Agent skills for HTTP / API

Use when the user takes over an inherited system, codebase, server, or cloud account from a prior developer — or when leaked secrets, open…

Perform language and framework specific security best-practice reviews and suggest improvements.

Build a minimal but real security policy for sensitive apps.

Hunt for exploitable, bounty-worthy security issues in repositories.

Comprehensive AI-powered security scanning suite with 48 skills covering OWASP Top 10, 7 language-specific deep scanners (Go, TypeScript…

Adversarial defense layer for the mortgage plugin — protects against prompt injection, system prompt extraction, PII leakage, workflow…

AIDefence security layer with prompt injection blocking, input validation, sandboxed execution, output sanitization, and STRIDE threat…

Generated code must be aligned with security headers (e.g. no unsave JS eval).

Web security headers validation and configuration generation

Analyze git repositories to build a security ownership topology (people-to-file), compute bus factor and sensitive-code ownership, and…

Implements authentication, authorization, encryption, secrets management, and security hardening patterns.

Analyze code, infrastructure, and configurations by conducting comprehensive

Derive security requirements from threat models and business context.

This skill ensures all code follows security best practices and identifies potential vulnerabilities.

Isolated analysis environment management for malware and exploit testing.

Run full security scans on the codebase using Ruflo security tools.

Run security scans including SAST, dependency scanning, and secret detection

AgentShield security audit with 5 scanning categories, 102 static analysis rules, and optional red-team simulation.

Test automate security vulnerability testing covering OWASP Top 10,

Conducts systematic security analyses using methodologies like STRIDE to identify vulnerabilities in software architectures and propose…

Verify code for security issues including hardcoded secrets, input validation, error exposure, and dependency vulnerabilities.