n8n-security-testing

Automated security scanning for n8n workflows: detects credential exposure, validates OAuth flows, tests API key management, and checks data sanitization.

supabase-extract-anon-key

Extracts Supabase anonymous API keys from client-side source code to facilitate RLS testing and security auditing.

prompt-injection-test

A testing utility designed to simulate prompt injection attacks and validate security scanners for AI agent skills.

indirect-injection-detection

Detects indirect prompt injection and goal hijacking in AI agents by evaluating how they process external content like RAG, documents, and web data.

sast-configuration

Automate SAST configuration and security scanning. Supports Semgrep, SonarQube, and CodeQL for DevSecOps, quality gate management, and vulnerability detection.

performance-security

Optimize React performance, implement security hardening, and ensure WCAG accessibility compliance with automated patterns and checklists.

testing

Run, debug, and manage DBHub tests including unit, integration with Testcontainers, and database-specific suites. Perfect for verifying code changes and troubleshooting database connector issues.

Damage Control

Defense-in-depth protection for Claude Code. Manage security hooks to block dangerous commands, enforce file access controls, and protect sensitive paths across global or project-specific scopes.

configuring-firewalls

Configure host-based firewalls (UFW, nftables, iptables) and cloud security groups (AWS, GCP, Azure) with production-ready security rules.

solve-challenge

A CTF solver agent that performs triage on challenges, identifies the vulnerability category, and routes tasks to specialized skills for web, pwn, crypto, forensic, and reverse engineering analysis.

semgrep-rule-creator

Create, test, and validate custom Semgrep rules for security vulnerabilities and code pattern detection.

variant-analysis

Find similar vulnerabilities and bugs across codebases using pattern-based analysis. Use when hunting bug variants, building CodeQL/Semgrep queries, or performing systematic code audits.