Agent Claude Code
Confirmation phase V4 PoC execution agent that runs existing PoC scripts from piolium/findings/ against the live application environment or a remote target, adapts connection details, captures execution evidence, and updates finding confirmation status.
Agent Claude Code
Probe Strategist — coordinator for a Deep Probe team. Reads the Knowledge Base, maps the attack surface and Layer Trust Chain, authors the Code Anatomy inline, runs backward-reasoner + contradiction-reasoner in parallel, performs Cross-Pollination, dispatches evidence-harvester (which also owns causal challenge), and…
Agent Claude Code
Phase 13 final report compilation agent that collects all confirmed findings from piolium/findings/ directories, reads adversarial consensus documents and debate transcripts, produces the consolidated pentest-style piolium/final-audit-report.md, and runs all consistency checks.
Agent Claude Code
Phase 9 RFC, specification, and framework-contract compliance analysis agent that identifies gaps between documented or implicit platform requirements and codebase implementation, focusing on parsing, normalization, canonicalization, state-machine compliance, middleware semantics, and hidden control channels.
Agent Claude Code
Phase 7 state-machine, concurrency, and business-logic audit agent that identifies state-holding entities (status/lifecycle columns, financial balances, idempotency stores) and concurrency primitives, then systematically hunts for TOCTOU, transaction-isolation bugs, state-ordering violations, idempotency failures…
Agent Claude Code
Phase 4 SAST orchestration agent that runs Sub-step 4.1 structural extraction, CodeQL security suites, Semgrep with Pro engine, generates custom rules from Phase 3 DFD/CFD blind spots and library attack patterns, manages SAST concurrency, classifies each candidate finding for security relevance (inline enrichment)…
Agent Claude Code
Confirmation phase V5 test-based verification agent that maps unconfirmed findings to existing test files, generates minimal reproducer tests targeting each vulnerability, executes them in isolation within piolium/findings/ /, and updates confirmation status.
Agent Claude Code
Phase 12 per-finding variant analysis agent that takes a confirmed vulnerability and searches for structural variants using the attack pattern registry's detection signatures, CodeQL on-demand queries, DFD/CFD slice analysis including Phase 10 Addendum discoveries, and chamber variant candidates.
Agent Claude Code
Phase 10 Review Chamber concurrent variant hunter that monitors debate transcripts for confirmed vulnerability patterns and immediately searches for structural variants in sibling components, alternate transports, and adjacent enforcement paths, front-loading Phase 12 variant analysis while chamber context is hot.
Agent Claude Code
Cross-agent reinvest verifier. Independently re-verifies a single CRITICAL or HIGH finding under a different agent platform / model than the one that originally produced it. Reads the finding's prior wave verdicts (if any), restates the claim from the report alone, traces from source independently, and emits CONFIRMED…
Skill Claude Code
Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations including Claude Code Action, Gemini CLI, OpenAI Codex, and GitHub AI Inference. Detects attack vectors where attacker-controlled input reaches AI agents running in CI/CD pipelines, including env var intermediary patterns, direct…
Skill Claude CodeCodex needs its repo
Use when running a full security audit of an arbitrary source code repository, especially large, complex, multi-component, distributed, or non-standard architectures. Defines a 10-phase security audit methodology combining advisory intelligence, patch bypass analysis, knowledge base construction, baseline and custom…
Skill Claude CodeCodex
Use this skill to review code. It supports both local changes (staged or working tree) and remote Pull Requests (by ID or URL). It focuses on correctness, maintainability, and adherence to project standards.
Skill Claude Code
Scans a codebase for security vulnerabilities using CodeQL's interprocedural data flow and taint tracking analysis. Triggers on "run codeql", "codeql scan", "codeql analysis", "build codeql database", or "find vulnerabilities with codeql". Supports "run all" (security-and-quality suite) and "important only"…
Skill Claude Code
Performs security-focused differential review of code changes (PRs, commits, diffs). Adapts analysis depth to codebase size, uses git history for context, calculates blast radius, checks test coverage, and generates comprehensive markdown reports. Automatically detects and prevents security regressions.
Skill Claude Code
Systematically verifies suspected security bugs to eliminate false positives. Produces TRUE POSITIVE or FALSE POSITIVE verdicts with documented evidence for each bug.
Skill Claude Code
Detects fail-open insecure defaults (hardcoded secrets, weak auth, permissive security) that allow apps to run insecurely in production. Use when auditing security, reviewing config management, or analyzing environment variable handling.
Skill Claude Code
Researches a topic from the last 30 days on Reddit, X, and the web. Surfaces real community discussions with engagement metrics and synthesizes findings into actionable insights. Use when the user wants to know what people are saying about a topic right now.
Skill Claude Code
Parses and processes SARIF files from static analysis tools like CodeQL, Semgrep, or other scanners. Triggers on "parse sarif", "read scan results", "aggregate findings", "deduplicate alerts", or "process sarif output". Handles filtering, deduplication, format conversion, and CI/CD integration of SARIF data. Does NOT…
Skill Codex
Repository-grounded threat modeling that enumerates trust boundaries, assets, attacker capabilities, abuse paths, and mitigations, and writes a concise Markdown threat model. Trigger only when the user explicitly asks to threat model a codebase or path, enumerate threats/abuse paths, or perform AppSec threat modeling.…
Skill Claude Code
Creates custom Semgrep rules for detecting security vulnerabilities, bug patterns, and code patterns. Use when writing Semgrep rules or building custom static analysis detections.
Skill Claude Code
Creates language variants of existing Semgrep rules. Use when porting a Semgrep rule to specified target languages. Takes an existing rule and target languages as input, produces independent rule+test directories for each language.
Skill Claude Code
Run Semgrep static analysis scan on a codebase using parallel subagents. Supports two scan modes — "run all" (full ruleset coverage) and "important only" (high-confidence security vulnerabilities). Automatically detects and uses Semgrep Pro for cross-file taint analysis when available. Use when asked to scan code for…
Skill Claude Code
Identifies error-prone APIs, dangerous configurations, and footgun designs that enable security mistakes. Use when reviewing API designs, configuration schemas, cryptographic library ergonomics, or evaluating whether code follows 'secure by default' and 'pit of success' principles. Triggers: footgun, misuse-resistant…
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: