AI Agent Skills

ASOC, ASPM, DevSecOps, Vulnerability Management Using ArcherySec.

Performs security-focused differential review of code changes. Adapts analysis depth to codebase size, uses git blame for context, calculates blast radius by counting ca…

Scans Solana programs for 6 critical vulnerabilities including arbitrary CPI, improper PDA validation, missing signer/ownership checks, and sysvar spoofing. Use when aud…

Understand a codebase before looking for bugs in it - what each function assumes, what it guarantees, and what it depends on elsewhere. Use when starting an audit, threa…

Xalgorix - Autonomous AI Pentesting Agents

SonarQube plugin for JetBrains IDEs providing code quality and security feedback directly in the IDE

The Janssen Project is a home for open source IAM components, featuring Auth Server (OAuth/OpenID), Agama low-code identity orchestration, and the Cedarling policy decis…

利用大量高威胁poc/exp快速获取目标权限，用于渗透和红队快速打点

Striker is an offensive information and vulnerability scanner.

Cross-platform incident response and live forensics toolkit with built-in detection, structured analysis, and report generation — designed for fast, actionable security…

SSL and TLS protocol test suite and fuzzer

SonarQube extension for Visual Studio Code providing code quality and security feedback directly in the editor

Searches and explores Burp Suite project files (.burp) from the command line. Use when searching response headers or bodies with regex patterns, extracting security audi…

Performs comprehensive C/C++ security review for memory corruption, integer overflows, race conditions, and platform-specific vulnerabilities. Use when auditing native C…

Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.

Scans Algorand smart contracts for 11 common vulnerabilities including rekeying attacks, unchecked transaction fees, missing field validations, and access control issues…