#security

实战 SRC / 众测 / Bug bounty 漏洞挖掘 Claude Code skill — 19 个攻击类 playbook、305 个结构化 payload、263 个 WAF/EDR 绕过、2887 份 HackerOne 真实案例、88,636 WooYun 案例统计

Reachability triage for vulnerability scans. Feeds scanner findings to an LLM agent that reads your source and decides which CVEs are actually reachable.

Open-source server that refuses vulnerable package installs. The backend the refuse CLI shim calls.

chennai (chen N ai) is a hybrid AI agent and a terminal user interface for static analysis, data-flow tracing, and AI-assisted code and security analysis.

Security scanner for Claude Code skills, plugins, and MCP servers. A verdict before you install.

Zero-trust repo intake for AI coding agents — scan the instruction environment before Claude Code, Cursor, Codex, or Gemini touches a repo. Ships its own false-negative ledger.

Development-time local workspace security alignment for AI coding agents

Find where agent-controlled intent reaches consequential actions without an authority check. Python + TypeScript + Go. Zero-dependency SAST for AI agents.

Master AI Skills Collection 2026 - Scalable Agent Scripts & Automation Hub

Ten composable AI skills covering the full arc from idea to launch. Discovery hub for prd-ready, architecture-ready, roadmap-ready, stack-ready, repo-ready, production-ready, deploy-ready, observe-ready, launch-ready, harden-ready. Plug into Claude Code, Codex, Cursor, Windsurf.

🔒 Кросс-платформенный локальный мост для AI coding agents: Windows, macOS и Linux. Работа с Git-репозиторием через API, автопилот, безопасный commit без git push.

Credential proxy for the AI era — agents use credentials without seeing them

Permission-gated Codex skill for supervising persistent Claude Code workers.

Offline, no-AI "safe to ship?" gate for vibe-coded apps — finds the security mistakes AI coding agents make (secrets, unprotected routes, eval-RCE, SQLi, CORS, JWT, leaked keys). CLI + MCP, agent-runnable.

Self-hosted HomeLab operations layer for monitoring, backup, recovery, automation, and future local AI agents.

Zero-execution preflight scanner for untrusted AI-agent and MCP artifacts

AI Guardian Firewall — a local, user-space, agent-agnostic firewall that mediates an autonomous AI agent's actions (files, shell, network, services) with a deterministic policy boundary, a tamper-evident audit log, and a human-in-the-loop approval cockpit. No kernel modules. Apache-2.0.

seatbelt for my pi.dev agent: blocks secret-file access, redacts creds from output, blocks egress + git leaks.

PACT is a runtime security layer for AI agents.

Drop-in middleware that detects AI bot traffic. Community-maintained signature database + RFC 9421 Web Bot Auth verification. Node + Python + Go. Apache-2.0.

Defensive security audit skills for Claude — tech-stack-keyed and audit-domain-keyed packs for SaaS apps.

Self-hosted pentest copilot. Substrate-first (technique catalog + playbooks + RAG + deterministic tools) with structural verifier rules and LLM-as-judge quality eval. Apache 2.0.

Secure ERC20 Token Claim Contract ⚡️ | Signature-Based Distribution 2026 🔐

Pre-deploy checklists for AI coding agents. Catch security holes, broken auth, and payment bugs before they hit production.

2026 Ultimate Podman AI Coding Agent – Zero-Trace, MIT Licensed GitHub Repo

Universal security audit skill for Claude Code — OWASP Top 10 (2021) + Russian security standards (ГОСТ Р 56939, ФСТЭК, ФЗ-152) + STRIDE threat modeling. Multi-stack: Node/Python/Go/Rust.

AI-agent reliability and governance layer: auto-firing compliance checks, persistent memory, security scanning, and verification loops that wrap any AI agent.

AI governance and edge infrastructure platform with HTTP/3, OpenTelemetry tracing, adaptive load shedding, circuit breakers and Kubernetes deployment support.

Local-first AgentOps control plane prototype for safe AI-to-agent command validation, policy evaluation, and redacted audit logging.

13-module Claude Code skill for shipping a full web product: backend, security, SEO, ads, AI integration, analytics, email, i18n & more — stdlib-only, self-contained

🕶️ Secrets your AI agent can USE but never SEE — Claude Code skill + zero-dependency macOS Keychain CLI. Env injection, pointer manifest, prompt-injection tripwire.

Talunor is a local-first terminal AI agent written in Go, with persistent, auditable SQLite memory, guarded tool use, and a complete step-by-step course explaining how it is built.

Terminal-first VS Code control plane for human-governed AI-assisted software delivery.

Evidence-first verification for AI coding agents — prove what changed, what was tested, and what passed.

Security testing skill for OS command injection and argument injection. Claude Code skill format.

Source code security scanner for human-written and AI-generated projects. Rust CLI with explicit coverage, JSON/SARIF, and coding-agent integrations. Built by Tom Koentjes. Pre-alpha.

Production-grade low-level engineering skills for AI coding agents. 124 verified, source-backed skills (C, C++, Rust, asm, kernel, embedded, Zig, GPU, RE, build systems) with provenance, examples, and evals.

Open-source FinOps CLI for AWS. Scans your account, finds cost and security waste, and auto-generates the Terraform fixes. Rule-based core, optional AI assist for complex patches.

Evaluate AI-PR rejection risk for a GitHub repository before you fork it

A living spec defending against the 26 categories of mistakes LLMs systematically make in Rust. Claude Code skill + 3 slash commands (rust-audit, rust-fix, rust-plan) built on a single source of truth.