Live registry search

Results for “exploiting-vulnerabilities”

Exact name and slug matches are checked against the live registry before ranked alternatives.

Clear search

Decision filters

Choose by scenario, quality, and trust signals.

Use casePlatform fitQuality tierTrust profileSafety gateGitHub adoption

Showing 1-16 of 59 ranked candidates matching "exploiting-vulnerabilities"

Best blend of relevance, quality, freshness, and verified outcomes

Dagda

VERIFIEDPROMISING · 65TRUST · 78SAFE · REVIEWEDCODING

a tool to perform static analysis of known vulnerabilities, trojans, viruses, malware & other malicious threats in docker images/containers and to monitor the docker dae…

$ npx skills add eliasgranderubio/dagda

1.2K stars48 quality78 trustReviewed with permission notes3y since pushNeeds review

QualityUseful candidate, but compare it with alternatives before adopting.Check: Repository looks stale

TrustGood trust signals with a few areas worth checking before rollout.Review: Repository looks stale

Safety gateUsable candidate, but the agent should surface permission and audit notes before installation.

Scenario GitHub automation · I need my agent to triage GitHub issues, review pull requests, and summarize repository changes.

CLI + Codex · 4 targets

pythonstatic-analysis

by eliasgranderubioDetailsQuick view

Vulny Code Static Analysis

NEEDS REVIEW · 41TRUST · 69SAFE · EXPERIMENTALRESEARCH

Python script to detect vulnerabilities inside PHP source code using static analysis, based on regex

$ npx skills add swisskyrepo/Vulny-Code-Static-Analysis

423 stars37 quality69 trustExperimental1y since pushNeeds review

QualityInspect the repository carefully before adding it to an agent workflow.Check: Repository looks stale

TrustPotentially useful, but at least one trust signal needs human inspection.Review: License is unclear

Safety gateSparse or mixed signals. Useful for discovery, but not for autonomous installation.

Scenario Research agents · I need my agent to research a topic, compare sources, and produce a concise report.

CLI + Codex · 4 targets

phpsecurity

by swisskyrepoDetailsQuick view

Trivy

VERIFIEDEXCELLENT · 100TRUST · 89SAFE · REVIEWEDCODING

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

$ npx skills add aquasecurity/trivy

36.5K stars72 quality89 trustReviewed2mo since pushSafe to try

QualityHigh-confidence pick with strong adoption and healthy maintenance signals.

TrustStrong OpenAgentSkill Trust Score across adoption, recent maintenance, license clarity, documentation, dependency/…Review: Documentation summary is thin

Safety gateGood audit and safety signals with no high-risk permission hints in public metadata.

Scenario Coding agents · I need a coding agent that can understand a repository, edit code, and review pull requests.

CLI + Codex · 4 targets

gokubernetes

by aquasecurityDetailsQuick view

Nuclei

VERIFIEDEXCELLENT · 100TRUST · 90SAFE · REVIEWEDCODING

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle tren…

$ npx skills add projectdiscovery/nuclei

29.2K stars71 quality90 trustReviewed2mo since pushSafe to try

QualityHigh-confidence pick with strong adoption and healthy maintenance signals.

TrustStrong OpenAgentSkill Trust Score across adoption, recent maintenance, license clarity, documentation, dependency/…Review: Documentation summary is thin

Safety gateGood audit and safety signals with no high-risk permission hints in public metadata.

Scenario Coding agents · I need a coding agent that can understand a repository, edit code, and review pull requests.

CLI + Codex · 4 targets

gosecurity

by projectdiscoveryDetailsQuick view

Xssmap

NEEDS REVIEW · 42TRUST · 70SAFE · EXPERIMENTALCODING

Intelligent XSS detection tool that uses human techniques for looking for reflected cross-site scripting (XSS) vulnerabilities

$ npx skills add secdec/xssmap

151 stars34 quality70 trustExperimental4y since pushNeeds review

QualityInspect the repository carefully before adding it to an agent workflow.Check: Repository looks stale

TrustPotentially useful, but at least one trust signal needs human inspection.Review: Repository looks stale

Safety gateSparse or mixed signals. Useful for discovery, but not for autonomous installation.

Scenario Testing and QA · I need my agent to test a web app, reproduce bugs, and verify fixes.

CLI + Codex · 4 targets

pythonsecurity

by secdecDetailsQuick view

Checkov

VERIFIEDEXCELLENT · 99TRUST · 88SAFE · REVIEWEDCODING

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecre…

$ npx skills add bridgecrewio/checkov

8.8K stars66 quality88 trustReviewed2mo since pushSafe to try

QualityHigh-confidence pick with strong adoption and healthy maintenance signals.

TrustStrong OpenAgentSkill Trust Score across adoption, recent maintenance, license clarity, documentation, dependency/…Review: Documentation summary is thin

Safety gateGood audit and safety signals with no high-risk permission hints in public metadata.

Scenario Coding agents · I need a coding agent that can understand a repository, edit code, and review pull requests.

CLI + Codex · 4 targets

pythonstatic-analysis

by bridgecrewioDetailsQuick view

Psalm

VERIFIEDEXCELLENT · 97TRUST · 89SAFE · REVIEWEDCODING

A PHP static analysis tool for finding errors and security vulnerabilities in PHP applications

$ npx skills add vimeo/psalm

5.9K stars65 quality89 trustReviewed2mo since pushSafe to try

QualityHigh-confidence pick with strong adoption and healthy maintenance signals.

TrustStrong OpenAgentSkill Trust Score across adoption, recent maintenance, license clarity, documentation, dependency/…Review: Documentation summary is thin

Safety gateGood audit and safety signals with no high-risk permission hints in public metadata.

Scenario Coding agents · I need a coding agent that can understand a repository, edit code, and review pull requests.

CLI + Codex · 4 targets

phpstatic-analysis

by vimeoDetailsQuick view

Reverse Skill

VERIFIEDEXCELLENT · 100TRUST · 88SAFE · REVIEWEDCODING

Reverse Engineering / Authorized Penetration Testing / Security Research Skill Router Pack AI-powered routing + On-demand toolchain bootstrapping + Self-evolving knowled…

$ npx skills add zhaoxuya520/reverse-skill

25.6K stars73 quality88 trustReviewed with permission notesClaude Code + Cursor7d since pushSafe to try

QualityHigh-confidence pick with strong adoption and healthy maintenance signals.

TrustStrong OpenAgentSkill Trust Score across adoption, recent maintenance, license clarity, documentation, dependency/…

Safety gateUsable candidate, but the agent should surface permission and audit notes before installation.

Scenario Coding agents · I need a coding agent that can understand a repository, edit code, and review pull requests.

Claude Code + Cursor · 4 targets

powershellclaude-code

by zhaoxuya520DetailsQuick view

Shellcheck

VERIFIEDEXCELLENT · 100TRUST · 85SAFE · REVIEWEDCODING

ShellCheck, a static analysis tool for shell scripts

$ npx skills add koalaman/shellcheck

39.6K stars72 quality85 trustReviewed with permission notes2mo since pushSafe to try

QualityHigh-confidence pick with strong adoption and healthy maintenance signals.

TrustGood trust signals with a few areas worth checking before rollout.Review: Documentation summary is thin

Safety gateUsable candidate, but the agent should surface permission and audit notes before installation.

Scenario Coding agents · I need a coding agent that can understand a repository, edit code, and review pull requests.

CLI + Codex · 4 targets

haskellstatic-analysis

by koalamanDetailsQuick view

Wazuh

VERIFIEDEXCELLENT · 100TRUST · 86SAFE · REVIEWEDCODING

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

$ npx skills add wazuh/wazuh

16.3K stars73 quality86 trustReviewed30d since pushSafe to try

QualityHigh-confidence pick with strong adoption and healthy maintenance signals.

