scan
49Command Claude Code
Scan a repository with Semgrep and CodeQL.
Command Claude Code
Scan a repository with Semgrep and CodeQL.
Command Claude Code
Inspect per-model reliability across decision classes; answer natural-language questions about model competence.
Command Claude Code
Project threat model — show, initialise, lint, diff, report, build, refresh, export.
Command Claude Code
Map attack surface, trace data flows, hunt vulnerability variants.
Command Claude Code
Validate that vulnerability findings are real, reachable, and exploitable.
Command Claude Code
Show the running RAPTOR framework version.
Command Claude Code
Web application security scanner (alpha).
Skill Claude Code
Hypothesis-driven, tool-grounded security review of coverage gaps.
Skill Claude Code
Provides adversarial code comprehension for security research, mapping architecture, tracing data flows, and hunting vulnerability variants to build ground-truth understanding before or alongside static analysis.
Skill Claude Code
Instrument C/C++ with -finstrument-functions for execution tracing and Perfetto visualisation.
Skill Claude Code
Add gcov code coverage instrumentation to C/C++ projects.
Skill Claude Code
Check if specific lines were executed using gcov data.
Skill Claude Code
Deterministic debugging with rr record-replay. Use when debugging crashes, ASAN faults, or when reverse execution is needed. Provides reverse-next, reverse-step, reverse-continue commands and crash trace extraction.
Skill Claude Code
Multi-stage pipeline for validating that vulnerability findings are real, reachable, and exploitable, preventing wasted effort on hallucinated findings, dead code paths, or findings with unrealistic preconditions.
Skill Claude Code
Dynamic instrumentation via Frida - attach to or spawn a process, load a JS hook script, capture send() events into a lifecycle-managed run directory. Supports local, USB-attached, and remote frida-server targets.
Skill Claude Code
Investigate GitHub security incidents using tamper-proof GitHub Archive data via BigQuery. Use when verifying repository activity claims, recovering deleted PRs/branches/tags/repos, attributing actions to actors, or reconstructing attack timelines. Provides immutable forensic evidence of all public GitHub events since…
Skill Claude Code
Recover deleted commits from GitHub using REST API, web interface, and git fetch. Use when you have commit SHAs and need to retrieve actual commit content, diffs, or patches. Includes techniques for accessing "deleted" commits that remain on GitHub servers.
Skill Claude Code
Generate, export, load, and verify forensic evidence from GitHub sources. Use when creating verifiable evidence objects from GitHub API, GH Archive, Wayback Machine, local git repositories, or security vendor reports. Handles evidence storage, querying, and re-verification against original sources.
Skill Claude Code
Recover deleted GitHub content using the Wayback Machine and Archive.org APIs. Use when repositories, files, issues, PRs, or wiki pages have been deleted from GitHub but may persist in web archives. Covers CDX API queries, URL patterns, and systematic recovery workflows.
Skill Claude Code
Orchestrates multi-agent forensic investigations on public GitHub repositories, coordinating parallel evidence collection, hypothesis formation, verification, and report generation.
Hook Claude Code
Runs after a tool call finishes for Read tool calls, running an inline shell check. From gadievron/raptor.
Command Claude Code
OpenAnt LLM-powered source-code vulnerability scan.
Command Claude Code
Show or update RAPTOR resource tuning (max / balanced / default profiles).
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: