AI Agent Skills

This repository contains a list of the most popular and widely used tools in web3 security. If you find any tools missing, you can create a pull request and be a contrib…

Backend engineering judgment, distilled from a stronger model - invoke when CHOOSING a tech stack, language, database, queue, or architecture; designing a service, API,…

Comprehensive project audit — security, dependencies, code quality, architecture, performance, infra, docs, and mesh analytics. Use when needing a full 8-dimension healt…

Security-first auditing of AI-generated code — Level 1 quick checks during /toh-dev and /toh-test (hardcoded secrets, dangerous code execution, obvious injection vectors…

SQLi-Hunter is a simple HTTP / HTTPS proxy server and a SQLMAP API wrapper that makes digging SQLi easy.

Data analysis and OSINT framework for Twitter

EOS bp nodes security checklist（EOS超级节点安全执行指南）

A PHP dependency vulnerabilities scanner based on the Security Advisories Database.

:mag_right: Python framework to automatically discover and enumerate hosts from different back-end systems (Shodan, Censys)

Security guidelines for WordPress plugin development: sanitization, validation, escaping (in PHP and in admin JavaScript), nonces, capabilities over objects, multisite p…

Using this script, you can enumerate Usernames and passwords of Nosql(mongodb) injecion vulnerable web applications.

Large Language Model-Powered Smart Contract Vulnerability Detection: New Perspectives (TPS23)

Generate structured CSV security audit reports from vulnerability data with proper filtering, formatting, and field mapping.

API security best practices and common vulnerability prevention. Enforces security checks for authentication, input validation, SQL injection, XSS, and OWASP Top 10 vuln…

A Metabase AI-governance coach, covering the *controls and rollout* side of AI: who may use Metabot, what it can see, what it costs, where the model runs, and the audit…

Map the buying committee at one target account - economic buyer, champion candidates, technical evaluators, users and blockers (legal, security, procurement, finance) -…