TrustStrong OpenAgentSkill Trust Score across adoption, recent maintenance, license clarity, documentation, dependency/…Review: License is unclear

Safety gateGood audit and safety signals with no high-risk permission hints in public metadata.

Scenario GitHub automation · I need my agent to triage GitHub issues, review pull requests, and summarize repository changes.

CLI + Codex · 4 targets

c++compliance

by wazuhDetailsQuick view

Horusec

VERIFIEDEXCELLENT · 91TRUST · 82SAFE · REVIEWEDCODING

Horusec is an open source tool that improves identification of vulnerabilities in your project with just one command.

$ npx skills add ZupIT/horusec

1.3K stars61 quality82 trustReviewed with permission notes3mo since pushSafe to try

QualityHigh-confidence pick with strong adoption and healthy maintenance signals.

TrustGood trust signals with a few areas worth checking before rollout.Review: Documentation summary is thin

Safety gateUsable candidate, but the agent should surface permission and audit notes before installation.

Scenario Coding agents · I need a coding agent that can understand a repository, edit code, and review pull requests.

CLI + Codex · 4 targets

gostatic-analysis

by ZupITDetailsQuick view

Appshark

VERIFIEDEXCELLENT · 88TRUST · 86SAFE · REVIEWEDCODING

Appshark is a static taint analysis platform to scan vulnerabilities in an Android app.

$ npx skills add bytedance/appshark

1.7K stars57 quality86 trustReviewed6mo since pushSafe to try

QualityHigh-confidence pick with strong adoption and healthy maintenance signals.

TrustStrong OpenAgentSkill Trust Score across adoption, recent maintenance, license clarity, documentation, dependency/…Review: Documentation summary is thin

Safety gateGood audit and safety signals with no high-risk permission hints in public metadata.

Scenario Coding agents · I need a coding agent that can understand a repository, edit code, and review pull requests.

CLI + Codex · 4 targets

kotlinstatic-analysis

by bytedanceDetailsQuick view

OpenSCA Cli

VERIFIEDEXCELLENT · 86TRUST · 82SAFE · REVIEWEDCODING

OpenSCA is an open source software supply chain security solution that supports the detection of open source dependencies, vulnerabilities and license compliance with a…

$ npx skills add XmirrorSecurity/OpenSCA-cli

1.1K stars56 quality82 trustReviewed with permission notes3mo since pushSafe to try

QualityHigh-confidence pick with strong adoption and healthy maintenance signals.

TrustGood trust signals with a few areas worth checking before rollout.Review: Documentation summary is thin

Safety gateUsable candidate, but the agent should surface permission and audit notes before installation.

Scenario Coding agents · I need a coding agent that can understand a repository, edit code, and review pull requests.

CLI + Codex · 4 targets

gostatic-analysis

by XmirrorSecurityDetailsQuick view

Pyt

VERIFIEDPROMISING · 68TRUST · 79SAFE · REVIEWEDCODING

A Static Analysis Tool for Detecting Security Vulnerabilities in Python Web Applications

$ npx skills add python-security/pyt

2.2K stars50 quality79 trustReviewed with permission notes6y since pushNeeds review

QualityUseful candidate, but compare it with alternatives before adopting.Check: Repository looks stale

TrustGood trust signals with a few areas worth checking before rollout.Review: Repository looks stale

Safety gateUsable candidate, but the agent should surface permission and audit notes before installation.

Scenario Coding agents · I need a coding agent that can understand a repository, edit code, and review pull requests.

CLI + Codex · 4 targets

pythonstatic-analysis

by python-securityDetailsQuick view

golang-dependency-management

STRONG · 82TRUST · 76SAFE · REVIEWEDCODING

Dependency management strategies for Golang projects — go.mod management, installing/upgrading packages, Minimal Version Selection, vulnerability scanning, outdated depe…

$ npx skills add samber/cc-skills-golang --skill golang-dependency-management

3.0K stars48 quality76 trustReviewedClaude Code2d since pushSafe to try

QualitySolid option that is likely worth shortlisting for production workflows.Check: The SKILL.md contains a truncated code block ending with 'go' that appears to b…

TrustGood trust signals with a few areas worth checking before rollout.Review: The SKILL.md contains a truncated code block ending with 'go' that appears to b…

Safety gateGood audit and safety signals with no high-risk permission hints in public metadata.

Scenario GitHub automation · I need my agent to triage GitHub issues, review pull requests, and summarize repository changes.

Claude Code + CLI · 4 targets

by samberDetailsQuick view

Garud

STRONG · 70TRUST · 76SAFE · EXPERIMENTALCODING

An automation tool that scans sub-domains, sub-domain takeover, then filters out XSS, SSTI, SSRF, and more injection point parameters and scans for some low hanging vuln…

$ npx skills add R0X4R/Garud

809 stars47 quality76 trustExperimental3mo since pushNeeds review

QualitySolid option that is likely worth shortlisting for production workflows.

TrustGood trust signals with a few areas worth checking before rollout.Review: Quality score needs review

Safety gateSparse or mixed signals. Useful for discovery, but not for autonomous installation.

Scenario Testing and QA · I need my agent to test a web app, reproduce bugs, and verify fixes.

CLI + Codex · 4 targets

shellsecurity

by R0X4RDetailsQuick view

Page 1

Showing the strongest 16 results to keep the registry fast for humans and agents. Refine by use case, platform, stars, or search query for a narrower shortlist.

Try the agent resolve API

Live registry search

Results for “exploiting-vulnerabilities”

Exact name and slug matches are checked against the live registry before ranked alternatives.

Clear search

Decision filters

Choose by scenario, quality, and trust signals.

Use casePlatform fitQuality tierTrust profileSafety gateGitHub adoption

Showing 1-16 of 59 ranked candidates matching "exploiting-vulnerabilities"

Best blend of relevance, quality, freshness, and verified outcomes

Dagda

VERIFIEDPROMISING · 65TRUST · 78SAFE · REVIEWEDCODING

a tool to perform static analysis of known vulnerabilities, trojans, viruses, malware & other malicious threats in docker images/containers and to monitor the docker dae…

$ npx skills add eliasgranderubio/dagda

1.2K stars48 quality78 trustReviewed with permission notes3y since pushNeeds review

QualityUseful candidate, but compare it with alternatives before adopting.Check: Repository looks stale

TrustGood trust signals with a few areas worth checking before rollout.Review: Repository looks stale

Safety gateUsable candidate, but the agent should surface permission and audit notes before installation.

Scenario GitHub automation · I need my agent to triage GitHub issues, review pull requests, and summarize repository changes.

CLI + Codex · 4 targets

pythonstatic-analysis

by eliasgranderubioDetailsQuick view

Vulny Code Static Analysis

NEEDS REVIEW · 41TRUST · 69SAFE · EXPERIMENTALRESEARCH

Python script to detect vulnerabilities inside PHP source code using static analysis, based on regex

$ npx skills add swisskyrepo/Vulny-Code-Static-Analysis

423 stars37 quality69 trustExperimental1y since pushNeeds review

QualityInspect the repository carefully before adding it to an agent workflow.Check: Repository looks stale

TrustPotentially useful, but at least one trust signal needs human inspection.Review: License is unclear

Safety gateSparse or mixed signals. Useful for discovery, but not for autonomous installation.

Scenario Research agents · I need my agent to research a topic, compare sources, and produce a concise report.

CLI + Codex · 4 targets

phpsecurity

by swisskyrepoDetailsQuick view

Trivy

VERIFIEDEXCELLENT · 100TRUST · 89SAFE · REVIEWEDCODING

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

$ npx skills add aquasecurity/trivy

36.5K stars72 quality89 trustReviewed2mo since pushSafe to try

QualityHigh-confidence pick with strong adoption and healthy maintenance signals.

TrustStrong OpenAgentSkill Trust Score across adoption, recent maintenance, license clarity, documentation, dependency/…Review: Documentation summary is thin

Safety gateGood audit and safety signals with no high-risk permission hints in public metadata.

