Shai Hulud 2.0 Detector
gensecaihq
Detect npm packages compromised in the Shai-Hulud 2.0 supply chain attack (Nov 2025). Scans for 790+ malicious packages, suspicious scripts, TruffleHog activity, SHA1HUL…
OPENAGENTSKILL / DIRECTORY
Find a skill for your next task. Explore tools for Codex, Claude Code, Cursor and more.
65–80 / 109
Candidates in this shortlist, not the full registry. GitHub stars belong to repositories, not individual skills.
Results: 109
gensecaihq
Detect npm packages compromised in the Shai-Hulud 2.0 supply chain attack (Nov 2025). Scans for 790+ malicious packages, suspicious scripts, TruffleHog activity, SHA1HUL…
Patrowl
PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform
nyudenkov
🐍 Scan your Python dependencies for known security vulnerabilities with Rust-powered scanner
awslabs
ASH is an extensible, open source SAST, SCA, and IaC security scanner orchestration engine.
daedalus
ImpactGuard — Lightweight multi-language API impact analyzer
R0X4R
An automation tool that scans sub-domains, sub-domain takeover, then filters out XSS, SSTI, SSRF, and more injection point parameters and scans for some low hanging vuln…
Ostorlab
OXO is a security scanning orchestrator for the modern age.
loxy0devlp
RedTiger-Tools is a multifunction automation tool dedicated to pentesting and OSINT. The project is open source and designed to be fully configurable according to user n…
bahaabdelwahed
A Penetration Testing Framework, Information gathering tool & Website Vulnerability Scanner
hahwul
🔑 Authz0 is an automated authorization test tool. Unauthorized access can be identified based on URLs and Roles & Credentials.
Vyntral
AI-powered subdomain enumeration tool with local LLM analysis via Ollama - 100% private, zero API costs
SHAdd0WTAka
🛡⚔️AI-Powered Penetration Testing Framework with automated vulnerability scanning, multi-agent system, and compliance reporting🛡⚔️
dootss
An auto-updating list of shodan dorks with info on the amount of results they return!
403errors
An open-source, AI-powered application using Agentic CAG to chat with any public GitHub repository or developer profile, offering deep code analysis, visual architecture…
godaddy
Searches through git repositories for high entropy strings and secrets, digging deep into commit history