Skill UI

Ports existing Semgrep rules into new language variants, guiding applicability analysis, test-first creation, and validation so teams can expand rule coverage across polyglot codebases with confidence.

Walk through building custom shaders in Three.js, covering ShaderMaterial vs RawShaderMaterial, uniform types, varyings, and common patterns like texture sampling, vertex displacement, and Fresnel effects for advanced visual tweaks.

Performs pattern-based variant analysis to find similar bugs and vulnerabilities across a codebase after an initial issue, guiding search scope, abstraction, and triage to refine CodeQL/Semgrep queries and document risk.

Varlock Secret Guard ensures Claude Code sessions manage environment variables securely by masking secrets, validating schemas, and running CLI commands without leaking sensitive data or logging values.

Rigorously dissects code and architecture through advanced mathematics—graph theory, category theory, stochastic systems, information theory, and formal invariants—to uncover hidden structure and optimize performance.

Uses the Malpedia API to research malware family links, connect variants to threat actors, extract YARA rules, and monitor lineages for threat hunting and detection.

Analyzes Zeek conn.log intervals with ZAT to compute jitter metrics and flag low-variance periodic connections, helping SOC analysts hunt for command-and-control callbacks and validate monitoring coverage.

Apply frequency analysis, jitter metrics, and coefficient-of-variation scoring to Zeek/proxy logs and SIEM data to surface periodic C2 beaconing, enrich with threat intelligence, correlate endpoints, and prioritize high-risk callbacks during threat hunting.

Guide to collecting and analyzing ransomware artifacts—notes, encrypted samples, logs—to identify variants, trace the attack chain, and support recovery or legal follow-up.

This tool is designed for security professionals to test for Server-Side Request Forgery (SSRF) vulnerabilities. It systematically probes user-controllable URL parameters to identify access to internal network services, cloud metadata endpoints (AWS/GCP/Azure), and restricted local resources. It supports various payload techniques, including protocol handlers (gopher, file), IP encoding, and DNS rebinding, making it essential for thorough security assessments and penetration testing.

A comprehensive skill for identifying and exploiting Cross-Site Scripting (XSS) vulnerabilities in web applications. It systematically tests reflected, stored, and DOM-based contexts by injecting various JavaScript payloads. The process involves mapping all user input points, identifying output contexts (HTML body, attribute, JS string, etc.), and crafting payloads to bypass sanitization and Content Security Policy (CSP) protections, simulating real-world attacks like session hijacking and credential theft.

AgentHub spawns parallel git worktree agents that compete on tasks, evaluates their outputs via metrics or LLM judges, and merges the top branch for optimizations, research, or content variations.