Explore skills

This skill performs security audits for meme coins and tokens, detecting rug pulls, analyzing Solana SPL tokens, and identifying Token-2022 extension risks. It also covers DEX liquidity pool attacks and integration risks with platforms like pump.fun, Raydium, and Jupiter.

Methodology for detecting client SOC patches, attacker activity, and security-state changes during a red-team engagement, converting these observations into deliverable findings. This approach is based on real red-team work where clients patched vulnerabilities quickly and external attackers were active.

Smart contract security audit covering 10 DeFi bug classes (accounting desync, access control, etc.), pre-audit kill signals, Foundry PoC template, grep patterns, and Immunefi examples. Useful for Solidity/Rust audits or evaluating DeFi targets.

Apply modern web development best practices for security, compatibility, and code quality. Use when asked to "apply best practices", "security audit", "modernize code", "code quality review", or "check for vulnerabilities".

This skill covers WPS PIN attack methodologies, including the Pixie Dust offline attack against vulnerable chipsets and online PIN brute-force with reaver/bully. It also addresses lockout handling, time-of-day evasion, WPS push-button vulnerabilities, and PIN-to-PSK derivation, useful when targeting SOHO routers with WPS enabled.

Audit connected MCP servers for token overhead, redundancy, and security. Use when sessions feel slow or before adding new MCPs.

CTF Reverse Engineering techniques for analyzing unknown binaries, cracking game client verifications, de-obfuscating code, and interpreting custom VMs. It covers static/dynamic analysis, anti-debugging bypass, and multi-platform reverse engineering for WASM, .NET, APK, Python bytecode, Go, and Rust.

Audit token waste across agent systems (Claude Code, Codex, OpenClaw, Hermes, OpenCode). Detect idle burns, model misrouting, and config bloat with dollar savings.

Find the ghost tokens. Audit Claude Code or Codex setup, see where context goes, fix it. Use when context feels tight.

Audit your OpenClaw setup for token waste, context bloat, and cost optimization opportunities

AgentShield security audit with 5 scanning categories, 102 static analysis rules, and optional red-team simulation.

Security vulnerability assessment identifying OWASP risks, injection vectors, authentication issues, and data exposure with severity classification.