Agent Skills

Golang Dependency Management

skillshub

Guidelines and CLI recipes for safely adding, upgrading, auditing and managing Go dependencies, including govulncheck, go.mod practices, vendoring, and automate

Smart Contract Vulnerability Auditor (scv-scan)

scv-scan

Audit Solidity smart contract codebases for security vulnerabilities using a structured cheatsheet-driven sweep and selective deep validation, producing severit

Code Audit

code-audit

Perform professional code security audits across 9 languages with configurable quick/standard/deep modes and Docker-backed verification.

ClawSec Scanner

clawsec

Automated, multi-engine vulnerability scanner for agent platforms that runs dependency scans, SAST, CVE enrichment and agent-specific DAST harnesses to surface

Code Security Review

claude-code-security-skills

Three-phase code security audit: broad audit, false-positive filtering, and a concise report with prioritized fixes and confidence-scored findings.

NVD CVE Vulnerability Search

netclaw

Search the NVD for CVEs by ID or keyword, retrieve CVSS scores, CWE info, affected configurations and remediation references to support audits, incident respons

Trivy Offline Vulnerability Scan

skilllearnbench

Run Trivy in offline mode to scan dependency files (package-lock.json, etc.) for HIGH/CRITICAL vulnerabilities and produce machine-readable JSON results.

CVE Fix Workflow

shipyard

Automated workflow to detect and fix CVEs in Go dependencies across Submariner repositories; creates one commit per package and a single PR per branch.

Acunetix (Membrane) Integration

application-skills

Integrate and automate Acunetix vulnerability scans, targets, reports and scheduled scans via the Membrane CLI.

Semgrep Code Security Scanner

skillsemgrep

Run Semgrep-based security scans to detect vulnerabilities, secrets, and OWASP Top 10 issues, and produce a categorized report with remediation suggestions.

Guardian CLI

guardian-cli

An AI-driven, production-ready CLI that automates authorized penetration testing workflows, orchestrating planner, tool, analyst and reporter agents to produce

Command Injection → RCE Proof

vigolium

Prove OS command injection by generating OAST callbacks and a single safe follow-on data retrieval (file read or env dump) — non-destructive RCE proofing for se