Skill UI

Scans Algorand TEAL/PyTeal smart contracts for 11 platform-specific vulnerabilities such as rekeying, unchecked fees, group manipulation, and missing access controls, then reports findings with severity, suggested fixes, and optional Tealer automation.

Scans Cairo/StarkNet smart contracts for six critical issues spanning felt252 arithmetic, messaging, access control, and signature replay, reporting severity and fixes to support audits, bridge reviews, and pre-launch security checks.

Run comprehensive web application security assessments through Burp Suite’s proxy, repeater, and scanner features to intercept, modify, and analyze HTTP traffic while spotting vulnerabilities for remediation planning.

Scans Cosmos SDK chains and CosmWasm contracts for nine consensus-critical vulnerabilities such as non-determinism, incorrect GetSigners, and ABCI panics, returning findings and fix guidance when auditing or preparing new launches.

Scans Android APKs for Firebase misconfigurations, testing databases, storage, authentication, and cloud functions to surface vulnerabilities during mobile security audits.

This skill acts as a comprehensive security scanner specializing in detecting Cross-Site Scripting (XSS) vulnerabilities in client-side code. It performs static analysis across React, Vue, Angular, and vanilla JavaScript, specifically identifying unsafe practices like direct HTML manipulation (innerHTML), raw rendering (v-html), and insecure URL handling. Use it when auditing frontend code for security flaws and needing best practices for secure coding.

|

Automated license compliance scanner guidance for Security Fundamentals, delivering step-by-step practices, best-practice patterns, and production-ready code plus validation to keep authentication, validation, and secure coding efforts aligned.

A mandatory workflow for ensuring high code quality across multiple ecosystems, including Node.js/TypeScript and Python. This pipeline runs static analysis tools—such as linters, type checkers (MyPy, tsc), and security scanners (Bandit)—after every code change. It mandates that no task is considered 'done' or committed until all validation checks pass, resolving style, syntax, and type mismatches.

Guides users through advanced network security scanning tasks by offering best-practice workflows, code/config generation, and validation for compliance, penetration testing, and enterprise security scenarios.

Automates vulnerability scans for applications and APIs via the security-test-scanner plugin, covering OWASP Top 10, SQL injection, XSS, CSRF, authentication, and authorization weaknesses while generating detailed remediation reports.

Parses SARIF files from scanners like CodeQL or Semgrep, offering filtering, deduplication, format conversion, and CI/CD integration without running scans itself.