Axguard Knowledge

Name: Axguard Knowledge
Author: awarexone

ASecurity

Pre-ship vulnerability class encyclopedia for AXguard — root causes, static detection hints, CWE/OWASP maps, and fix guidance for IDOR, auth, XSS, SSRF, SQLi, SSTI, deserialization, path traversal, secrets, cloud, CORS, JWT, upload, GraphQL, supply chain, LLM/agent, debug exposure, and crypto misuse. Load when auditing, triaging, or remediating and a class needs depth. Defensive static review only.

15 stars

0 votes

0 copies

0 views

Added 9/22/2026

securitysqlapisecurity

Works with

apimcp

Security Analysis

A100/100

Scanned 9/22/2026

Install to Claude Code

$npx -y skills add awarexone/AXguard --skill axguard-knowledge --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Axguard Knowledge?

Add the live security badge to your README — it updates automatically with every re-scan.

Security grade badge for Axguard Knowledge

[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/awarexone-axguard-knowledge/badge)](https://www.skillsdirectory.com/skills/awarexone-axguard-knowledge)

More formats (shields.io, HTML) on the badges page.

Download Zip

Files

SKILL.md

---
name: axguard-knowledge
description: Pre-ship vulnerability class encyclopedia for AXguard — root causes, static detection hints, CWE/OWASP maps, and fix guidance for IDOR, auth, XSS, SSRF, SQLi, SSTI, deserialization, path traversal, secrets, cloud, CORS, JWT, upload, GraphQL, supply chain, LLM/agent, debug exposure, and crypto misuse. Load when auditing, triaging, or remediating and a class needs depth. Defensive static review only.
---

# AXguard Knowledge

Reference skill for **pre-ship static review**. Distills web and agent vuln classes into root cause → detection → fix. Not a live exploitation handbook.

## When to load

- `/axguard-audit`, `axguard-preship`, or `axguard-cso` needs class depth
- Triage/remediate needs FP notes or fix patterns
- Mapping findings to CWE / OWASP labels for reports

## How to use

1. Read `references/vuln-classes.md` for the matching class (or skim the index below).
2. Apply to the current repo with file:line evidence.
3. Cite `references/sources.md` if the user asks where frameworks/datasets inspired the taxonomy.

## Class index

| Class | Primary CWE | OWASP (indicative) |
|-------|-------------|--------------------|
| Broken access / IDOR | CWE-639 | A01 |
| Authn / session / CSRF | CWE-287, CWE-352 | A07 |
| JWT misuse | CWE-347 | A07 / A02 |
| SQL injection | CWE-89 | A03 |
| Command / code injection | CWE-78, CWE-94 | A03 |
| SSTI | CWE-1336 | A03 |
| Insecure deserialization | CWE-502 | A08 / A03 |
| Path traversal / LFI | CWE-22, CWE-98 | A01 / A03 |
| SSRF | CWE-918 | A10 |
| XSS | CWE-79 | A03 |
| File upload | CWE-434 | A04 |
| GraphQL issues | CWE-200, CWE-352 | A01 / A05 |
| Secrets in code | CWE-798 | A07 / A02 |
| Cloud / CORS misconfig | CWE-942, CWE-284 | A05 |
| Crypto misuse | CWE-321, CWE-328, CWE-338, CWE-295 | A02 |
| Supply chain / CI | CWE-494, CWE-506 | A08 |
| Debug / verbose errors | CWE-489, CWE-209 | A05 |
| LLM / agent tool risks | CWE-77, CWE-94 | OWASP LLM |

## Domain skills (deep reasoning)

For class depth beyond this digest, load the research-backed domain skills (registry: `skills-index.yaml`):

| Need | Skill |
|------|--------|
| Threat / surface | `threat-modeling`, `attack-surface-mapping`, `security-architecture-review` |
| Identity | `authentication-analysis`, `authorization-analysis`, `session-security`, `jwt-security`, `oauth-security` |
| AppSec | `api-security`, `sql-injection`, `xss-analysis`, `ssrf-analysis`, `ssti-analysis`, `command-injection`, `path-traversal`, `file-upload-security`, `deserialization-security`, `prototype-pollution`, `graphql-security`, `websocket-security` |
| Infra | `secrets-detection`, `cloud-security`, `configuration-security`, `supply-chain-security` |
| AI | `ai-application-security`, `prompt-injection`, `ai-agent-security`, `mcp-security` |
| Ops | `security-triage`, `security-remediation` |

## Rules of engagement

- Prefer `axguard audit` / `axguard scan` for deterministic leads; this skill explains and verifies.
- Static hints only — no step-by-step attacks against third-party systems.
- When unsure: `needs-manual`, do not over-claim.

