Audit

App: Prized

Describe an internal tool in plain English and Prized builds and deploys it, scoped to connectors an admin approved and logged end to end.

App: Decawork

An IT control plane that puts every internal AI agent — whoever built it and in whatever tool — behind one identity, access policy and audit trail.

Skill: Differential Security Review

by Trail of Bits

Featured

Trail of Bits' security review skill for PRs, commits, and diffs: risk-first analysis with git history, blast radius, and honest coverage limits.

Skill: NVIDIA Skill Card Generator

by NVIDIA

Generates or refreshes an NVIDIA governance skill card for an existing agent skill — discovers assets, renders a deterministic markdown card, and blocks submission while human-review markers remain.

Skill: SAIL — Secure AI Lifecycle

by Pillar Security

Pillar Security's SAIL V2 framework as an agent skill: a 91-risk catalogue across seven lifecycle phases, for AI security gap assessments, roadmaps, and ISO 42001 / EU AI Act compliance checklists.

Skill: Zeroize Audit

by Trail of Bits

Finds secrets left in memory in C, C++ and Rust — including wipes the compiler deleted — and requires IR or assembly evidence before calling one optimized away.

Skill: Supply Chain Risk Auditor

by Trail of Bits

Audits npm, PyPI and Go dependencies for advisories, abandoned upstreams, publisher concentration and install-time scripts — measured by scripts, not estimated.

Skill: Constant-Time Analysis

by Trail of Bits

Compiles cryptographic code and reads the emitted assembly for variable-time instructions, then triages which flagged operations actually touch secrets.

Skill: CodeQL Security Analysis

by Trail of Bits

Trail of Bits' CodeQL skill: build databases, run taint-tracking and data-flow queries across eight languages, and model project-specific sources and sinks.

Skill: Semgrep Rule Creator

by Trail of Bits

Trail of Bits' skill for writing production-quality Semgrep rules — pattern design, taint mode for data-flow bugs, and mandatory test-driven validation.

Skill: Firebase Security Rules Auditor

by Firebase

Firebase's official red-team skill for auditing Firestore and Cloud Storage security rules — hunting privilege escalation, create/update bypasses and resource-exhaustion holes.

Skill: GitHub Actions Security Review

by Sentry

Audit GitHub Actions workflows for the exploitation patterns that leak secrets or allow code execution from a fork.

Skill: Find Bugs in Branch Changes

by Sentry

Audit the changes on your current branch for bugs, security vulnerabilities, and quality problems before you push.

Skill: Web Performance Auditing

by Cloudflare

Audit Core Web Vitals with real measurements via Chrome DevTools — then fix what the numbers actually point to.

MCP: Vanta

by Vanta

Featured

Vanta's official remote MCP server — query controls, tests, vendors, vulnerabilities and policies across SOC 2 and ISO 27001, and remediate failing tests from your agent.