Claude skills and agent skills

awarexoneSkill

web3-triage-report

awarexone/web3-bug-bounty-hunting-ai-skills/web3-triage-report/SKILL.md

Bug triage validation system, Immunefi report format, and 20 real paid bounty examples dissected. Use this when validating a finding before submitting, writing an Immunefi report, checking if a bug is actually valid, or studying real examples of paid vulnerabilities.

awarexoneSkill

ai-agent-security

awarexone/AXguard/ai-agent-security/SKILL.md

Review AI agents with tools — shell, HTTP, files, browsers — for excessive agency, unsafe exec of model output, and missing human gates (CWE-78 / CWE-94).

awarexoneSkill

ai-application-security

awarexone/AXguard/ai-application-security/SKILL.md

Pre-ship security review for LLM-powered apps — RAG, chat APIs, output handling, and data exposure — without agent/tool focus.

awarexoneSkill

api-security

awarexone/AXguard/api-security/SKILL.md

Analyze REST/RPC/API security design — use for BOLA/BFLA, mass assignment, auth on endpoints, rate limits, inventory gaps, and unsafe outbound API consumption (OWASP API Top 10 2023).

Often used withattack-chain·llm-security·pentest-tools

awarexoneSkill

attack-surface-mapping

awarexone/AXguard/attack-surface-mapping/SKILL.md

Map application attack surface before deep scanning — use to inventory entry points, trust boundaries, data stores, and high-risk features that prioritize AXGuard skills and /axguard-audit.

awarexoneSkill

authentication-analysis

awarexone/AXguard/authentication-analysis/SKILL.md

Analyze authentication mechanisms — use when reviewing login, MFA, password storage, account recovery, API keys, or credential handling failures (CWE-287 / A07:2021 / API2:2023).

awarexoneSkill

authorization-analysis

awarexone/AXguard/authorization-analysis/SKILL.md

Analyze authorization and access control — use for IDOR/BOLA, missing ownership checks, privilege escalation, and function-level authZ gaps (CWE-639 / CWE-862 / CWE-863 / A01:2021 / API1:2023 / API5:2023).

awarexonePipes a download into a shellSkill

axguard-cso

awarexone/AXguard/axguard-cso/SKILL.md

Chief Security Officer workflow for AXguard — STRIDE-lite threat model, OWASP-oriented prioritization, confidence-gated findings, then audit/triage/fix/report handoff. Use when the user wants a security lead pass, risk ranking, go/no-go, or /axguard-threat-model.

awarexoneSkill

axguard-knowledge

awarexone/AXguard/axguard-knowledge/SKILL.md

Pre-ship vulnerability class encyclopedia for AXguard — root causes, static detection hints, CWE/OWASP maps, and fix guidance for IDOR, auth, XSS, SSRF, SQLi, SSTI, deserialization, path traversal, secrets, cloud, CORS, JWT, upload, GraphQL, supply chain, LLM/agent, debug exposure, and crypto misuse. Load when auditing, triaging, or remediating and a class needs depth. Defensive static review only.

awarexonePipes a download into a shellSkill

axguard-preship

awarexone/AXguard/axguard-preship/SKILL.md

Pre-ship security review checklist for the current repository. Use for focused release reviews covering auth, SQL/injection/SSTI, path, SSRF, XSS, uploads, GraphQL, crypto, secrets, cloud, supply chain, debug, and agent risks when a full /axguard-audit is not requested.

awarexonePipes a download into a shellSkill

axguard-remediate

awarexone/AXguard/axguard-remediate/SKILL.md

Apply concrete defensive fixes for confirmed AXguard findings and re-audit. Use with /axguard-fix after triage. Prefer minimal patches, critical first, then verify with axguard audit/scan.

awarexoneSkill

axguard-report

awarexone/AXguard/axguard-report/SKILL.md

Produce or polish AXguard Markdown and HTML audit reports from verified evidence. Use with /axguard-report. Prefer regenerating via axguard audit; tighten narrative only with confirmed findings.

awarexoneSkill

axguard-security

awarexone/AXguard/axguard-security/SKILL.md

Analyze code for security vulnerabilities, investigate findings, verify fixes, and assess security risk before deployment. Use when reviewing security-sensitive changes, before ship/deploy, or when an agent should call AXGuard MCP instead of inventing its own scanner.

awarexoneSkill

cloud-security

awarexone/AXguard/cloud-security/SKILL.md

Review cloud and CORS misconfiguration in app code and IaC-adjacent configs — metadata URLs, public buckets, wildcard origins (CWE-918 / CWE-942 / A05:2021 / A10:2021).

awarexoneSkill

command-injection

awarexone/AXguard/command-injection/SKILL.md

Analyze OS command and shell injection in application code — use when reviewing subprocess, exec, system, shell=True, or user-influenced shell strings (CWE-78 / CWE-77 / A03:2021).

awarexoneSkill

deserialization-security

awarexone/AXguard/deserialization-security/SKILL.md

Analyze unsafe deserialization and object-decode sinks — use when reviewing pickle, YAML load, Java ObjectInputStream, PHP unserialize, or untrusted serialized blobs (CWE-502 / A08:2021).

awarexoneSkill

file-upload-security

awarexone/AXguard/file-upload-security/SKILL.md

Analyze unsafe file upload handling — use when reviewing multipart uploads, extension/MIME checks, stored filenames, image processors, or user-supplied archives (CWE-434 / A04:2021).

awarexoneSkill

graphql-security

awarexone/AXguard/graphql-security/SKILL.md

Analyze GraphQL API security — use when reviewing schemas, resolvers, introspection, batching, authorization per field, or CSRF on cookie-authenticated GraphQL endpoints (API1/API5/API8:2023).

awarexoneSkill

jwt-security

awarexone/AXguard/jwt-security/SKILL.md

Analyze JWT implementation flaws — use when reviewing alg confusion, none algorithm, missing verify, weak secrets, or claim validation gaps (A07:2021 / API2:2023 / auth.jwt rules).

awarexonePipes a download into a shellSkill

mcp-security

awarexone/AXguard/mcp-security/SKILL.md

Review Model Context Protocol servers/clients and tool bridges for trust, supply-chain, and over-privileged tool exposure before ship.