Agent
Phase 2 per-patch bypass analysis agent that receives a security patch diff and tests bypass hypotheses including alternate entry points, config-gated checks, default-state gaps, parser differentials, and missing normalization.
Agent
Phase 11a per-finding PoC construction agent that builds realistic, minimized exploit scripts for confirmed vulnerabilities, provisions real environments for Critical and High findings, captures execution evidence, and writes PoC metadata back to the finding draft. Does NOT author the disclosure-ready report.md — that…
Agent
Confirmation phase V4 PoC execution agent that runs existing PoC scripts from piolium/findings/ against the live application environment or a remote target, adapts connection details, captures execution evidence, and updates finding confirmation status.
Agent
Probe Strategist — coordinator for a Deep Probe team. Reads the Knowledge Base, maps the attack surface and Layer Trust Chain, authors the Code Anatomy inline, runs backward-reasoner + contradiction-reasoner in parallel, performs Cross-Pollination, dispatches evidence-harvester (which also owns causal challenge), and…
Agent
Phase 13 final report compilation agent that collects all confirmed findings from piolium/findings/ directories, reads adversarial consensus documents and debate transcripts, produces the consolidated pentest-style piolium/final-audit-report.md, and runs all consistency checks.
Agent
Phase 9 RFC, specification, and framework-contract compliance analysis agent that identifies gaps between documented or implicit platform requirements and codebase implementation, focusing on parsing, normalization, canonicalization, state-machine compliance, middleware semantics, and hidden control channels.
Agent
Phase 7 state-machine, concurrency, and business-logic audit agent that identifies state-holding entities (status/lifecycle columns, financial balances, idempotency stores) and concurrency primitives, then systematically hunts for TOCTOU, transaction-isolation bugs, state-ordering violations, idempotency failures…
Agent
Phase 4 SAST orchestration agent that runs Sub-step 4.1 structural extraction, CodeQL security suites, Semgrep with Pro engine, generates custom rules from Phase 3 DFD/CFD blind spots and library attack patterns, manages SAST concurrency, classifies each candidate finding for security relevance (inline enrichment)…
Agent
Confirmation phase V5 test-based verification agent that maps unconfirmed findings to existing test files, generates minimal reproducer tests targeting each vulnerability, executes them in isolation within piolium/findings/ /, and updates confirmation status.
Agent
Phase 12 per-finding variant analysis agent that takes a confirmed vulnerability and searches for structural variants using the attack pattern registry's detection signatures, CodeQL on-demand queries, DFD/CFD slice analysis including Phase 10 Addendum discoveries, and chamber variant candidates.
Agent
Phase 10 Review Chamber concurrent variant hunter that monitors debate transcripts for confirmed vulnerability patterns and immediately searches for structural variants in sibling components, alternate transports, and adjacent enforcement paths, front-loading Phase 12 variant analysis while chamber context is hot.
Agent
Cross-agent reinvest verifier. Independently re-verifies a single CRITICAL or HIGH finding under a different agent platform / model than the one that originally produced it. Reads the finding's prior wave verdicts (if any), restates the claim from the report alone, traces from source independently, and emits CONFIRMED…
Skill Claude CodeCodex
Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations including Claude Code Action, Gemini CLI, OpenAI Codex, and GitHub AI Inference. Detects attack vectors where attacker-controlled input reaches AI agents running in CI/CD pipelines, including env var intermediary patterns, direct…
Skill Claude CodeCodex
Use when running a full security audit of an arbitrary source code repository, especially large, complex, multi-component, distributed, or non-standard architectures. Defines a 10-phase security audit methodology combining advisory intelligence, patch bypass analysis, knowledge base construction, baseline and custom…
Skill Claude CodeCodex
Use this skill to review code. It supports both local changes (staged or working tree) and remote Pull Requests (by ID or URL). It focuses on correctness, maintainability, and adherence to project standards.
Skill Claude CodeCodex
Scans a codebase for security vulnerabilities using CodeQL's interprocedural data flow and taint tracking analysis. Triggers on "run codeql", "codeql scan", "codeql analysis", "build codeql database", or "find vulnerabilities with codeql". Supports "run all" (security-and-quality suite) and "important only"…
Skill Claude CodeCodex
Performs security-focused differential review of code changes (PRs, commits, diffs). Adapts analysis depth to codebase size, uses git history for context, calculates blast radius, checks test coverage, and generates comprehensive markdown reports. Automatically detects and prevents security regressions.
Skill Claude CodeCodex
Systematically verifies suspected security bugs to eliminate false positives. Produces TRUE POSITIVE or FALSE POSITIVE verdicts with documented evidence for each bug.
Skill Claude CodeCodex
Detects fail-open insecure defaults (hardcoded secrets, weak auth, permissive security) that allow apps to run insecurely in production. Use when auditing security, reviewing config management, or analyzing environment variable handling.
Skill Claude CodeCodex
Researches a topic from the last 30 days on Reddit, X, and the web. Surfaces real community discussions with engagement metrics and synthesizes findings into actionable insights. Use when the user wants to know what people are saying about a topic right now.
Skill Claude CodeCodex
Parses and processes SARIF files from static analysis tools like CodeQL, Semgrep, or other scanners. Triggers on "parse sarif", "read scan results", "aggregate findings", "deduplicate alerts", or "process sarif output". Handles filtering, deduplication, format conversion, and CI/CD integration of SARIF data. Does NOT…
Skill Claude CodeCodex
Repository-grounded threat modeling that enumerates trust boundaries, assets, attacker capabilities, abuse paths, and mitigations, and writes a concise Markdown threat model. Trigger only when the user explicitly asks to threat model a codebase or path, enumerate threats/abuse paths, or perform AppSec threat modeling.…
Skill Claude CodeCodex
Creates custom Semgrep rules for detecting security vulnerabilities, bug patterns, and code patterns. Use when writing Semgrep rules or building custom static analysis detections.
Skill Claude CodeCodex
Creates language variants of existing Semgrep rules. Use when porting a Semgrep rule to specified target languages. Takes an existing rule and target languages as input, produces independent rule+test directories for each language.