Agent Skills Hub

cargo-fuzz

cargo-fuzz is the de facto fuzzer for Rust, enabling automated vulnerability discovery in Cargo projects via the libFuzzer backend and integrated sanitizer support.

atheris

Atheris is a coverage-guided Python fuzzer based on libFuzzer for testing pure Python code and Python C extensions.

Python Security Scan

Advanced Python security vulnerability scanner for Flask, Django, and FastAPI projects. Audits OWASP Top 10, dependencies, hardcoded secrets, and framework-specific flaws.

secure-claude-code

Monitor Runwall security posture, enabled guardrails, and recent audit logs for Claude Code, Codex, and MCP-based development environments.

threat-modeling-ics

Performs end-to-end OT/ICS threat modeling using Microsoft TMT exports and model files, mapping threats to MITRE ATT&CK for ICS, CWE, and CVSS v4.0 with automated risk-based prioritization.

Security Code Review

Analyze source code for security vulnerabilities based on OWASP Top 10 guidelines and suggest remediation strategies.

debug-firewall

Debug the AWF (Agentic Workflow Firewall) by inspecting containers, analyzing Squid logs, checking iptables, and troubleshooting network or domain access issues in isolated sandboxes.

code-auditing

A systematic code auditing framework for identifying technical debt, security vulnerabilities, dead code, and code quality issues in software projects.

xss-testing

Automated security skill for identifying and validating XSS vulnerabilities, including Reflected, Stored, and DOM-based attacks across various contexts.

ctf-solver

An expert-level CTF solver agent that automates reconnaissance, vulnerability analysis, and exploit generation for web, pwn, crypto, reverse, and forensic challenges.

springboot-security

Spring Security best practices for Spring Boot: Auth, validation, CSRF protection, secret management, rate limiting, and dependency security.

sast-idor

Automated detection of IDOR vulnerabilities using a three-phase subagent workflow to verify authorization and ownership checks on sensitive endpoints.