Generate parameterized, benign proof-of-concept code for security vulnerabilities.
npx skills add https://github.com/JoranHonig/grimoire --skill write-poc
Please help me install this Agent Skill. Skill: write-poc Source: https://github.com/JoranHonig/grimoire/tree/main/skills/write-poc Command: npx skills add https://github.com/JoranHonig/grimoire --skill write-poc
Security researchers and auditors often struggle to produce clear, reproducible proof-of-concept code that demonstrably proves a vulnerability while remaining safe and easy for maintainers to run and triage. This skill enforces a structured approach so PoCs are minimal, parameterized, and accompanied by clear explanations and success indicators.
Ask the write-poc skill to create a minimal, benign PoC that demonstrates a reflected XSS in /search using alert(1) and targets localhost as a parameterized target.
High-intent search queries and answers about installing and using this skill.
To write a safe proof-of-concept exploit, use a structured workflow that generates parameterized, benign payloads targeting localhost. This approach ensures PoCs are minimal, testable artifacts accompanied by clear explanations for maintainers to run locally for triage.
The best way to create a minimal proof-of-concept for smart contract vulnerabilities is to generate unit tests or fork tests using Foundry conventions. This produces reproducible demonstrations that clearly prove the vulnerability while remaining safe for maintainers to execute.
Yes, you can generate PoC scripts for web application vulnerabilities like reflected XSS. The process creates single-file scripts with benign payloads, such as alert(1), parameterized to target localhost, ensuring the demonstration is safe and easy for maintainers to run locally.
The PoC generation process ensures payloads remain benign by applying safety-first conventions and a validation script that warns about dangerous patterns. It enforces structured templates, parameterized targets, and independent review steps to verify the exploit demonstration is safe.
Foundry is not strictly required to generate proof-of-concept code, but the workflow provides specific guidance for Foundry conventions and integrates with forge-poc-templates. It also supports general unit tests and single-file scripts for native binaries and web applications.
Structured templates for security exploit demonstrations limit flexibility by enforcing parameterized targets like localhost and benign payloads. If your vulnerability demonstration requires destructive actions or non-parameterized live targets, this safety-first approach will restrict the exploit flow.
yaklangRoute web and API security tasks to testing methodologies and vulnerability categories.
williabyAutomates security validation, vulnerability scanning, and compliance checks for development environments.
mochi-mindsAutomate Solidity project setup, testing, and deployment with Foundry commands.
zebbernAutomate red-team reconnaissance and vulnerability discovery workflows.
