Sean Nejad
Community@allsmog
Security researcher & builder focused on ProdSec/AppSec, with interests in NatSec, OSINT, and applied security systems.
Agent Skills by Sean Nejad
Showing 17 vetted skills indexed across 1 GitHub repositories.
allsmogSecurity Misconfiguration
Detect security misconfigurations across programming languages and frameworks.
allsmogOWASP 2025 Mapping
Map OWASP Top 10 2025 categories to CWEs with grep detection patterns.
allsmogData Flow Tracing
Trace data from input sources to security-sensitive sinks in application codebases.
allsmogWorkspace Discovery
Identifies and analyzes monorepo workspace structures across multiple programming languages and package managers for security scoping.
allsmogExploit Techniques
Generate Python exploit templates for SQL and command injection vulnerabilities.
allsmogCache Poisoning
Detect HTTP cache poisoning and web cache deception vulnerabilities across proxies and CDNs.
allsmogcpg-analysis
Trace data flows and verify vulnerabilities using Code Property Graphs and CPGQL.
allsmogDOM XSS via postMessage
Detects DOM XSS vulnerabilities from insecure postMessage usage in JavaScript and TypeScript codebases.
allsmogThreat Modeling
Identify security threats via STRIDE analysis and data flow diagrams.
allsmogVulnerability Patterns
Identify web vulnerability patterns and exploitation flows for whitebox penetration testing.
allsmogDangerous Functions
Identify security-sensitive functions and sinks across multiple programming languages.
allsmogCryptographic Failures
Detects cryptographic failures including weak hashing algorithms and insecure encryption across multiple languages.
allsmogMixed-Language Monorepos
Audit security of polyglot monorepos with language detection and cross-service threat modeling.
allsmogException Handling Vulnerabilities
Detect and mitigate exception handling vulnerabilities across Java, Python, PHP, Go, and TypeScript.
allsmogSensitive Data Leakage
Detect sensitive data flow to logs, errors, and HTTP responses in Go, Python, Java, and JavaScript/TypeScript.
allsmogLogging Failures
Detect logging failures and apply secure coding practices across Python, Java, Go, TypeScript, and PHP.
allsmogBusiness Logic Analysis
Analyze application business logic for flaws in workflows and trust boundaries.