semgrep
Run Semgrep static analysis scans on codebases using parallel subagents, multi-language detection, and Pro-enabled cross-file taint tracking.
Discover reusable agent skills, browse implementation details, and find the right skill for your workflow.
142 skills found
Run Semgrep static analysis scans on codebases using parallel subagents, multi-language detection, and Pro-enabled cross-file taint tracking.
Performs end-to-end OT/ICS threat modeling using Microsoft TMT exports and model files, mapping threats to MITRE ATT&CK for ICS, CWE, and CVSS v4.0 with automated risk-based prioritization.
Automated global intelligence aggregator for market, geopolitical, and AI news. Features RSS feed integration, real-time alert systems for critical events, and structured report generation with intelligence inference.
View, filter, and analyze Vocal Bridge voice agent call logs, transcripts, and session details directly from your terminal.
Master memory forensics with techniques for acquisition, process analysis, and artifact extraction using Volatility 3 for incident response and malware analysis.
Perform network protocol reverse engineering, including packet capture, traffic analysis, protocol dissection, and custom format documentation.
Securely manage CI/CD secrets with Vault, AWS Secrets Manager, and environment-specific patterns. Prevent credential leakage, implement rotation, and enforce least-privilege access for pipelines.
Audit outbound network requests and detect data exfiltration patterns in OpenClaw skills to ensure secure outbound communication.
Create and manage production-ready Grafana dashboards for observability, real-time metrics visualization, and system monitoring.
Synthesize research on system internals and adversary tradecraft into a concrete, testable hunt hypothesis.
Manage, run, and update JS framework benchmarks for the Gea framework, including reporting, HTML result generation, and performance comparisons.
Troubleshoot and manage the GCP e2-micro VM running the eth-realtime-collector. Handle systemd failures, network connectivity issues, and real-time data stream monitoring for Ethereum network data.