Agent Skills Hub

entry-point-analyzer

Map the attack surface of smart contract codebases by identifying and categorizing state-changing entry points.

semgrep-rule-creator

Create, test, and validate custom Semgrep rules for security vulnerabilities and code pattern detection.

security-assessment

Systematic security assessment using STRIDE threat modeling, OWASP top 10 review, and secure coding practices for code, architecture, and infrastructure.

toh-framework

Security-first auditing framework for AI-generated code. Provides multi-level protection including hardcoded secret detection, dangerous pattern identification, and comprehensive vulnerability audits for modern web applications.

solana-vulnerability-scanner

Scans Solana programs (native/Anchor) for 6 critical vulnerabilities, including arbitrary CPI, improper PDA validation, and missing ownership checks, providing detailed fix recommendations.

semgrep

Run Semgrep static analysis scans on codebases using parallel subagents, multi-language detection, and Pro-enabled cross-file taint tracking.

dependency-auditor

Automated security auditing for project dependencies. Scans package files (npm, pip, maven, etc.) for vulnerabilities, CVEs, and license issues, offering automated fix suggestions and integration for secure deployment workflows.

sarif-parsing

Parses and processes SARIF files from static analysis tools. Enables aggregation, deduplication, filtering, and CI/CD integration of scan results.

audit-skills

Audit AI skills for security vulnerabilities including prompt injection, hidden instructions, tool misuse, and data exfiltration risks.

quality

Expert code reviewer for Rust projects. Performs comprehensive quality, security, performance, and architectural analysis using Bazel and project-specific conventions.

substrate-vulnerability-scanner

Analyze Substrate/Polkadot runtimes and FRAME pallets for 7 critical vulnerabilities including arithmetic overflow, DoS, and improper origin checks.

code-auditing

A systematic code auditing framework for identifying technical debt, security vulnerabilities, dead code, and code quality issues in software projects.