All authors
Claude Skills by awarexone
github.com/awarexone64 skills6 installs105 views
- Prompt InjectionAssess direct and indirect prompt-injection risks in LLM/AI features — use for chatbots, RAG, agents, and tool-calling apps.Votes: 0GitHub stars: 15
- Prototype PollutionAnalyze JavaScript prototype pollution risks — use when reviewing deep merges, recursive object assigns, query-to-object parsers, or untrusted JSON key merges (CWE-1321 / A03:2021).Votes: 0GitHub stars: 15
- Secrets DetectionFind and triage hard-coded secrets, tokens, and credentials in source and build artifacts before ship (CWE-798 / A07:2021 adjacent).Votes: 0GitHub stars: 15
- Security Architecture ReviewReview security architecture and trust boundaries — use for design-level control gaps across authZ, secrets, egress, multi-tenant isolation, and insecure-by-design features (A04:2021) before or with /axguard-audit.Votes: 0GitHub stars: 15
- Security RemediationApply minimal defensive patches for confirmed findings and verify with re-audit — post-triage only.Votes: 0GitHub stars: 15
- Security TriageDomain reasoning for triaging AXguard findings — keep/drop gates, confidence, and severity promotion before remediation.Votes: 0GitHub stars: 15
- Session SecurityAnalyze session management security — use when reviewing cookie flags, session fixation, timeout, logout, concurrent sessions, or server-side session stores (A07:2021 / CWE-287 / CWE-352 adjacency).Votes: 0GitHub stars: 15
- Sql InjectionAnalyze SQL and ORM injection risks in application code — use for string-built queries, raw SQL helpers, and database sinks (CWE-89 / A03:2021).Votes: 0GitHub stars: 15
- Ssrf AnalysisAnalyze and validate server-side request forgery in application code — use when reviewing outbound HTTP/fetch sinks, user-controlled URLs, webhook callbacks, previewers, or cloud metadata exposure (CWE-918 / A10:2021).Votes: 0GitHub stars: 15
- Ssti AnalysisAnalyze server-side template injection risks — use when user input reaches template engines (Jinja, Twig, Freemarker, Pug, Liquid) or dynamic template compile/render APIs (CWE-1336 / A03:2021).Votes: 0GitHub stars: 15
- Supply Chain SecurityAssess install hooks, curl|sh, untrusted indexes, and integrity gaps in dependency/build pipelines before ship (CWE-494 / CWE-506 / A06:2021 / A08:2021).Votes: 0GitHub stars: 15
- Threat ModelingLightweight threat modeling for an application before deep scanning — map assets, trust boundaries, and abuse cases; feeds /axguard-audit.Votes: 0GitHub stars: 15
- Websocket SecurityAnalyze WebSocket security posture — use when reviewing WS/WSS upgrade auth, origin checks, message authorization, or cross-site WebSocket hijacking risks (CWE-346 / CWE-352 / A01:2021).Votes: 0GitHub stars: 15
- Xss AnalysisAnalyze and validate cross-site scripting in web/UI code — use when reviewing HTML sinks, DOM APIs, template escaping, dangerouslySetInnerHTML, or reflected/stored XSS paths (CWE-79 / A03:2021).Votes: 0GitHub stars: 15