## Files

- `references/vuln-classes.md` — class distillations
- `references/sources.md` — inspiration and datasets (summaries, not verbatim copies)
- Repo-wide provenance: `references/` (frameworks, repositories, datasets, sources)

Attribution

awarexone

View source More from awarexone →

SSkills DirectorySkills Directory

Ship a skill? Prove it's safe.

Free 120-pattern security scan, letter grade, and an embeddable README badge.

Submit a skill

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments (0)

No comments yet. Be the first to comment!

--- name: axguard-knowledge description: Pre-ship vulnerability class encyclopedia for AXguard — root causes, static detection hints, CWE/OWASP maps, and fix guidance for IDOR, auth, XSS, SSRF, SQLi, SSTI, deserialization, path traversal, secrets, cloud, CORS, JWT, upload, GraphQL, supply chain, LLM/agent, debug exposure, and crypto misuse. Load when auditing, triaging, or remediating and a class needs depth. Defensive static review only. --- # AXguard Knowledge Reference skill for **pre-ship static review**. Distills web and agent vuln classes into root cause → detection → fix. Not a live exploitation handbook. ## When to load - `/axguard-audit`, `axguard-preship`, or `axguard-cso` needs class depth - Triage/remediate needs FP notes or fix patterns - Mapping findings to CWE / OWASP labels for reports ## How to use 1. Read `references/vuln-classes.md` for the matching class (or skim the index below). 2. Apply to the current repo with file:line evidence. 3. Cite `references/sources.md` if the user asks where frameworks/datasets inspired the taxonomy. ## Class index | Class | Primary CWE | OWASP (indicative) | |-------|-------------|--------------------| | Broken access / IDOR | CWE-639 | A01 | | Authn / session / CSRF | CWE-287, CWE-352 | A07 | | JWT misuse | CWE-347 | A07 / A02 | | SQL injection | CWE-89 | A03 | | Command / code injection | CWE-78, CWE-94 | A03 | | SSTI | CWE-1336 | A03 | | Insecure deserialization | CWE-502 | A08 / A03 | | Path traversal / LFI | CWE-22, CWE-98 | A01 / A03 | | SSRF | CWE-918 | A10 | | XSS | CWE-79 | A03 | | File upload | CWE-434 | A04 | | GraphQL issues | CWE-200, CWE-352 | A01 / A05 | | Secrets in code | CWE-798 | A07 / A02 | | Cloud / CORS misconfig | CWE-942, CWE-284 | A05 | | Crypto misuse | CWE-321, CWE-328, CWE-338, CWE-295 | A02 | | Supply chain / CI | CWE-494, CWE-506 | A08 | | Debug / verbose errors | CWE-489, CWE-209 | A05 | | LLM / agent tool risks | CWE-77, CWE-94 | OWASP LLM | ## Domain skills (deep reasoning) For class depth beyond this digest, load the research-backed domain skills (registry: `skills-index.yaml`): | Need | Skill | |------|--------| | Threat / surface | `threat-modeling`, `attack-surface-mapping`, `security-architecture-review` | | Identity | `authentication-analysis`, `authorization-analysis`, `session-security`, `jwt-security`, `oauth-security` | | AppSec | `api-security`, `sql-injection`, `xss-analysis`, `ssrf-analysis`, `ssti-analysis`, `command-injection`, `path-traversal`, `file-upload-security`, `deserialization-security`, `prototype-pollution`, `graphql-security`, `websocket-security` | | Infra | `secrets-detection`, `cloud-security`, `configuration-security`, `supply-chain-security` | | AI | `ai-application-security`, `prompt-injection`, `ai-agent-security`, `mcp-security` | | Ops | `security-triage`, `security-remediation` | ## Rules of engagement - Prefer `axguard audit` / `axguard scan` for deterministic leads; this skill explains and verifies. - Static hints only — no step-by-step attacks against third-party systems. - When unsure: `needs-manual`, do not over-claim. ## Files - `references/vuln-classes.md` — class distillations - `references/sources.md` — inspiration and datasets (summaries, not verbatim copies) - Repo-wide provenance: `references/` (frameworks, repositories, datasets, sources)