Claude Skills by Gabson0x

github.com/Gabson0x

28 skillsA× 20B× 4C× 1D× 1F× 20 installs14 views

bountyforgeABug bounty and security audit engine — trust-first iterative hunting. The "3rd eye" for pentesting.securityrustgoVotes: 0GitHub stars: 431
Bb MethodologyAThe "3rd eye" for pentesting — reminds agent to understand before assuming, validate before reporting.ai-agentsrustgoVotes: 0GitHub stars: 431
Bug BountyFComplete bug bounty workflow — recon (subdomain enumeration, asset discovery, fingerprinting, HackerOne scope, source code audit), pre-hunt learning (disclosed reports, tech stack research, mind maps, threat modeling), vulnerability hunting (IDOR, SSRF, XSS, auth bypass, CSRF, race conditions, SQLi, XXE, file upload, business logic, GraphQL, HTTP smuggling, cache poisoning, OAuth, timing side-channels, OIDC, SSTI, subdomain takeover, cloud misconfig, ATO chains, agentic AI), LLM/AI security t...securityjavascripttypescriptVotes: 0GitHub stars: 431
Code SleuthAAnalyze EVM smart contracts for storage-safety vulnerabilities that can cause persistent state updates to be lost, overwritten, misdirected, or to collide across proxy or upgrade boundaries.ai-agentsrustgoVotes: 0GitHub stars: 431
FizzAGenerate Echidna/Medusa-compatible Solidity fuzz suites from Foundry or Hardhat projects. Trigger on "fizz", "generate fuzz suite", "build fuzz harness", "stateful fuzzing", "fuzzing harness", "property testing", and "invariant suite".ai-agentsgoshellVotes: 0GitHub stars: 431
GodmodAActivate maxed-out expert mode for security research. See also: [[Methodology]], [[Wild Mode]], [[Trust Map]], [[A→B Chains]]ai-agentstypescriptpythonVotes: 0GitHub stars: 431
Skills DirectorySkills Directory Look up any of 103,619 scanned skills — grade, score, and every finding. Free.Check a skill
Hackenproof Triage MarketplaceAHackenProof bug bounty triage workflow for Claude Code plugin marketplace operations. Use when analyzing security reports, validating scope and exploitability, assigning severity, detecting duplicates, setting report state, adding labels/comments, and preparing consistent triage decisions for HackenProof programs.ai-agentsgosecurityVotes: 0GitHub stars: 431
Meme Coin AuditAMeme coin and token security audit — rug pull detection (honeypot, hidden mint, fee manipulation, LP lock bypass), Solana SPL token analysis (freeze authority, mint authority, metadata mutability), Token-2022 extension risks (transfer hooks, permanent delegate), DEX liquidity pool attacks (sandwich amplification, LP drain, bonding curve exploits), pump.fun/Raydium/Jupiter integration risks, token_scanner.py automation, and real exploit examples from 2024-2025. Use for any token audit, rug pul...ai-agentspythonrustVotes: 0GitHub stars: 431
Solidity AuditorBSecurity audit of Solidity code while you develop. Trigger on "audit", "check this contract", "review for security". Modes - default (full repo) or a specific filename.ai-agentsrustgoVotes: 0GitHub stars: 431
X RayBGenerates an x-ray.md pre-audit report covering overview, enhanced threat model (protocol-type profiling, git-weighted attack surfaces, temporal risk analysis, composability dependency mapping), invariants, integrations, docs quality, test analysis, and developer/git history. Triggers on 'x-ray', 'audit readiness', 'readiness report', 'pre-audit report', 'prep this protocol', 'protocol prep', 'summarize this protocol'.ai-agentspythonrustVotes: 0GitHub stars: 431
Report WritingABug bounty report writing for H1/Bugcrowd/Intigriti/Immunefi — report templates, human tone guidelines, impact-first writing, CVSS 3.1 scoring, title formula, impact statement formula, severity decision guide, downgrade counters, pre-submit checklist. Use after validating a finding and before submitting. Never use "could potentially" — prove it or don't report.securitypythongoVotes: 0GitHub stars: 431
Security ArsenalDSecurity payloads, bypass tables, wordlists, gf pattern names, always-rejected bug list, conditionally-valid-with-chain table, temp email creation scripts, XXE/deserialization/host header injection payloads. Use when you need specific payloads for XSS/SSRF/SQLi/XXE/NoSQLi/command injection/SSTI/IDOR/path-traversal/HTTP smuggling/WebSocket/MFA bypass, bypass techniques, temp email setup for multi-account testing, or to check if a finding is submittable. Also use when asked about what NOT to su...developmentjavascriptpythonVotes: 0GitHub stars: 431
Smart Contract AuditAComprehensive smart contract security audit framework with multi-expert analysis. Use for full audits of Ethereum / EVM Solidity and Vyper, Solana / SVM Anchor Rust, TON / FunC / Tact, or Sui / Move projects.securityrustgoVotes: 0GitHub stars: 431
