Agent Skills by jango
Showing 46 vetted skills indexed across 1 GitHub repositories.
ask-questions-if-underspecified
Prompt essential clarifying questions for underspecified requests.
audit-context-building
Analyze code line-by-line to build architectural context for security audits.
entry-point-analyzer
Identify state-changing entry points in multi-language smart contracts.
semgrep-rule-creator
Generate Semgrep rule YAML files with test cases and documentation.
constant-time-analysis
Detect timing side-channel vulnerabilities in cryptographic assembly and bytecode.
property-based-testing
Guide property-based testing across languages and smart contracts.
differential-review
Analyze code diffs for security vulnerabilities and regressions.
variant-analysis
Identify vulnerability variants across codebases using ripgrep, Semgrep, and CodeQL.
spec-to-code-compliance
Verifies blockchain code against documentation to identify specification gaps.
sharp-edges
Identify security footguns in API designs, configurations, and cryptographic interfaces.
semgrep
Automate code security scanning and pattern detection with Semgrep.
sarif-parsing
Parse SARIF 2.1.0 files to extract and deduplicate findings.
codeql
Run CodeQL static analysis to detect security vulnerabilities and data-flow issues.
address-sanitizer
Enable AddressSanitizer to detect memory errors in C/C++ fuzz targets.
harness-writing
Design fuzzing harnesses for C/C++, Rust, and Go with deterministic input handling.
aflpp
Automate AFL++ fuzz testing of C/C++ software to uncover crashes and memory-safety bugs.
libfuzzer
Fuzz C/C++ code with libFuzzer to uncover crashes and security issues.
constant-time-testing
Detect timing side channels in cryptographic implementations using statistical, dynamic, and formal analysis.
libafl
Build modular fuzzers in Rust with pluggable observers, feedback, and mutators.
coverage-analysis
Identify unexercised code paths during fuzzing campaigns using LLVM coverage tools.
testing-handbook-generator
Generate Claude Code skills from Testing Handbook sections with YAML frontmatter.
fuzzing-obstacles
Patch code with conditional compilation flags to bypass checksum and validation obstacles for fuzzing builds.
ruzzy
Automates coverage-guided fuzzing of Ruby applications and native C extensions with AddressSanitizer/UBSan support via clang toolchain and ruzzy gem.
burp-suite
Identify web application vulnerabilities using Burp Suite Proxy, Repeater, and Intruder.