Agent Skills Hub

audit-skills

Audit AI skills for security vulnerabilities including prompt injection, hidden instructions, tool misuse, and data exfiltration risks.

Security Code Review

Analyze source code for security vulnerabilities based on OWASP Top 10 guidelines and suggest remediation strategies.

indirect-injection-detection

Detects indirect prompt injection and goal hijacking in AI agents by evaluating how they process external content like RAG, documents, and web data.

claude-rag-skills

A suite of professional tools for auditing, evaluating, chunking, and scaffolding production-ready RAG pipelines within Claude Code.

owasp-mobile-security-checker

Automated security auditing for Flutter applications based on OWASP Mobile Top 10 (2024). Perform vulnerability scans for hardcoded secrets, insecure storage, dependency risks, and network configuration issues.

sbom-syft

Generate Software Bill of Materials (SBOM) for container images and filesystems using Syft. Supports 28+ ecosystems, multiple formats like CycloneDX and SPDX, and integration into CI/CD for supply chain security.

code-security

Comprehensive secure coding guidelines for 15+ languages, covering OWASP Top 10, infrastructure security, and best practices to identify vulnerabilities in code, configurations, and cloud setups.

sarif-parsing

Parses and processes SARIF files from static analysis tools. Enables aggregation, deduplication, filtering, and CI/CD integration of scan results.

ctf-solver

An expert-level CTF solver agent that automates reconnaissance, vulnerability analysis, and exploit generation for web, pwn, crypto, reverse, and forensic challenges.

ghost-scan-secrets

AI-powered secrets and credentials scanner. Detects hardcoded API keys, passwords, and sensitive data in your codebase with contextual analysis to reduce false positives.

threat-modeling-ics

Performs end-to-end OT/ICS threat modeling using Microsoft TMT exports and model files, mapping threats to MITRE ATT&CK for ICS, CWE, and CVSS v4.0 with automated risk-based prioritization.

codeql

Perform deep security analysis on codebases using CodeQL for interprocedural data flow, taint tracking, and automated vulnerability detection across multiple languages.