allsmog

allsmog/vuln-scout

Command

Search the codebase for dangerous functions that could lead to vulnerabilities. Optionally auto-discover logging patterns and sensitive data sources.

allsmog/vuln-scout

Command

Combines application understanding with systematic threat identification. First understands the application, then identifies what could go wrong.

allsmog/vuln-scout

Command

Trace attacker-controlled input to a sink and document whether it is a verified vulnerability, a hotspot that still needs proof, or a false positive.

allsmog/vuln-scout

Command

Verify whether a reported item is a real vulnerability, a false positive, or still unresolved.

allsmog/vuln-scout

Skill Claude CodeCodex

This skill should be used when the user asks about "AI security", "ML pipeline attacks", "prompt injection", "model deserialization", "unsafe model loading", "Jupyter injection", "LLM security", or needs to identify AI/ML-specific vulnerabilities in codebases that use machine learning frameworks.

allsmog/vuln-scout

Skill Claude CodeCodex

This skill should be used when the user asks about "business logic", "workflow vulnerability", "trust boundary", "state machine", "authorization bypass", "multi-step process", "workflow bypass", "application logic flaw", or needs to identify business logic vulnerabilities during whitebox security review.

allsmog/vuln-scout

Skill Claude CodeCodex

This skill should be used when the user asks about "cache poisoning", "web cache deception", "CDN cache", "proxy cache", "nginx cache", "varnish", "cache key manipulation", "response caching", or needs to find cache-related vulnerabilities during whitebox security review.

allsmog/vuln-scout

Skill Claude CodeCodex

This skill should be used when the user asks about "cloud security", "AWS security", "GCP security", "Azure security", "Kubernetes security", "IMDS", "instance metadata", "S3 bucket policy", "IAM", "serverless security", "Lambda security", "container security", "cloud misconfiguration", "SSRF to cloud metadata", or…

allsmog/vuln-scout

Skill Claude CodeCodex

This skill should be used when the user asks about "compliance mapping", "PCI-DSS", "HIPAA", "SOC 2", "NIST CSF", "regulatory requirements", "compliance report", or needs to map security findings to compliance framework requirements.

allsmog/vuln-scout

Skill Claude CodeCodex

This skill should be used when the user asks about "Code Property Graph", "CPG analysis", "Joern queries", "CPGQL", "data flow verification", "taint tracking with Joern", "semantic code analysis", or needs to understand how CPG-based verification works for vulnerability detection.

allsmog/vuln-scout

Skill Claude CodeCodex

This skill should be used when analyzing multi-service architectures, frontend-backend interactions, microservices, or when looking for vulnerabilities that span multiple components. Use when the user asks about "cross-component", "frontend to backend", "service interaction", "internal service access", or…

allsmog/vuln-scout

Skill Claude CodeCodex

This skill should be used when the user asks about "cryptographic failures", "weak encryption", "hardcoded secrets", "insecure random", "MD5", "SHA1", "weak hashing", or needs to find crypto-related vulnerabilities during whitebox security review.

allsmog/vuln-scout

Skill Claude CodeCodex

This skill should be used when the user asks about "dangerous functions", "security sinks", "what functions are dangerous in PHP/Java/Python", "find vulnerable functions", "code execution functions", "command injection sinks", "SQL injection functions", or needs to identify security-sensitive functions in source code…

allsmog/vuln-scout

Skill Claude CodeCodex

This skill should be used when the user asks to "trace data flow", "follow user input", "source to sink analysis", "track variable", "find input sources", "taint analysis", or needs to understand how user-controlled data flows through an application during whitebox security review.

allsmog/vuln-scout

Skill Claude CodeCodex

This skill should be used when the user asks about "XXE", "XML External Entity", "error handling", "exception disclosure", "stack trace exposure", "improper error handling", or needs to find exception-related vulnerabilities during whitebox security review.

allsmog/vuln-scout

Skill Claude CodeCodex

This skill should be used when the user asks to "write an exploit", "create PoC", "develop proof of concept", "exploit script", "automate exploitation", "build exploit", or needs guidance on developing working exploits during whitebox security review.

allsmog/vuln-scout

Skill Claude CodeCodex

This skill should be used when the user asks about "framework vulnerabilities", "Next.js security", "Flask security", "Django security", "Rails security", "Spring security", "GraphQL security", "Server Actions", "rendertemplatestring", "SSTI patterns", "redirect SSRF", "mass assignment", "actuator exposure", "SpEL…

allsmog/vuln-scout

Skill Claude CodeCodex

This skill should be used when the user asks about "logging failures", "log injection", "insufficient logging", "audit logging", "security logging", "CWE-117", or needs to find logging-related vulnerabilities during whitebox security review.

allsmog/vuln-scout

Skill Claude CodeCodex

This skill should be used when the user is auditing a "polyglot monorepo", "multi-language codebase", "microservices with different languages", "Go + Python + TypeScript", or any codebase with services written in different programming languages. Provides strategies for cross-service security analysis and unified…

allsmog/vuln-scout

Skill Claude CodeCodex

Use this skill when the user is auditing a decompiled Android application — directory structure includes jadxout/ / apktoolout/, files end in .smali / are jadx-renamed to defpackage/.java, or the conversation mentions an APK / xAPK / com.example. package. Covers the high-signal vulnerability classes vuln-scout detects…

allsmog/vuln-scout

Skill Claude CodeCodex

Use this skill when the user is auditing an iOS application — directory contains .ipa, Info.plist, .swift, .m, .mm, or an xcodeproj. Also activates when the conversation mentions WKWebView, NSURLSession, Keychain, App Transport Security, or any com.apple. / bundleidentifier-style iOS package name.

allsmog/vuln-scout

Skill Claude CodeCodex

Use this skill when reviewing mobile code that handles card data, payment tokenization, or third-party payment SDK integrations (Braintree, Stripe, Adyen, Google Pay, Apple Pay, FirstData-style iframe encryptors). The skill catalogues the high-signal attack patterns vuln-scout detects in mobile payment flows …

allsmog/vuln-scout

Skill Claude CodeCodex

This skill should be used when the user asks about "Next.js security", "React security", "Server Components", "Server Actions", "Route Handlers", "RSC vulnerabilities", "SSR security", or needs comprehensive Next.js/React security analysis during whitebox security review.

allsmog/vuln-scout

Skill Claude CodeCodex

Use this skill when the user asks for OWASP Top 10 mapping, CWE alignment, or standards-oriented reporting. The directory name stays owasp-2025 for backward compatibility, but external reports should use official OWASP Top 10 names.