Find the best CLAUDE.md, AGENTS.md and Claude skills

awarexoneSkill

file-upload-security

awarexone/AXguard/file-upload-security/SKILL.md

Analyze unsafe file upload handling — use when reviewing multipart uploads, extension/MIME checks, stored filenames, image processors, or user-supplied archives (CWE-434 / A04:2021).

awarexoneSkill

graphql-security

awarexone/AXguard/graphql-security/SKILL.md

Analyze GraphQL API security — use when reviewing schemas, resolvers, introspection, batching, authorization per field, or CSRF on cookie-authenticated GraphQL endpoints (API1/API5/API8:2023).

awarexoneSkill

jwt-security

awarexone/AXguard/jwt-security/SKILL.md

Analyze JWT implementation flaws — use when reviewing alg confusion, none algorithm, missing verify, weak secrets, or claim validation gaps (A07:2021 / API2:2023 / auth.jwt rules).

awarexonePipes a download into a shellSkill

mcp-security

awarexone/AXguard/mcp-security/SKILL.md

Review Model Context Protocol servers/clients and tool bridges for trust, supply-chain, and over-privileged tool exposure before ship.

awarexoneSkill

oauth-security

awarexone/AXguard/oauth-security/SKILL.md

Analyze OAuth/OIDC integration security — use when reviewing redirect URIs, state/nonce, token handling, PKCE, or confused-deputy risks in authorization code flows (CWE-601 / A07:2021 / API2:2023).

awarexoneSkill

prompt-injection

awarexone/AXguard/prompt-injection/SKILL.md

Assess direct and indirect prompt-injection risks in LLM/AI features — use for chatbots, RAG, agents, and tool-calling apps.

awarexoneSkill

prototype-pollution

awarexone/AXguard/prototype-pollution/SKILL.md

Analyze JavaScript prototype pollution risks — use when reviewing deep merges, recursive object assigns, query-to-object parsers, or untrusted JSON key merges (CWE-1321 / A03:2021).

awarexoneSkill

security-architecture-review

awarexone/AXguard/security-architecture-review/SKILL.md

Review security architecture and trust boundaries — use for design-level control gaps across authZ, secrets, egress, multi-tenant isolation, and insecure-by-design features (A04:2021) before or with /axguard-audit.

awarexonePipes a download into a shellSkill

security-remediation

awarexone/AXguard/security-remediation/SKILL.md

Apply minimal defensive patches for confirmed findings and verify with re-audit — post-triage only.

awarexoneSkill

session-security

awarexone/AXguard/session-security/SKILL.md

Analyze session management security — use when reviewing cookie flags, session fixation, timeout, logout, concurrent sessions, or server-side session stores (A07:2021 / CWE-287 / CWE-352 adjacency).

awarexoneSkill

sql-injection

awarexone/AXguard/sql-injection/SKILL.md

Analyze SQL and ORM injection risks in application code — use for string-built queries, raw SQL helpers, and database sinks (CWE-89 / A03:2021).

awarexoneSkill

ssrf-analysis

awarexone/AXguard/ssrf-analysis/SKILL.md

Analyze and validate server-side request forgery in application code — use when reviewing outbound HTTP/fetch sinks, user-controlled URLs, webhook callbacks, previewers, or cloud metadata exposure (CWE-918 / A10:2021).

awarexoneSkill

ssti-analysis

awarexone/AXguard/ssti-analysis/SKILL.md

Analyze server-side template injection risks — use when user input reaches template engines (Jinja, Twig, Freemarker, Pug, Liquid) or dynamic template compile/render APIs (CWE-1336 / A03:2021).

awarexonePipes a download into a shellSkill

supply-chain-security

awarexone/AXguard/supply-chain-security/SKILL.md

Assess install hooks, curl|sh, untrusted indexes, and integrity gaps in dependency/build pipelines before ship (CWE-494 / CWE-506 / A06:2021 / A08:2021).

Often used withattack-chain·pentest-tools·binary-diff

awarexoneSkill

threat-modeling

awarexone/AXguard/threat-modeling/SKILL.md

Lightweight threat modeling for an application before deep scanning — map assets, trust boundaries, and abuse cases; feeds /axguard-audit.

awarexoneSkill

websocket-security

awarexone/AXguard/websocket-security/SKILL.md

Analyze WebSocket security posture — use when reviewing WS/WSS upgrade auth, origin checks, message authorization, or cross-site WebSocket hijacking risks (CWE-346 / CWE-352 / A01:2021).

awarexoneSkill

xss-analysis

awarexone/AXguard/xss-analysis/SKILL.md

Analyze and validate cross-site scripting in web/UI code — use when reviewing HTML sinks, DOM APIs, template escaping, dangerouslySetInnerHTML, or reflected/stored XSS paths (CWE-79 / A03:2021).