JoranHonigCommunity·18 Agent Skills Included

grimoire

Security audit workflows, findings, and proof-of-concept generation

Guides security researchers through full audit workflows: mapping codebases, drafting findings, writing proof-of-concept exploits, and deduplicating results. Eliminates repetitive context rebuilding by storing flow maps, reusable detection checks, and searchable reference libraries. Turns confirmed vulnerabilities into reusable detection modules so every audit makes the next one faster.

63|8

↗

npx skills add JoranHonig/grimoire --all -g -y

Available:

Tells the agent how the plugin is structured, which skills exist, and the safety rules (benign payloads, authorized contexts only) to follow when running security research workflows.

All Skills in This Repository (18)

Pure Emerald Level Indicators

📦 In Repo

JoranHonig

finding-review

Validate security finding files for structure, severity, and cited sources.

librarian-library-search

Search Qdrant-backed libraries with semantic vector queries and return ranked JSON results.

finding-dedup

Classify duplicate, similar, or distinct security finding pairs.

finding

Structure security findings with vulnerability, impact, and remediation details.

checks

Create and manage markdown vulnerability pattern checks for code flaw detection.

write-poc

Generate parameterized, benign proof-of-concept code for security vulnerabilities.

modify-library

Mutate libraries.yaml entries for git and symlink libraries with validation.

librarian-clean-cache

Remove contents of the librarian cache directory after user confirmation.

annotation

Extract @audit annotation comments from codebases into structured metadata.

gc-cartography

Detect overlapping cartography flows and output structured merge plans.

review-cartography

Verify and refine cartography files against repository code.

scribe-distill

Convert confirmed security findings into automated detection modules with YAML frontmatter.

Community

Intermediate

Frequently Asked Questions

FAQPage Schema

How to install Grimoire?▼

Run `npx skills add JoranHonig/grimoire --all -g -y` in your terminal to install all skills globally.

What does Grimoire do for security audits?▼

It helps you map codebases, draft and review structured vulnerability findings, write proof-of-concept exploits, and build reusable detection checks from confirmed bugs.

How do I start an audit with Grimoire?▼

Run the summon skill on your target codebase. It analyzes the architecture, identifies high-value attack targets, and creates a GRIMOIRE.md context map for the engagement.

Can Grimoire write proof-of-concept exploits?▼

Yes. The write-poc skill produces minimal, verifiable PoCs for smart contracts, web apps, and other targets using benign payloads and parameterized test environments.

Does Grimoire work for bug bounty hunting?▼

Yes. Summon can fetch scope directly from Immunefi or Cantina program URLs, clone the in-scope repositories, and set up a complete audit workspace automatically.