Agent Skills Hub

variant-analysis

Find similar vulnerabilities and bugs across codebases using pattern-based analysis. Use when hunting bug variants, building CodeQL/Semgrep queries, or performing systematic code audits.

prompt-injection-test

A testing utility designed to simulate prompt injection attacks and validate security scanners for AI agent skills.

CCOS MCP Tools

Reference for all MCP tools exposed by the CCOS server, enabling capability discovery, session management, and governed RTFS execution for autonomous agent workflows.

indirect-injection-detection

Detects indirect prompt injection and goal hijacking in AI agents by evaluating how they process external content like RAG, documents, and web data.

migrate-oai-app

Migrate existing OpenAI Apps SDK applications to the MCP Apps SDK, including step-by-step guidance, API mapping tables, and CSP investigation workflows.

codeql

Perform deep security analysis on codebases using CodeQL for interprocedural data flow, taint tracking, and automated vulnerability detection across multiple languages.

repomix

Package entire code repositories into single, AI-optimized files. Ideal for providing codebase context to LLMs like Claude, ChatGPT, and Gemini for analysis, security audits, and bug investigations.

skill-code-review

Multi-LLM code review pipeline using consensus-based analysis to detect security, architectural, and quality issues.

semgrep

Run Semgrep static analysis scans on codebases using parallel subagents, multi-language detection, and Pro-enabled cross-file taint tracking.

find-bugs

Perform automated security audits, bug detection, and code quality assessments on local branch diffs using a structured, checklist-driven verification process.

sast-configuration

Automate SAST configuration and security scanning. Supports Semgrep, SonarQube, and CodeQL for DevSecOps, quality gate management, and vulnerability detection.

skill-repo

Standardize, validate, and manage Netresearch AI agent skill repositories with automated structure enforcement, distribution workflows, and licensing compliance tools.