Scenario Coding agents · I need a coding agent that can understand a repository, edit code, and review pull requests.

CLI + Codex · 4 targets

gokubernetes

by aquasecurityDetailsQuick view

Nuclei

VERIFIEDEXCELLENT · 100TRUST · 90SAFE · REVIEWEDCODING

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle tren…

$ npx skills add projectdiscovery/nuclei

29.2K stars71 quality90 trustReviewed2mo since pushSafe to try

QualityHigh-confidence pick with strong adoption and healthy maintenance signals.

TrustStrong OpenAgentSkill Trust Score across adoption, recent maintenance, license clarity, documentation, dependency/…Review: Documentation summary is thin

Safety gateGood audit and safety signals with no high-risk permission hints in public metadata.

Scenario Coding agents · I need a coding agent that can understand a repository, edit code, and review pull requests.

CLI + Codex · 4 targets

gosecurity

by projectdiscoveryDetailsQuick view

Xssmap

NEEDS REVIEW · 42TRUST · 70SAFE · EXPERIMENTALCODING

Intelligent XSS detection tool that uses human techniques for looking for reflected cross-site scripting (XSS) vulnerabilities

$ npx skills add secdec/xssmap

151 stars34 quality70 trustExperimental4y since pushNeeds review

QualityInspect the repository carefully before adding it to an agent workflow.Check: Repository looks stale

TrustPotentially useful, but at least one trust signal needs human inspection.Review: Repository looks stale

Safety gateSparse or mixed signals. Useful for discovery, but not for autonomous installation.

Scenario Testing and QA · I need my agent to test a web app, reproduce bugs, and verify fixes.

CLI + Codex · 4 targets

pythonsecurity

by secdecDetailsQuick view

Checkov

VERIFIEDEXCELLENT · 99TRUST · 88SAFE · REVIEWEDCODING

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecre…

$ npx skills add bridgecrewio/checkov

8.8K stars66 quality88 trustReviewed2mo since pushSafe to try

QualityHigh-confidence pick with strong adoption and healthy maintenance signals.

TrustStrong OpenAgentSkill Trust Score across adoption, recent maintenance, license clarity, documentation, dependency/…Review: Documentation summary is thin

Safety gateGood audit and safety signals with no high-risk permission hints in public metadata.

Scenario Coding agents · I need a coding agent that can understand a repository, edit code, and review pull requests.

CLI + Codex · 4 targets

pythonstatic-analysis

by bridgecrewioDetailsQuick view

Psalm

VERIFIEDEXCELLENT · 97TRUST · 89SAFE · REVIEWEDCODING

A PHP static analysis tool for finding errors and security vulnerabilities in PHP applications

$ npx skills add vimeo/psalm

5.9K stars65 quality89 trustReviewed2mo since pushSafe to try

QualityHigh-confidence pick with strong adoption and healthy maintenance signals.

TrustStrong OpenAgentSkill Trust Score across adoption, recent maintenance, license clarity, documentation, dependency/…Review: Documentation summary is thin

Safety gateGood audit and safety signals with no high-risk permission hints in public metadata.

Scenario Coding agents · I need a coding agent that can understand a repository, edit code, and review pull requests.

CLI + Codex · 4 targets

phpstatic-analysis

by vimeoDetailsQuick view

Reverse Skill

VERIFIEDEXCELLENT · 100TRUST · 88SAFE · REVIEWEDCODING

Reverse Engineering / Authorized Penetration Testing / Security Research Skill Router Pack AI-powered routing + On-demand toolchain bootstrapping + Self-evolving knowled…

$ npx skills add zhaoxuya520/reverse-skill

25.6K stars73 quality88 trustReviewed with permission notesClaude Code + Cursor7d since pushSafe to try

QualityHigh-confidence pick with strong adoption and healthy maintenance signals.

TrustStrong OpenAgentSkill Trust Score across adoption, recent maintenance, license clarity, documentation, dependency/…

Safety gateUsable candidate, but the agent should surface permission and audit notes before installation.

