220 tagged ai security, measured the same way as everything else here.
Browse within: bug-bounty 89cybersecurity 73ctf 53appsec 31Autonomous Agents 28blue-team 28owasp 24owasp-juice-shop 23owasp-llm 23owasp-llm-top-10 23ai-red-teaming 20devsecops 20jailbreak 18llm-evaluation 18
FlorianBruniaux/claude-code-ultimate-guide
Agent
Architecture Decision Record generator agent — read-only. Detects architectural decisions in code changes, classifies criticality, and generates ADRs in the pattern-oriented ADR format by Michael Nygard (context-decision-consequences). Never modifies code. Use after significant changes or when a decision needs…
FlorianBruniaux/claude-code-ultimate-guide
Agent
Use for thorough code review with quality, security, and performance checks.
FlorianBruniaux/claude-code-ultimate-guide
Agent
Adversarial plan review agent — read-only. Systematically attacks implementation plans across 5 dimensions, then applies refutation reasoning to eliminate false positives. Never modifies code. Use before committing to any significant implementation plan.
Agent
Autonomous hunt loop agent. Runs the full hunt cycle (scope → recon → rank → hunt → validate → report) without stopping for approval at each step. Configurable checkpoints (--paranoid, --normal, --yolo). Uses scopechecker.py for deterministic scope safety on every outbound request. Logs all requests to audit.jsonl.…
Agent
Autonomous credential-attack pipeline runner. Chains /wordlist-gen + /osint-employees + /breach-check (data-prep stages, runs without prompts) then HARD STOPS before /spray (live attack stage requires human go/no-go). Designed so the user only types the target once instead of orchestrating four separate commands.…
Agent
Fast meme coin and token security auditor. Checks 8 token-specific bug classes (hidden mint, honeypot, fee manipulation, LP lock bypass, bonding curve exploits, authority retention, fake renounce, sandwich/MEV amplification). Runs tokenscanner.py for automated red flag detection. Covers EVM (Solidity) and Solana…
Agent
Delegates to this agent when the user asks about malware analysis, reverse engineering, binary analysis, disassembly, debugging, sandbox analysis, static analysis, dynamic analysis, or suspicious file triage.
Agent
Delegates to this agent when the user asks about OSINT, reconnaissance, information gathering, target profiling, email harvesting, subdomain enumeration, social media recon, breach data, open source intelligence, or building a target dossier for authorized engagements.
Agent
Delegates to this agent when the user asks about threat modeling, attack surface analysis, STRIDE, DREAD, attack trees, data flow diagrams, trust boundaries, or security architecture review.
Agent Claude Code
Triages GitHub issues by investigating whether they've been resolved in the codebase, recommending closures, and helping craft polite closure messages. Use when doing bug triage sessions or cleaning up stale issues.
Agent Claude Code
Specialized in Kubernetes operator patterns, CRDs, controllers, and cloud-native architecture for ToolHive.
Agent Claude Code
Codebase knowledge, navigation, and implementation guidance — use for understanding existing code and patterns.
Agent
Use for SecurityClaw orchestration, routing, skill-manifest, and investigation workflow changes.
Agent
Version: 0.1.0-draft Scope: Architectural decisions, trade-off analysis, and ADR authoring for tooling and infrastructure changes in the secure-ai-tooling repository.
Agent
Version: 0.3.0-draft Scope: Content update review for the CoSAI Risk Map framework (secure-ai-tooling repository).
Agent
Version: 0.1.0-draft Scope: Generate structured review comments for GitHub issues proposing new or updated content in the CoSAI Risk Map framework (secure-ai-tooling repository).
Agent Claude Code
Read-only adversarial reviewer for Guardana. Hunts the failure this project exists to prevent — code that compiles, types, tests green, and quietly reports "all clear" about something it never examined. Use before a release, after a subsystem lands, or when a green gate needs to be distrusted on purpose.
Agent Claude Code
Runs Guardana's full gate — lint, format, strict types, import contract, tests with coverage floors, dogfood, generated docs and the three isolated example suites — and reports what actually passed. Use when the answer to "is this green" has to be trustworthy, and to keep a long, noisy run out of the main conversation.
Agent Claude Code
This document provides comprehensive guidance for designing, customizing, and maintaining agents in Agentic Oriented Development Kit.
Agent Claude Code
Quick reference for all agents in {{PROJECTNAME}}.
Agent Claude Code
BDD testing specialist using Cucumber/Gherkin framework. Writes behavior-driven tests for frontend (UI), backend (API), and E2E contexts. Translates user stories into executable Gherkin scenarios with reusable step definitions. Validates functionality through plain-English test specifications that serve as living…
Agent Claude Code
Active Directory and Windows domain attack specialist. Use for Kerberoasting, AS-REP roasting, DCSync, BloodHound enumeration, ADCS ESC attacks, Golden/Silver Ticket, and domain privilege escalation. Triggers on: kerberoast, AS-REP, bloodhound, DCSync, golden ticket, ADCS, ESC, domain controller, LDAP, GPO, AD, domain…
Agent Claude Code
API security testing specialist for REST, GraphQL, gRPC, and WebSocket APIs. Handles BOLA/IDOR, mass assignment, authentication bypass, rate limit evasion, JWT attacks, GraphQL introspection abuse, API enumeration, and OWASP API Top 10. Triggers on: API, REST, GraphQL, gRPC, WebSocket, BOLA, IDOR, mass assignment, API…
Agent Claude Code
Password cracking and credential attack specialist. Use when working with password hashes, hash cracking, wordlist attacks, credential analysis, or password auditing. Triggers on: password, hash, crack, hashcat, john, wordlist, NetNTLMv2, Kerberoast, NTLM, bcrypt, credential, ASREP, JWT crack, mask attack, rule…