Home / mukul975 / Anthropic-Cybersecurity-Skills
AI Slop Code RIsk Monitor

mukul975/Anthropic-Cybersecurity-Skills

817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0

18.7 Elevated pattern signal View on GitHub

Maintenance and Governance Review

This report summarizes scanner evidence for mukul975/Anthropic-Cybersecurity-Skills, a Python project with 34,188 GitHub stars. SynthScan examined 587,916 lines of code across 3707 source files, recording 7112 pattern matches distributed across 21 syntactic categories. The legacy adjusted pattern signal is 18.7 (Elevated pattern signal); it is not an authorship estimate.

Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.

18.7
Adjusted Signal
18.7
Raw Pattern Score
100%
Time Factor
2026-08-31
Last Push
34.2K
Stars
Python
Language
587.9K
Lines of Code
3.7K
Files
7.1K
Pattern Hits
2026-10-12
Scan Date
0.11
HC Hit Rate

Risk Review · v3

Use each vector to guide manual verification of the underlying findings.

Cognitive Ownership Risk 43.8/100 · MEDIUM

Can maintainers explain intent, assumptions, and trade-offs? 5031 finding(s).

Hallucinated Dependency & Supply Chain Risk 8.0/100 · LOW

Are imports declared and package/API names verified? 680 finding(s).

Agent Over-Engineering Ratio 29.4/100 · MEDIUM

Are wrappers, guards, and repeated structures necessary? 2280 finding(s).

PR Review Velocity Impact 56.9/100 · HIGH

Which changes need focused human review? 7112 finding(s).

What These Metrics Mean

Adjusted Signal
Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score
Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor
A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits
Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate
High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files
Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 396MEDIUM 402LOW 6314

