Search
koadt
Create a new OSS – OopsSec Store instance for web security CTF training
setrathex
Deterministic security baseline for AI-generated and human-written Next.js code. No AI required at runtime.
V12X
In-depth security-audit skills for Claude Code — deterministic tools first, every finding refuted, a verdict not a score. The v12x Method.
...moreshaxbozaka
Claude Code skill for auditing web apps for security vulnerabilities. Detects inside-codebase vs outside-black-box, runs the right checklist, sweeps server/infra, deep-dives rate-limit posture. 14 PoC probe templates + deep ripgrep recipes.
...moreGitHub Actions
ESLint plugin for NestJS security — detects missing auth guards, missing validation pipes, unthrottled routes, and exposed private fields.
...moreGitHub Actions
ESLint plugin for secure coding — detects LDAP, XPath, XXE, GraphQL and template injection, unsafe deserialization, ReDoS, missing authentication, and PII in logs.
...moreGitHub Actions
ESLint plugin for JWT security — detects algorithm confusion (CVE-2022-23540), alg:none, weak or hardcoded secrets, and decode-without-verify.
...moreGitHub Actions
ESLint plugin for Express.js security — detects permissive CORS, missing CSRF protection, missing helmet headers, insecure cookies, and GraphQL introspection in production.
...moreGitHub Actions
ESLint plugin for Google Gemini SDK security — catches safety thresholds set to BLOCK_NONE, hardcoded API keys, and system instructions assembled from untrusted input.
...moreGitHub Actions
ESLint plugin for Node.js security — detects command injection, path traversal, SSRF, zip slip, and weak crypto (MD5/SHA-1, ECB, static IV) in fs, child_process, vm, and crypto.
...moreyedinrumba-eng
Advanced configuration of toolings, skills, and markdowns for automated code review and security auditing in vibe-coded applications.
...moreGitHub Actions
Capacitor plugin for improving app security and threat monitoring on Android and iOS mobile devices
GitHub Actions
ESLint plugin for Vercel AI SDK security — detects prompt injection, system-prompt leaks, hardcoded API keys, and unvalidated model output in generateText and streamText.
...moreUnboundCompute
Security-testing methodology as portable, tool-agnostic agent skills for Claude Code and any agent runtime: white-box bug hunting, AI-agent and LLM red-teaming, supply-chain risk, and appsec depth.
...moreAjoy L
Static security scanner for ML model files — detects pickle bombs, Keras Lambda RCE and GGUF template injection, and generates CycloneDX / SPDX AI-BOMs (AIBOM) as EU AI Act, CRA and FDA §524B evidence.
...moreGitHub Actions
Benchmarkable security scanner harness for agent skills.
epten08
OWASP API security scanner with AI-assisted behavioral testing, static analysis, container scanning, and GraphQL probing.
...moreneabyte
A secure JWT library with multiple encryption algorithms, zero dependencies, and built-in security for Node.js applications.
...moreamit60600
Production-ready npm package for ultra-secure data transfer between frontend and backend. Uses Hybrid Encryption (RSA + AES) with fragment obfuscation.
...more