World-class .NET offensive security & code audit skill suite for AI agents
jinyimeng01/net-code-audit-skill-master
Skill Claude CodeCodex
An automated security-review workflow for authorised .NET web applications and compiled .NET files such as DLLs. It coordinates code decompilation, attack-surface mapping, authentication checks, vulnerability checks, call tracing, and a final report.
jinyimeng01/net-code-audit-skill-master
Skill Claude CodeCodex
A security-audit workflow for authentication and authorization in .NET applications. Authentication checks who a user is; authorization checks what that user is allowed to do.
jinyimeng01/net-code-audit-skill-master
Skill Claude CodeCodex
A security-audit workflow for Blazor applications, Microsoft’s .NET framework for building interactive web interfaces with C#. It examines server circuits, browser-side code, component rendering, events, state, and live SignalR connections.
jinyimeng01/net-code-audit-skill-master
Skill Claude CodeCodex
A .NET security review tool for code that starts processes or loads and runs code dynamically. It follows user-controlled input to execution points such as Process.Start, PowerShell, Roslyn and Assembly.Load.
jinyimeng01/net-code-audit-skill-master
Skill Claude CodeCodex
A security review for .NET application settings, secrets, and deployment exposure.
jinyimeng01/net-code-audit-skill-master
Skill Claude CodeCodex
A security-audit workflow for finding unsafe object deserialization in .NET applications. Deserialization turns stored or received data back into program objects, and unsafe handling can let attackers control what the program creates or runs.
jinyimeng01/net-code-audit-skill-master
Skill Claude CodeCodex
A .NET security review tool for file reads and path-traversal risks. It follows user-controlled input into file operations such as FileStream, StreamReader, PhysicalFile and Path.Combine.
jinyimeng01/net-code-audit-skill-master
Skill Claude CodeCodex
A .NET security review tool for file-upload code. It follows uploaded files from request handling to storage and checks path, extension and MIME-type validation.
jinyimeng01/net-code-audit-skill-master
Skill Claude CodeCodex
A security-audit guide for ASP.NET Core Minimal APIs, a lightweight way to build web APIs in .NET. It traces user-controlled input through routes and request handling to sensitive operations such as files, commands, databases, or deserialization.
jinyimeng01/net-code-audit-skill-master
Skill Claude CodeCodex
A security-audit workflow for .NET applications and deployment files, including ASP.NET, WCF, IIS packages, and decompiled programs. It examines how requests, permissions, data, and configuration flow through an application.
jinyimeng01/net-code-audit-skill-master
Skill Claude CodeCodex
A security-audit topic for API authentication and JWT misuse. JWTs are signed tokens commonly used to identify users and their permissions in APIs.
jinyimeng01/net-code-audit-skill-master
Skill Claude CodeCodex
A security-audit guide for finding command injection in .NET applications, where attacker-controlled text may be passed to operating-system commands.
jinyimeng01/net-code-audit-skill-master
Skill Claude CodeCodex
A security-audit topic about incorrect CORS settings. CORS is the browser rule that controls whether one website may read responses from another website.
jinyimeng01/net-code-audit-skill-master
Skill Claude CodeCodex
A security-audit guide for finding cross-site request forgery (CSRF), an attack that tricks a logged-in browser into sending an unwanted request.
jinyimeng01/net-code-audit-skill-master
Skill Claude CodeCodex
A security-audit topic for unsafe deserialization. Deserialization turns stored or received data back into program objects, and unsafe handling can create security risks.
jinyimeng01/net-code-audit-skill-master
Skill Claude CodeCodex
Reference material for authorized security audits of HTTP Host header attacks in .NET applications. It is an archived source used to support audit findings, not a general-purpose coding add-on.
jinyimeng01/net-code-audit-skill-master
Skill Claude CodeCodex
A security-audit guide for insecure direct object references, where changing an identifier may reveal another user's data or actions.
jinyimeng01/net-code-audit-skill-master
Skill Claude CodeCodex
A security-audit guide for OAuth and OpenID Connect configuration mistakes. OAuth delegates access, while OpenID Connect adds user sign-in on top of it.
jinyimeng01/net-code-audit-skill-master
Skill Claude CodeCodex
A security-audit guide for open redirects, where a website sends visitors to an attacker-chosen external address.
jinyimeng01/net-code-audit-skill-master
Skill Claude CodeCodex
A security-audit guide for finding path traversal and local file inclusion flaws in .NET applications. These flaws can let a request access files outside the intended folder.
jinyimeng01/net-code-audit-skill-master
Skill Claude CodeCodex
A security-audit guide for HTTP request smuggling, a flaw caused by different systems interpreting the same request boundaries differently.
jinyimeng01/net-code-audit-skill-master
Skill Claude CodeCodex
A security-audit guide for SAML single sign-on, a login system in which one service sends signed identity information to another.
jinyimeng01/net-code-audit-skill-master
Skill Claude CodeCodex
A security-audit guide for server-side request forgery, where an application is tricked into making requests chosen by a user.
jinyimeng01/net-code-audit-skill-master
Skill Claude CodeCodex
A security-audit guide for unsafe file uploads, where a website accepts files that can create security or server-side risks.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: