mega-audit
Run a smart contract source code through several agent skill-based auditing pipelines
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-23 00:13
Security & auditing
7,326 results
dns-intelligence
Extracts technology signals from DNS records (MX, TXT, NS, CNAME, SRV)
html-content-analysis
Parses HTML for meta tags, generator comments, and script URL patterns
http-fingerprinting
Analyzes HTTP responses for technology signatures in headers, cookies, and error pages
tls-certificate-analysis
Analyzes TLS certificates for issuer, SAN, and JARM fingerprints
supabase-clerk-sync
Clerk and Supabase integration patterns for user sync, JWT authentication, and RLS policies. Use when integrating Clerk authentication with Supabase, syncing…
api-security-schemathesis
Run Schemathesis for property-based API security testing. Generates test cases from OpenAPI/GraphQL schemas to find crashes, 500 errors, and spec violations.
api-security-spectral
Run Spectral to lint OpenAPI and AsyncAPI specs for security issues. Validates API design for authentication, authorization, rate limiting, and input…
secret-scan-gitleaks
Run Gitleaks to detect hardcoded secrets in git repositories. Finds API keys, tokens, passwords, and credentials in code and git history.
ad-pentest
Active Directory pentest with BloodHound attack path analysis, Kerberos/ADCS attacks, credential harvesting, and lateral movement
cors-check
Detect CORS misconfiguration by testing various Origin headers and analyzing Access-Control responses
dns-recon
DNS record reconnaissance and zone transfer attempts using dig, host, and nslookup
insecure-defaults
Detect insecure default configurations including weak crypto, fail-open patterns, default credentials, and unsafe framework settings
mitre-attack-lookup
MITRE ATT&CK technique, group, software, and mitigation lookup using mitrize
mobile-pentest
Mobile app security testing with Frida instrumentation, OWASP MASVS compliance, and SSL pinning/root detection bypass for Android/iOS
pentest-report
Pentest report authoring with executive summary, CVSS-scored findings, attack narrative, and remediation roadmap (writing methodology)
port-scan
Port scanning and service detection with nmap for authorized security assessments
web-vuln-business-logic
Business logic vulnerability testing covering workflow bypass, price manipulation, coupon abuse, rate limit bypass, and TOCTOU race conditions
whois-lookup
Domain and IP WHOIS lookup to gather registration and ownership information
oracle-idcs-better-auth-setup
Use when setting up Better Auth with Oracle IDCS/OCI IAM, configuring OIDC callback URLs, trusted origins, provider bootstrap order, or sharing an auth model…
oracle-idcs-org-provisioning
Use when mapping IDCS claims to org membership after OAuth login succeeds. Covers mapProfileToUser, session.create.before, session.create.after hooks, MERGE…
cors-configuration
Configure CORS correctly to prevent credential leaks and unauthorized cross-origin access. Covers Express, Next.js, Cloudflare Workers, Laravel, and FastAPI.…
data-encryption
Encrypt personal data at rest and in transit to comply with PDPA 2024. Covers field-level encryption for PII, AES-256-GCM patterns, key management, and…
dependency-lockfile-audit
Detect typosquatting, malicious packages, and lockfile tampering in npm, pip, and composer dependencies. Covers lockfile integrity verification,…