Analyze source code for security issues using the ASVS 5.0 framework.
npx skills add https://github.com/0x0pointer/skills --skill codebase-0x0pointer
Please help me install this Agent Skill. Skill: codebase Source: https://github.com/0x0pointer/skills/tree/main/codebase Command: npx skills add https://github.com/0x0pointer/skills --skill codebase-0x0pointer
Many penetration testing engagements lack deep insight into the application’s internals, leading to missed vulnerabilities and inefficient testing. This Skill provides a comprehensive white‑box source code review that builds a security‑aware knowledge base, enabling more precise and effective downstream testing.
Invoke the codebase skill with the path to your source directory and optionally specify a review depth such as quick, standard, or thorough.
High-intent search queries and answers about installing and using this skill.
White-box source code review maps application architecture, endpoints, and dangerous patterns using the ASVS 5.0 framework. It analyzes local codebases to build a security-aware knowledge base for precise pentesting preparation.
Endpoint and authentication mapping is performed by analyzing application source code to generate a full inventory of routes, services, and auth mechanisms. This produces a comprehensive architecture map for targeted pentesting.
Yes, you can filter static analysis to focus on specific dangerous code patterns. The Skill accepts optional focus filters alongside a local codebase path and depth setting to guide the review toward injection or deserialization risks.
Yes, the codebase review detects LLM integration security risks like prompt injection. When LLM libraries are present, it identifies insecure tool usage and prompt-injection vulnerabilities during comprehensive source code analysis.
Aligning vulnerability findings with OWASP ASVS compliance involves mapping dangerous code patterns directly to the ASVS 5.0 framework during source code review. This guides remediation and generates compliance reporting for the application.
Available depth settings for ASVS source code analysis include quick, standard, and thorough. You specify the review depth alongside the local codebase path to control the scope of security pattern detection.
Q16GOrchestrate gray-box testing by combining white-box candidate discovery with black-box request validation.
kiwamizamuraiAnalyze binaries to identify protections, vulnerabilities, and exploit starting points.
LuisSambranoPerform systematic code review and static analysis across multiple programming languages.
htooayelwinictAudit Laravel and React code for OWASP Top 10 vulnerabilities.