Triage ValidationAFinding validation before writing any report — 7-Question Gate (all 7 questions), 4 pre-submission gates, always-rejected list, conditionally valid with chain table, CVSS 3.1 quick reference, severity decision guide, report title formula, 60-second pre-submit checklist. Use BEFORE writing any report. One wrong answer = kill the finding and move on. Saves N/A ratio.securityrustgoVotes: 0GitHub stars: 431
Web2 ReconBWeb2 recon pipeline — subdomain enum, URL crawling, JS analysis, temp emails, directory fuzzing. Trust-first asset discovery.ai-agentsrustgoVotes: 0GitHub stars: 431
Web2 Vuln ClassesFComplete reference for 28 web2 bug classes with root causes, detection patterns, bypass tables, exploit techniques, and real paid examples. Covers IDOR, auth bypass, XSS, SSRF (11 IP bypass techniques), SQLi, NoSQLi, business logic, race conditions, OAuth/OIDC, file upload (10 bypass techniques), GraphQL, LLM/AI (ASI01-ASI10 agentic framework), API misconfig (mass assignment, JWT attacks, prototype pollution, CORS), ATO taxonomy (9 paths), SSTI (Jinja2/Twig/Freemarker/ERB/Spring), subdomain t...securityjavascriptpythonVotes: 0GitHub stars: 431
Web3 AuditASmart contract security audit — 10 DeFi bug classes (accounting desync, access control, incomplete path, off-by-one, oracle, ERC4626, reentrancy, flash loan, signature replay, proxy), pre-dive kill signals (TVL < $500K etc), Foundry PoC template, grep patterns for each class, and real Immunefi paid examples. Use for any Solidity/Rust contract audit or when deciding whether a DeFi target is worth hunting.ai-agentsrustgoVotes: 0GitHub stars: 431
Web3 Ai ToolsBAI-powered tools for Web3 bug bounty automation. Use when you want to automate recon, run autonomous audits, or use AI agents for vulnerability discovery.ai-agentsjavascriptpythonVotes: 0GitHub stars: 431
Web3 Bug ClassesAComplete reference for all 10 DeFi smart contract bug classes. Use this when hunting for specific vulnerability types, need attack patterns for accounting desync, access control, incomplete path, off-by-one, oracle manipulation, ERC4626 vaults, reentrancy, flash loans, signature replay, or proxy/upgrade bugs.ai-agentsrustgoVotes: 0GitHub stars: 431
Web3 Case Study Role MisconfigACase study - role misconfiguration bug class applied to a yield aggregator protocol. Use as a template for applying all 10 bug classes to a single target.ai-agentsrustgoVotes: 0GitHub stars: 431
Web3 Grep ArsenalAMaster grep command arsenal for Web3 smart contract auditing. Use when starting a new protocol scan, before deep code review, or when hunting specific vulnerability classes.ai-agentsrustbashVotes: 0GitHub stars: 431
Web3 Hunt FoundationAHunter mindset, recon setup, and target scoring for Web3 bug bounty. Use at the START of any new protocol hunt - scoring targets, setting up environment, understanding architecture.ai-agentsrustgoVotes: 0GitHub stars: 431
Web3 Hunt Zksync EraAZKsync Era (Immunefi) completed hunt — 0 findings after exhaustive 5-session audit. Use as a DEFENSE STUDY — learn what makes a protocol unhuntable, which patterns block all 10 bug classes, and when to abandon a target. Contains architecture breakdown, 25 tested attack vectors, and pre-dive scoring refinements for large L1 bridge protocols.ai-agentsrustgoVotes: 0GitHub stars: 431
Web3 Methodology ResearchAExternal research synthesis from Trail of Bits, SlowMist, ConsenSys, Immunefi, and Cyfrin. Use this for advanced audit methodology, Echidna/Medusa fuzzing setup, Slither custom detector writing, attack pattern deep dives, or the 4-phase learning roadmap.testingrustgoVotes: 0GitHub stars: 431
Web3 Poc FoundryAComplete Foundry PoC writing guide + all cheatcodes + DeFiHackLabs reproduction patterns. Use this when building a proof of concept exploit, setting up a fork test, using Foundry cheatcodes, or reproducing a known DeFi hack for learning.ai-agentspythonrustVotes: 0GitHub stars: 431
Web3 Solidity Audit McpCMCP server integrating Slither + Aderyn + SWC patterns into Claude Code for smart contract auditing. Use when analyzing Solidity files, running DeFi-specific detectors, or generating invariants. 10 MCP tools, 86 SWC detectors, DeFi preset pack, CI/CD workflow.ai-agentspythonrustVotes: 0GitHub stars: 431
Web3 Start HereAMaster index for the web3 smart contract security knowledge base. Use this to navigate the skill chain. Read files in order — each ends with NEXT.ai-agentsrustsecurityVotes: 0GitHub stars: 431
Web3 Triage ReportABug triage validation system, Immunefi report format, and 20 real paid bounty examples dissected. Use this when validating a finding before submitting, writing an Immunefi report, checking if a bug is actually valid, or studying real examples of paid vulnerabilities.ai-agentspythongoVotes: 0GitHub stars: 431