UnboundCompute/security-agent-skills
Skill Claude CodeCodex
Audit presigned object-storage URLs for scope that grants more than the request intended: a signature that covers a broader key, prefix, or bucket than the user should reach, an overlong expiry, a method or content-type left unconstrained, or a signer identity whose permissions exceed the caller's. Covers presigned…
UnboundCompute/security-agent-skills
Skill Claude CodeCodex
Audit security-sensitive values for weak randomness: a non-cryptographic generator, a predictable or constant seed, a reused nonce or initialization vector, or an output too short to resist guessing, feeding a value whose only defense is unpredictability. Covers session and authentication tokens, password-reset and…
UnboundCompute/security-agent-skills
Skill Claude CodeCodex
Audit object-storage ownership and per-object access for trust the bucket policy does not cover: an object uploaded by another account that keeps that uploader's ownership and ACL, a bucket where object ACLs still grant access despite a restrictive bucket policy, a cross-account write that lands an object the bucket…
UnboundCompute/security-agent-skills
Skill Claude CodeCodex
Audit federated single sign-on for assertions a relying party should not trust: a SAML response whose signature is not verified over the right element so a wrapped or altered assertion passes, an OIDC ID token whose issuer, audience, or nonce is unchecked, a relying party that accepts an assertion for any user because…
UnboundCompute/security-agent-skills
Skill Claude CodeCodex
Audit federated single sign-on for the flaws that let an attacker forge or replay an identity: signature wrapping and signature stripping on signed assertions, unsigned or unverified tokens accepted, redirecturi and audience manipulation, missing state and nonce allowing replay and cross-site request forgery, and…
UnboundCompute/security-agent-skills
Skill Claude CodeCodex
Audit updater and bootloader code for a firmware trust boundary that lets an unsigned or downgraded image be flashed or booted. Covers an update image that reaches a flash write or a boot jump with no signature check between receipt and commit, a verification result that is ignored or inverted, an integrity hash…
UnboundCompute/security-agent-skills
Skill Claude CodeCodex
Audit whether an application actually records the security events an investigation would need, and whether the logs themselves leak or lie: a security decision (authentication, an authorization denial or sensitive grant, a credential or privilege change, access to sensitive data) that fires with no durable record, an…
UnboundCompute/security-agent-skills
Skill Claude CodeCodex
Audit event-driven function handlers that trust the event because it arrived from inside the platform: a handler that treats any delivered event as authentic without verifying its true source or integrity, event fields flowing untrusted into a database write, command, downstream call, or constructed path, a function…
UnboundCompute/security-agent-skills
Skill Claude CodeCodex
Audit a service mesh for the trust it claims but does not enforce: a mesh in permissive mode that accepts plaintext alongside mutual TLS so an unauthenticated caller still gets through, an authorization policy that is absent, scoped too narrowly, or defaults to allow, a workload reachable outside the mesh that…
UnboundCompute/security-agent-skills
Skill Claude CodeCodex
Audit how an application issues, rotates, and destroys session identifiers, so an attacker cannot fixate or outlive a session. Covers a session identifier not regenerated at login or privilege change, a logout that clears the client cookie but leaves the server session valid, a session that never expires or has no…
UnboundCompute/security-agent-skills
Skill Claude CodeCodex
Lint the natural-language instruction text of an agent skill or MCP server, not its code: the skill body, the frontmatter description, tool descriptions, and parameter text a model reads and obeys. Covers instructions hidden in comments or markup, invisible and look-alike Unicode, override phrases that countermand…
UnboundCompute/security-agent-skills
Skill Claude CodeCodex
Audit a smart contract for a privileged action any caller can reach, so an attacker invokes a function that should be restricted. Covers a state-changing or fund-moving function missing an authorization modifier, an ownership or role check that is wrong or bypassable, an unprotected initializer that lets an attacker…
Settings file Claude Code
Compiler-precise code property graph for C, Python, and TypeScript, navigable over MCP — data- and taint-flow with source→sink witnesses, points-to, and guard/sink structure for security reasoning over source.
MCP server Claude CodeCodexCursor +2
A compiler-precise code property graph with an embedded columnar store and a navigation layer for security reasoning over source code. Runs locally from the lachesis-cpg Python package.