AI Agent Skills

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

Turn Claude Code into your offensive security research assistant. Specialized AI subagents for authorized penetration testing plan engagements, analyze recon, research e…

InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integr…

open-appsec is a machine learning security engine that preemptively and automatically prevents threats against Web Application & APIs. This repo include the main code an…

Security risk analysis for Kubernetes resources

Pre-install security scanner and guarded installer for Agent Skills. Quarantine, scan, enforce policy, and verify skills before they reach Codex, Claude Code, Cursor, Ge…

Kubernetes object analysis with recommendations for improved reliability and security. kube-score actively prevents downtime and bugs in your Kubernetes YAML and Charts.…

The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)

Automated semantic versioning and release workflow for Claude Code plugins. Handles version increments across package.json, marketplace.json, plugin.json manifests, buil…

AI Agent Skills for Security Auditing to generate triaged, industry grade report findings, code locations, pocs, attacker story flow graphs and more

A command-line tool that injects credentials to curl requests to known public APIs.

Appshark is a static taint analysis platform to scan vulnerabilities in an Android app.

Source code for Hacker101.com - a free online web and mobile security class.

Advanced vulnerability scanning with Nmap NSE

Comprehensive AI prompt engineering safety review and improvement prompt. Analyzes prompts for safety, bias, security vulnerabilities, and effectiveness while providing…

Autonomous AI pentesting engine performing continuous offensive security across web, cloud, AD and Kubernetes. Uses agentic reasoning, real exploit execution and attack…