Utku Sen
Community@utkusen · London, United Kingdom
Agent Skills by Utku Sen
Showing 16 vetted skills indexed across 1 GitHub repositories.
sast-ssrf
Identifies and quantifies SSRF vulnerabilities by tracing user input to outbound network calls.
sast-hardcodedsecrets
Scan codebases for hardcoded secrets and write findings to markdown files.
sast-pathtraversal
Trace user-controlled path inputs through file operations and report path traversal vulnerabilities.
sast-sqli
Detect SQL injection vulnerabilities via recon, parallel verification, and merged results.
sast-graphql
Detect unsafe GraphQL operation document construction with user input tracing.
sast-businesslogic
Identify business logic vulnerabilities and generate prioritized threat scenarios.
sast-analysis
Map codebase architecture and technology stack into sast/architecture.md.
sast-missingauth
Detect missing authentication and broken function-level authorization in codebases.
sast-report
Consolidate SAST findings from sast/*-results.md into a prioritized final-report.md.
sast-idor
Identify and map IDOR vulnerabilities in REST or GraphQL endpoints.
sast-ssti
Trace dynamic template strings to detect SSTI vulnerabilities across multi-language codebases.
sast-xss
Detect Cross-Site Scripting vulnerabilities by tracing user input through rendering sinks.
sast-xxe
Identify and document XML parsing points vulnerable to XXE across a codebase.
sast-fileupload
Identify insecure file upload vulnerabilities and compile findings into sast/fileupload-results.md.
sast-rce
Map user-controlled data to dangerous sinks and write RCE findings to rce-results.md.
sast-jwt
Map JWT issuance and verification patterns to identify insecure implementations.