#owasp

实战 SRC / 众测 / Bug bounty 漏洞挖掘 Claude Code skill — 19 个攻击类 playbook、305 个结构化 payload、263 个 WAF/EDR 绕过、2887 份 HackerOne 真实案例、88,636 WooYun 案例统计

Border Guard — AI-native territory sovereignty & self-evolving security OS. 6-module D-S fusion engine, trajectory detection, anchor detection, fission engine, territory adjudicator. Full design + Python implementation.

Offline, no-AI "safe to ship?" gate for vibe-coded apps — finds the security mistakes AI coding agents make (secrets, unprotected routes, eval-RCE, SQLi, CORS, JWT, leaked keys). CLI + MCP, agent-runnable.

Software Quality Assurance Agent para Claude Code — ISO/IEC 25010, OWASP, ISO 27001

AI IR Overlay™ — practical incident response framework for AI agents in production. Built on NIST SP 800-61 r3, mapped to NIST AI RMF, NIST CSF 2.0, OWASP Top 10 for Agentic Applications 2026, ISO/IEC 42001, EU AI Act.

Security testing skill for OS command injection and argument injection. Claude Code skill format.

Universal security audit skill for Claude Code — OWASP Top 10 (2021) + Russian security standards (ГОСТ Р 56939, ФСТЭК, ФЗ-152) + STRIDE threat modeling. Multi-stack: Node/Python/Go/Rust.

Autonomous multi-agent AI penetration testing framework — 20 specialist agents, ECC architecture, MITRE ATT&CK + OWASP mapped, HMAC-chained audit trail, Docker sandbox, and multi-LLM backend (Ollama/OpenAI/Anthropic).

Defense-in-depth security rules AI coding agents can follow, and verify. 16 rule chapters, checklists, drop-in CLAUDE.md, self-verification test patterns.

Free AI-agent risk self-check, security checklist, and USD 59 launch-readiness mini-audit offer.

Audit your vibe-coded app for security holes (secrets, RLS, auth, injection, config), score it, and — with your approval — fix them in your code. A Claude Code / Codex skill. By Kapus.

Local-first security release checker for authorized code, AI apps, freelancers, and small teams

Audit-ready pentest reports (DE/EN) with built-in compliance checks for BSI, OWASP, PCI-DSS, DiGA & OSCP. A Claude skill + standalone Python pipeline.

Claude Code skill for auditing Next.js apps for secrets exposed in the client JS bundle

Route coding tasks through an automated 8-agent pipeline for optimized, secure, and production-ready code output in Claude Code.

Security auditor and scanner for AI-built (vibe-coded) apps — a Claude Code skill + standalone cross-stack scanner.

Authorized attack-surface discovery: Playwright crawler + safe vulnerability detection (headers, TLS, CORS, exposed files, GraphQL) + OWASP/CWE risk mapping, interactive Next.js dashboard, PDF/MD/JSON reports