Scenario Coding agents · I need a coding agent that can understand a repository, edit code, and review pull requests.

Claude Code + Cursor · 4 targets

powershellclaude-code

by zhaoxuya520DetailsQuick view

Shellcheck

VERIFIEDEXCELLENT · 100TRUST · 85SAFE · REVIEWEDCODING

ShellCheck, a static analysis tool for shell scripts

$ npx skills add koalaman/shellcheck

39.6K stars72 quality85 trustReviewed with permission notes2mo since pushSafe to try

QualityHigh-confidence pick with strong adoption and healthy maintenance signals.

TrustGood trust signals with a few areas worth checking before rollout.Review: Documentation summary is thin

Safety gateUsable candidate, but the agent should surface permission and audit notes before installation.

Scenario Coding agents · I need a coding agent that can understand a repository, edit code, and review pull requests.

CLI + Codex · 4 targets

haskellstatic-analysis

by koalamanDetailsQuick view

Wazuh

VERIFIEDEXCELLENT · 100TRUST · 86SAFE · REVIEWEDCODING

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

$ npx skills add wazuh/wazuh

16.3K stars73 quality86 trustReviewed30d since pushSafe to try

QualityHigh-confidence pick with strong adoption and healthy maintenance signals.

TrustStrong OpenAgentSkill Trust Score across adoption, recent maintenance, license clarity, documentation, dependency/…Review: License is unclear

Safety gateGood audit and safety signals with no high-risk permission hints in public metadata.

Scenario GitHub automation · I need my agent to triage GitHub issues, review pull requests, and summarize repository changes.

CLI + Codex · 4 targets

c++compliance

by wazuhDetailsQuick view

Horusec

VERIFIEDEXCELLENT · 91TRUST · 82SAFE · REVIEWEDCODING

Horusec is an open source tool that improves identification of vulnerabilities in your project with just one command.

$ npx skills add ZupIT/horusec

1.3K stars61 quality82 trustReviewed with permission notes3mo since pushSafe to try

QualityHigh-confidence pick with strong adoption and healthy maintenance signals.

TrustGood trust signals with a few areas worth checking before rollout.Review: Documentation summary is thin

Safety gateUsable candidate, but the agent should surface permission and audit notes before installation.

Scenario Coding agents · I need a coding agent that can understand a repository, edit code, and review pull requests.

CLI + Codex · 4 targets

gostatic-analysis

by ZupITDetailsQuick view

Appshark

VERIFIEDEXCELLENT · 88TRUST · 86SAFE · REVIEWEDCODING

Appshark is a static taint analysis platform to scan vulnerabilities in an Android app.

$ npx skills add bytedance/appshark

1.7K stars57 quality86 trustReviewed6mo since pushSafe to try

QualityHigh-confidence pick with strong adoption and healthy maintenance signals.

TrustStrong OpenAgentSkill Trust Score across adoption, recent maintenance, license clarity, documentation, dependency/…Review: Documentation summary is thin

Safety gateGood audit and safety signals with no high-risk permission hints in public metadata.

Scenario Coding agents · I need a coding agent that can understand a repository, edit code, and review pull requests.

CLI + Codex · 4 targets

kotlinstatic-analysis

by bytedanceDetailsQuick view

OpenSCA Cli

VERIFIEDEXCELLENT · 86TRUST · 82SAFE · REVIEWEDCODING

OpenSCA is an open source software supply chain security solution that supports the detection of open source dependencies, vulnerabilities and license compliance with a…

$ npx skills add XmirrorSecurity/OpenSCA-cli

1.1K stars56 quality82 trustReviewed with permission notes3mo since pushSafe to try

QualityHigh-confidence pick with strong adoption and healthy maintenance signals.

TrustGood trust signals with a few areas worth checking before rollout.Review: Documentation summary is thin

Safety gateUsable candidate, but the agent should surface permission and audit notes before installation.

