Njones17

61 mods across 1 repository, 20 stars between them.

sarif-parsing

51

Njones17/AI-agent-master-cyber-skills-list

Skill Claude CodeCodex

Parses and processes SARIF files from static analysis tools like CodeQL, Semgrep, or other scanners. Triggers on "parse sarif", "read scan results", "aggregate findings", "deduplicate alerts", or "process sarif output". Handles filtering, deduplication, format conversion, and CI/CD integration of SARIF data. Does NOT…

20 5mo ago A 91 tokens

sast-scanning

52

Njones17/AI-agent-master-cyber-skills-list

Skill Claude CodeCodex

Perform static application security testing with tools like Semgrep, CodeQL, and SonarQube. Identify security vulnerabilities in source code before deployment. Use when implementing secure SDLC, code review automation, or security gates in CI/CD pipelines.

20 5mo ago A 53 tokens

sbom-supply-chain

53

Njones17/AI-agent-master-cyber-skills-list

Skill Claude CodeCodex

Generate, sign, and verify SBOMs and provenance attestations to secure the software supply chain. Use when implementing SLSA controls, artifact trust policies, or compliance evidence for releases.

20 5mo ago A 44 tokens

secure-code-review

54

Njones17/AI-agent-master-cyber-skills-list

Skill Claude CodeCodex

Use when reviewing source code for security vulnerabilities, performing static analysis of a codebase, auditing code for injection flaws, authentication issues, cryptographic weaknesses, insecure deserialization, SSRF, path traversal, memory safety bugs, hardcoded secrets, or misconfigurations. Use when the user asks…

20 5mo ago B 101 tokens

security-scan

55

Njones17/AI-agent-master-cyber-skills-list

Skill Claude CodeCodex

Comprehensive security scanning for CVE vulnerabilities, OWASP Top 10 code patterns, and dependency audits. Use when the user wants to check code security, find vulnerabilities, or audit dependencies.

20 5mo ago B 42 tokens

Njones17/AI-agent-master-cyber-skills-list

Skill Claude CodeCodex

Creates language variants of existing Semgrep rules. Use when porting a Semgrep rule to specified target languages. Takes an existing rule and target languages as input, produces independent rule+test directories for each language.

20 5mo ago A 50 tokens

semgrep

58

Njones17/AI-agent-master-cyber-skills-list

Skill Claude CodeCodex

Run Semgrep static analysis scan on a codebase using parallel subagents. Supports two scan modes — "run all" (full ruleset coverage) and "important only" (high-confidence security vulnerabilities). Automatically detects and uses Semgrep Pro for cross-file taint analysis when available. Use when asked to scan code for…

20 5mo ago A 95 tokens

Njones17/AI-agent-master-cyber-skills-list

Skill Claude CodeCodex

Verifies code implements exactly what documentation specifies for blockchain audits. Use when comparing code against whitepapers, finding gaps between specs and implementation, or performing compliance checks for protocol implementations.

20 5mo ago A 41 tokens