dependency-auditor
Automated security auditing for project dependencies. Scans package files (npm, pip, maven, etc.) for vulnerabilities, CVEs, and license issues, offering automated fix suggestions and integration for secure deployment workflows.
Discover reusable agent skills, browse implementation details, and find the right skill for your workflow.
110 skills found
Automated security auditing for project dependencies. Scans package files (npm, pip, maven, etc.) for vulnerabilities, CVEs, and license issues, offering automated fix suggestions and integration for secure deployment workflows.
Expert code review agent that performs systematic audits of git changes for SOLID violations, security vulnerabilities, performance regressions, and architectural smells.
Security-first auditing framework for AI-generated code. Provides multi-level protection including hardcoded secret detection, dangerous pattern identification, and comprehensive vulnerability audits for modern web applications.
Build, optimize, and maintain production-ready backend systems using Node.js, Python, Go, and Rust. Includes API design, database management, security, and DevOps best practices.
Verifies blockchain smart contract code against technical specifications, whitepapers, and design documents to ensure exact implementation compliance.
Automated detection of IDOR vulnerabilities using a three-phase subagent workflow to verify authorization and ownership checks on sensitive endpoints.
Find, connect, and use over 100,000 MCP tools and skills via the Smithery CLI to integrate external services, manage agent workspaces, and automate workflows.
A CTF solver agent that performs triage on challenges, identifies the vulnerability category, and routes tasks to specialized skills for web, pwn, crypto, forensic, and reverse engineering analysis.
Perform deep security analysis on codebases using CodeQL for interprocedural data flow, taint tracking, and automated vulnerability detection across multiple languages.
Manage GitHub Security Advisory (GHSA) workflows: inspect, patch, validate, and publish security patches for the OpenClaw repository while ensuring fork consistency.
A professional bug bounty reporting agent that enforces impact-first writing, CVSS 3.1 scoring, and pre-submit validation for platforms like HackerOne, Bugcrowd, and Intigriti.
An expert-level CTF solver agent that automates reconnaissance, vulnerability analysis, and exploit generation for web, pwn, crypto, reverse, and forensic challenges.