Find the best CLAUDE.md, AGENTS.md and Claude skills

awarexoneSkill

web3-methodology-research

awarexone/web3-bug-bounty-hunting-ai-skills/web3-methodology-research/SKILL.md

External research synthesis from Trail of Bits, SlowMist, ConsenSys, Immunefi, and Cyfrin. Use this for advanced audit methodology, Echidna/Medusa fuzzing setup, Slither custom detector writing, attack pattern deep dives, or the 4-phase learning roadmap.

awarexoneSkill

web3-start-here

awarexone/web3-bug-bounty-hunting-ai-skills/web3-start-here/SKILL.md

Master index for the web3 smart contract security knowledge base. Use this to navigate the skill chain. Read files in order — each ends with NEXT.

awarexoneSkill

web3-triage-report

awarexone/web3-bug-bounty-hunting-ai-skills/web3-triage-report/SKILL.md

Bug triage validation system, Immunefi report format, and 20 real paid bounty examples dissected. Use this when validating a finding before submitting, writing an Immunefi report, checking if a bug is actually valid, or studying real examples of paid vulnerabilities.

awarexoneAGENTS.md

AXguard

awarexone/AXguard/AGENTS.md

axguard-security teaches when to call AXGuard and which MCP tool to use (axguardsecurityreview, axguardinvestigate, axguardverify_fix). Prefer MCP when available; CLI as fallback.

awarexoneSkill

ai-agent-security

awarexone/AXguard/ai-agent-security/SKILL.md

Review AI agents with tools — shell, HTTP, files, browsers — for excessive agency, unsafe exec of model output, and missing human gates (CWE-78 / CWE-94).

awarexoneSkill

ai-application-security

awarexone/AXguard/ai-application-security/SKILL.md

Pre-ship security review for LLM-powered apps — RAG, chat APIs, output handling, and data exposure — without agent/tool focus.

awarexoneSkill

api-security

awarexone/AXguard/api-security/SKILL.md

Analyze REST/RPC/API security design — use for BOLA/BFLA, mass assignment, auth on endpoints, rate limits, inventory gaps, and unsafe outbound API consumption (OWASP API Top 10 2023).

Often used withattack-chain·llm-security·pentest-tools

awarexoneSkill

attack-surface-mapping

awarexone/AXguard/attack-surface-mapping/SKILL.md

Map application attack surface before deep scanning — use to inventory entry points, trust boundaries, data stores, and high-risk features that prioritize AXGuard skills and /axguard-audit.

awarexoneSkill

authentication-analysis

awarexone/AXguard/authentication-analysis/SKILL.md

Analyze authentication mechanisms — use when reviewing login, MFA, password storage, account recovery, API keys, or credential handling failures (CWE-287 / A07:2021 / API2:2023).

awarexoneSkill

authorization-analysis

awarexone/AXguard/authorization-analysis/SKILL.md

Analyze authorization and access control — use for IDOR/BOLA, missing ownership checks, privilege escalation, and function-level authZ gaps (CWE-639 / CWE-862 / CWE-863 / A01:2021 / API1:2023 / API5:2023).

awarexonePipes a download into a shellSkill

axguard-cso

awarexone/AXguard/axguard-cso/SKILL.md

Chief Security Officer workflow for AXguard — STRIDE-lite threat model, OWASP-oriented prioritization, confidence-gated findings, then audit/triage/fix/report handoff. Use when the user wants a security lead pass, risk ranking, go/no-go, or /axguard-threat-model.

awarexoneSkill

axguard-knowledge

awarexone/AXguard/axguard-knowledge/SKILL.md

Pre-ship vulnerability class encyclopedia for AXguard — root causes, static detection hints, CWE/OWASP maps, and fix guidance for IDOR, auth, XSS, SSRF, SQLi, SSTI, deserialization, path traversal, secrets, cloud, CORS, JWT, upload, GraphQL, supply chain, LLM/agent, debug exposure, and crypto misuse. Load when auditing, triaging, or remediating and a class needs depth. Defensive static review only.

awarexonePipes a download into a shellSkill

axguard-preship

awarexone/AXguard/axguard-preship/SKILL.md

Pre-ship security review checklist for the current repository. Use for focused release reviews covering auth, SQL/injection/SSTI, path, SSRF, XSS, uploads, GraphQL, crypto, secrets, cloud, supply chain, debug, and agent risks when a full /axguard-audit is not requested.

awarexonePipes a download into a shellSkill

axguard-remediate

awarexone/AXguard/axguard-remediate/SKILL.md

Apply concrete defensive fixes for confirmed AXguard findings and re-audit. Use with /axguard-fix after triage. Prefer minimal patches, critical first, then verify with axguard audit/scan.

awarexoneSkill

axguard-report

awarexone/AXguard/axguard-report/SKILL.md

Produce or polish AXguard Markdown and HTML audit reports from verified evidence. Use with /axguard-report. Prefer regenerating via axguard audit; tighten narrative only with confirmed findings.

awarexoneSkill

axguard-security

awarexone/AXguard/axguard-security/SKILL.md

Analyze code for security vulnerabilities, investigate findings, verify fixes, and assess security risk before deployment. Use when reviewing security-sensitive changes, before ship/deploy, or when an agent should call AXGuard MCP instead of inventing its own scanner.

awarexoneCLAUDE.md

AXguard

awarexone/AXguard/CLAUDE.md

Pre-ship security gate. Skills + slash commands for auditing source and build artifacts before publish. Full catalog: COMMANDS-QUICK-REF.md · README.md MCP (AI coding agents): pip install -e '.[mcp]' → axguard mcp · skill axguard-security · docs/mcp.md

awarexoneSkill

cloud-security

awarexone/AXguard/cloud-security/SKILL.md

Review cloud and CORS misconfiguration in app code and IaC-adjacent configs — metadata URLs, public buckets, wildcard origins (CWE-918 / CWE-942 / A05:2021 / A10:2021).

awarexoneSkill

command-injection

awarexone/AXguard/command-injection/SKILL.md

Analyze OS command and shell injection in application code — use when reviewing subprocess, exec, system, shell=True, or user-influenced shell strings (CWE-78 / CWE-77 / A03:2021).

awarexoneSkill

deserialization-security

awarexone/AXguard/deserialization-security/SKILL.md

Analyze unsafe deserialization and object-decode sinks — use when reviewing pickle, YAML load, Java ObjectInputStream, PHP unserialize, or untrusted serialized blobs (CWE-502 / A08:2021).