perseus
Automated code security scanning, exploit verification, and reporting
All Skills in This Repository (15)
Pure Emerald Level Indicatorsperseus:exploit
Generate and validate exploit scripts for web vulnerabilities with safety constraints.
using-perseus
Guide Claude Code through the four-phase Perseus security assessment workflow.
perseus:start
Automate end-to-end codebase security assessments across languages and frameworks.
perseus:scan
Map target architecture, entry points, and security patterns into a Target Knowledge Graph.
perseus:audit
Trace untrusted data from sources to sinks to reveal exploits across Injection, XSS, Auth, Authz, and SSRF scenarios.
perseus:report
Synthesize Perseus Scan, Audit, Exploit, and Specialist findings into a formal executive security report.
perseus-crypto
Analyze JWT, hashing, encryption, and key management across codebases.
perseus-config
Analyze security configurations across web servers, containers, CI/CD, and cloud deployments.
perseus-logic
Analyzes business logic vulnerabilities, race conditions, and AI security risks in web applications.
perseus-specialist
Coordinates eight Perseus specialist skills in parallel for comprehensive security analysis.
perseus-file
Detect file security vulnerabilities and provide remediation patterns for web backends.
perseus-injection
Analyze deep injection vulnerabilities across NoSQL, LDAP, XPath, template engines, and OS commands.
Frequently Asked Questions
FAQPage SchemaHow to install Perseus?โผ
Run `npx skills add kaivyy/perseus --all -g -y` in your terminal to install all security skills globally.
How to run a security audit on my codebase?โผ
Invoke the start skill to run a full four-phase assessment: reconnaissance, vulnerability analysis, safe exploit verification, and executive reporting. It auto-detects your language, framework, database, and infrastructure.
What vulnerabilities does Perseus detect?โผ
It covers SQL and NoSQL injection, XSS, SSRF, auth bypass, JWT and crypto flaws, path traversal, XXE, race conditions, supply chain CVEs, and Docker, CI/CD, cloud, and Kubernetes misconfigurations.
Is Perseus safe to run on production code?โผ
Yes. It defaults to a production-safe mode using passive analysis and harmless payloads like alert(1) or sleep timers, with kill-switch thresholds that stop testing if service stability is affected.
Does Perseus work with Claude Code, Codex, and OpenCode?โผ
Yes. All skills follow the universal SKILL.md standard and include install configurations for Claude Code, Codex, and OpenCode.
Related Repositories in Software Engineering
View All in Software Engineeringโopenclaw
Run a personal AI assistant across your devices and chat apps
superpowers
Gives coding agents a disciplined workflow from idea to merged code
react
AI agent skills for building, testing, and porting React core