61 tagged vulnerability, measured the same way as everything else here.
Browse within: agent-security 30scanner 17audit 14ai-security 13ave 13owasp 7CVE 5
Skill Claude CodeCodex
A guide for authorized security testing of AI products, agents, connectors, skills, plugins, code repositories, and related infrastructure. It uses harmless checks and collected evidence to identify and describe security risks.
Skill Claude CodeCodex
The first security skill to install after setting up OpenClaw — powered by Tencent Zhuque Lab. Works like an antivirus for your AI environment: audits installed skills, scans skills before installation, and performs a full OpenClaw security health check to prevent data leaks and privacy risks. Backed by Tencent Zhuque…
Skill Claude CodeCodex
Scan any agent skill for security risks before you install or use it. Powered by Tencent Zhuque Lab A.I.G (AI-Infra-Guard). 100% local static analysis — no file contents or credentials leave your device. Compatible with CodeBuddy, Cursor, Windsurf, Claude Code, OpenClaw and more. Triggers on: 这个 skill 安全吗, skill 安全扫描…
Skill Claude CodeCodex
A procedure for auditing Java archive files for security problems using evidence stored in SQLite. A Java archive, or JAR, is a packaged file containing Java code and resources.
Skill Claude CodeCodex
Check if recent cybersecurity alerts from 10 international CERTs affect your current project. Use when the user asks about security vulnerabilities, CVEs, "is my project affected", "any new security alerts", "check for vulnerabilities", "cyberowlai", or "/cyberowlai". Also trigger when the user is working on…
jar-analyzer/jar-analyzer-claude
Skill Claude CodeCodex
A tool for turning Java JAR, WAR, or class files into an SQLite database for analysis. A JAR or WAR is a packaged Java application or library.
jar-analyzer/jar-analyzer-claude
Skill Claude CodeCodex
A set of queries for auditing Java code using an SQLite database built from compiled files. It can search method calls, follow call chains, inspect Spring components, find strings, and detect vulnerability patterns.
Skill Claude CodeCodex
Scan any agent skill for security risks before you install or use it. Powered by Tencent Zhuque Lab A.I.G (AI-Infra-Guard). 100% local static analysis — no file contents or credentials leave your device. Compatible with CodeBuddy, Cursor, Windsurf, Claude Code, OpenClaw and more. Triggers on: 这个 skill 安全吗, skill 安全扫描…
Skill Claude CodeCodex
Write, refine, run, and QA promptfoo evaluation suites: promptfooconfig.yaml, prompts, providers, vars, tests, assertions, model-graded rubrics, transforms, datasets, exports, and CI gates. Use for non-redteam eval coverage, regression tests, or new eval matrices. Do not use for adversarial redteam plugin or strategy…
Skill Claude CodeCodex
Standards for creating redteam plugins and graders. Use when creating new plugins, writing graders, or modifying attack templates.
Skill Claude CodeCodex
The main workflow for this repo. Adds one new AVE record end to end.
Skill Claude CodeCodex
Keep AVE current with the real threat landscape. This skill researches agentic AI / MCP attack classes from primary sources, benchmarks each against the existing AVE record set, and for every class decides one of three outcomes: ALREADY COVERED, VARIANT OF EXISTING, or NEW CLASS.
Skill Claude CodeCodex
For this repo, TDD means: fixtures first, then rule, then record validation.
Skill Claude CodeCodex
Authorized penetration tester persona — offensive security specialist for network, web app, cloud, and Active Directory assessments. Requires explicit authorization.
Skill Claude CodeCodex
A skill for creating proof-of-concept security scripts, meaning small working programs used to demonstrate or test an idea.
Skill Claude CodeCodex
Security auditing skill for scanning CVE vulnerabilities across npm, Python, Go, and Rust projects using osv-ui. Opens a visual browser dashboard for human review, then applies fixes with explicit confirmation.