AI Agent Skills

InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integr…

An easy-to-learn/use static analysis framework for Java and Android

Complete Solution for VAPT/AppSec and Pentesting Guide: Web | Mobile | API | Thick Client | Source Code Review | DevSecOps | Wireless | Network Pentesting | SAST | DAST…

Static Value-Flow Analysis Framework for Source Code

open-appsec is a machine learning security engine that preemptively and automatically prevents threats against Web Application & APIs. This repo include the main code an…

Security risk analysis for Kubernetes resources

Radare2 and Frida better together.

📦 Make security testing of K8s, Docker, and Containerd easier.

:coffee: SonarSource Static Analyzer for Java Code Quality and Security

Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runn…

Semgrep Community Edition rules, maintained by Semgrep and the community. Free to use under the Semgrep Rules License.

A powerful C# Roslyn analyzer that uses static analysis to detect bugs, surface security issues, and enforce best practices—helping developers and AI write more reliable…

NeuroSploit is an advanced, AI-powered penetration testing framework designed to automate and augment various aspects of offensive security operations. Leveraging the ca…

Solhint is an open-source project to provide a linting utility for Solidity code.

pinact is a CLI to edit GitHub Workflow and Composite action files and pin versions of Actions and Reusable Workflows. pinact can also update their versions and verify v…

Protect against malicious open source packages 🤖