Agent Skills Hub

security-testing

Automated security vulnerability scanner implementing OWASP Top 10 testing for SAST/DAST, dependency auditing, and auth/authorization validation in CI/CD pipelines.

security-review

A comprehensive security auditing and hardening assistant that applies best practices for authentication, input validation, secrets management, and SQL injection prevention to your codebase.

variant-analysis

Find similar vulnerabilities and bugs across codebases using pattern-based analysis. Use when hunting bug variants, building CodeQL/Semgrep queries, or performing systematic code audits.

sui

Debugs deterministic Sui simtest failures using automated logging and the scientific method.

codeql

Perform deep security analysis on codebases using CodeQL for interprocedural data flow, taint tracking, and automated vulnerability detection across multiple languages.

posit-news

Fetch and aggregate the latest Posit news, blog posts, podcast episodes, video content, and event announcements using automated sub-agents.

solve-challenge

A CTF solver agent that performs triage on challenges, identifies the vulnerability category, and routes tasks to specialized skills for web, pwn, crypto, forensic, and reverse engineering analysis.

semgrep-rule-creator

Create, test, and validate custom Semgrep rules for security vulnerabilities and code pattern detection.

featbit-opentelemetry

Expert guidance for configuring FeatBit observability via OpenTelemetry. Use for setting up metrics, logs, traces, and connecting OTEL backends like Seq, Jaeger, or Prometheus for FeatBit backend monitoring.

risk-based-testing

Focus testing effort on highest-risk areas using risk assessment and prioritization. Use when planning test strategy, allocating resources, or making coverage decisions.

text-to-speech

Expert Kokoro TTS implementation skill for real-time, secure, and offline voice synthesis in JARVIS-style assistants. Features streaming output, prosody control, and performance-optimized audio generation.

dependency-auditor

Automated security auditing for project dependencies. Scans package files (npm, pip, maven, etc.) for vulnerabilities, CVEs, and license issues, offering automated fix suggestions and integration for secure deployment workflows.