Scenario Coding agents · I need a coding agent that can understand a repository, edit code, and review pull requests.

CLI + Codex · 4 targets

gostatic-analysis

by XmirrorSecurityDetailsQuick view

Pyt

VERIFIEDPROMISING · 68TRUST · 79SAFE · REVIEWEDCODING

A Static Analysis Tool for Detecting Security Vulnerabilities in Python Web Applications

$ npx skills add python-security/pyt

2.2K stars50 quality79 trustReviewed with permission notes6y since pushNeeds review

QualityUseful candidate, but compare it with alternatives before adopting.Check: Repository looks stale

TrustGood trust signals with a few areas worth checking before rollout.Review: Repository looks stale

Safety gateUsable candidate, but the agent should surface permission and audit notes before installation.

Scenario Coding agents · I need a coding agent that can understand a repository, edit code, and review pull requests.

CLI + Codex · 4 targets

pythonstatic-analysis

by python-securityDetailsQuick view

golang-dependency-management

STRONG · 82TRUST · 76SAFE · REVIEWEDCODING

Dependency management strategies for Golang projects — go.mod management, installing/upgrading packages, Minimal Version Selection, vulnerability scanning, outdated depe…

$ npx skills add samber/cc-skills-golang --skill golang-dependency-management

3.0K stars48 quality76 trustReviewedClaude Code2d since pushSafe to try

QualitySolid option that is likely worth shortlisting for production workflows.Check: The SKILL.md contains a truncated code block ending with 'go' that appears to b…

TrustGood trust signals with a few areas worth checking before rollout.Review: The SKILL.md contains a truncated code block ending with 'go' that appears to b…

Safety gateGood audit and safety signals with no high-risk permission hints in public metadata.

Scenario GitHub automation · I need my agent to triage GitHub issues, review pull requests, and summarize repository changes.

Claude Code + CLI · 4 targets

by samberDetailsQuick view

Garud

STRONG · 70TRUST · 76SAFE · EXPERIMENTALCODING

An automation tool that scans sub-domains, sub-domain takeover, then filters out XSS, SSTI, SSRF, and more injection point parameters and scans for some low hanging vuln…

$ npx skills add R0X4R/Garud

809 stars47 quality76 trustExperimental3mo since pushNeeds review

QualitySolid option that is likely worth shortlisting for production workflows.

TrustGood trust signals with a few areas worth checking before rollout.Review: Quality score needs review

Safety gateSparse or mixed signals. Useful for discovery, but not for autonomous installation.

Scenario Testing and QA · I need my agent to test a web app, reproduce bugs, and verify fixes.

CLI + Codex · 4 targets

shellsecurity

by R0X4RDetailsQuick view

Page 1

Showing the strongest 16 results to keep the registry fast for humans and agents. Refine by use case, platform, stars, or search query for a narrower shortlist.

Try the agent resolve API

AI Agent Skills Directory

Results for “exploiting-vulnerabilities”

Choose by scenario, quality, and trust signals.

Dagda

Vulny Code Static Analysis

Trivy

Nuclei

Xssmap

Checkov

Psalm

Reverse Skill

Shellcheck

Wazuh

Horusec

Appshark

OpenSCA Cli

Pyt

golang-dependency-management

Garud

AI Agent Skills Directory

Results for “exploiting-vulnerabilities”

Choose by scenario, quality, and trust signals.

Dagda

Vulny Code Static Analysis

Trivy

Nuclei

Xssmap

Checkov

Psalm

Reverse Skill

Shellcheck

Wazuh

Horusec

Appshark

OpenSCA Cli

Pyt

golang-dependency-management

Garud

AI Agent Skills Directory

Results for “exploiting-vulnerabilities”

Choose by scenario, quality, and trust signals.

Dagda

Vulny Code Static Analysis

Trivy

Nuclei

Xssmap

Checkov

Psalm

Reverse Skill

Shellcheck

Wazuh

Horusec

Appshark

OpenSCA Cli

Pyt

golang-dependency-management

Garud