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 7112 distinct pattern matches across 21 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Structural Annotation Overuse2886 hits · 4564 pts
SeverityFileLineSnippetContext
LOW…rming-malware-hash-enrichment-with-virustotal/SKILL.md72### Step 1: Query VirusTotal for Hash ReportCOMMENT
LOW…rming-malware-hash-enrichment-with-virustotal/SKILL.md165### Step 2: Batch Hash Enrichment with Rate LimitingCOMMENT
LOW…rming-malware-hash-enrichment-with-virustotal/SKILL.md205### Step 3: Extract Network Indicators for PivotingCOMMENT
LOW…rming-malware-hash-enrichment-with-virustotal/SKILL.md257### Step 4: YARA Rule Matching and Threat ClassificationCOMMENT
LOW…rming-malware-hash-enrichment-with-virustotal/SKILL.md297### Step 5: Generate Enrichment ReportCOMMENT
LOWskills/analyzing-uefi-bootkit-persistence/SKILL.md66### Step 1: Dump SPI Flash FirmwareCOMMENT
LOWskills/analyzing-uefi-bootkit-persistence/SKILL.md93### Step 2: Inspect UEFI VariablesCOMMENT
LOWskills/analyzing-uefi-bootkit-persistence/SKILL.md118### Step 3: Analyze EFI System Partition (ESP)COMMENT
LOWskills/analyzing-uefi-bootkit-persistence/SKILL.md149### Step 4: Scan Firmware for Known Bootkit SignaturesCOMMENT
LOWskills/analyzing-uefi-bootkit-persistence/SKILL.md173### Step 5: Detect Secure Boot Bypass MechanismsCOMMENT
LOWskills/analyzing-uefi-bootkit-persistence/SKILL.md202### Step 6: Perform Boot Chain Integrity VerificationCOMMENT
LOWskills/analyzing-uefi-bootkit-persistence/SKILL.md227### Step 7: Document UEFI Bootkit Analysis FindingsCOMMENT
LOW⚡…implementing-just-in-time-access-provisioning/SKILL.md77### Step 1: Identify Eligible Access TypesCOMMENT
LOW⚡…implementing-just-in-time-access-provisioning/SKILL.md84### Step 2: Design Approval WorkflowsCOMMENT
LOW⚡…implementing-just-in-time-access-provisioning/SKILL.md91### Step 3: Implement Time-Bound AccessCOMMENT
LOW⚡…implementing-just-in-time-access-provisioning/SKILL.md98### Step 4: Integration ArchitectureCOMMENT
LOW⚡…implementing-just-in-time-access-provisioning/SKILL.md105### Step 5: Monitoring and ComplianceCOMMENT
LOW…nting-security-information-sharing-with-stix2/SKILL.md66### Step 1: Install DependenciesCOMMENT
LOW…nting-security-information-sharing-with-stix2/SKILL.md72### Step 2: Create STIX 2.1 Domain Objects (SDOs)COMMENT
LOW…nting-security-information-sharing-with-stix2/SKILL.md140### Step 3: Create STIX Indicators with PatternsCOMMENT
LOW…nting-security-information-sharing-with-stix2/SKILL.md195### Step 4: Build Relationships Between ObjectsCOMMENT
LOW…nting-security-information-sharing-with-stix2/SKILL.md246### Step 5: Assemble and Serialize a STIX BundleCOMMENT
LOW…nting-security-information-sharing-with-stix2/SKILL.md288### Step 6: Consume Intelligence from a TAXII 2.1 ServerCOMMENT
LOW…nting-security-information-sharing-with-stix2/SKILL.md334### Step 7: Publish Intelligence to a TAXII 2.1 ServerCOMMENT
LOW…nting-security-information-sharing-with-stix2/SKILL.md373### Step 8: Validate and Lint STIX ObjectsCOMMENT
LOW…mplementing-dragos-platform-for-ot-monitoring/SKILL.md61### Step 1: Deploy Dragos Sensors and Configure MonitoringCOMMENT
LOW…mplementing-dragos-platform-for-ot-monitoring/SKILL.md239### Step 2: Configure Detection Analytics and Knowledge PacksCOMMENT
LOW…implementing-security-monitoring-with-datadog/SKILL.md73### Step 1: Deploy and Configure the Datadog Agent for SecurityCOMMENT
LOW…implementing-security-monitoring-with-datadog/SKILL.md147### Step 2: Configure Cloud Log Sources for SIEMCOMMENT
LOW…implementing-security-monitoring-with-datadog/SKILL.md184### Step 3: Enable and Customize Detection RulesCOMMENT
LOW…implementing-security-monitoring-with-datadog/SKILL.md248### Step 4: Configure Workload Protection (CSM Threats)COMMENT
LOW…implementing-security-monitoring-with-datadog/SKILL.md283### Step 5: Build Security DashboardsCOMMENT
LOW…implementing-security-monitoring-with-datadog/SKILL.md319### Step 6: Configure Notification WorkflowsCOMMENT
LOW…implementing-security-monitoring-with-datadog/SKILL.md352### Step 7: Validate and Tune Detection CoverageCOMMENT
LOW…xploiting-broken-function-level-authorization/SKILL.md56### Step 1: Administrative Endpoint DiscoveryCOMMENT
LOW…xploiting-broken-function-level-authorization/SKILL.md121### Step 2: Role-Based Function TestingCOMMENT
LOW…xploiting-broken-function-level-authorization/SKILL.md171### Step 3: HTTP Method ManipulationCOMMENT
LOW…xploiting-broken-function-level-authorization/SKILL.md198### Step 4: Parameter-Based Privilege EscalationCOMMENT
LOW…xploiting-broken-function-level-authorization/SKILL.md261### Step 5: API Version and Path Traversal for Admin AccessCOMMENT
LOW⚡…nction-level-authorization/references/api-reference.md19### Step 1: Discover EndpointsCOMMENT
LOW⚡…nction-level-authorization/references/api-reference.md28### Step 2: Test with Low-Priv TokenCOMMENT
LOW⚡…nction-level-authorization/references/api-reference.md34### Step 3: Test HTTP Method SwitchingCOMMENT
LOW…mplementing-honeypot-for-ransomware-detection/SKILL.md93### Step 1: Deploy Canary Files on File SharesCOMMENT
LOW…mplementing-honeypot-for-ransomware-detection/SKILL.md134### Step 2: Configure File Integrity Monitoring on Canary FilesCOMMENT
LOW…mplementing-honeypot-for-ransomware-detection/SKILL.md210### Step 3: Deploy Honeypot Network SharesCOMMENT
LOW…mplementing-honeypot-for-ransomware-detection/SKILL.md252### Step 4: Deploy Thinkst Canary TokensCOMMENT
LOW…mplementing-honeypot-for-ransomware-detection/SKILL.md287### Step 5: Integrate Alerts with SIEM and Automated ResponseCOMMENT
LOW…ills/implementing-aws-security-hub-compliance/SKILL.md57### Step 1: Enable Security Hub with Compliance StandardsCOMMENT
LOW…ills/implementing-aws-security-hub-compliance/SKILL.md81### Step 2: Configure Multi-Account AggregationCOMMENT
LOW…ills/implementing-aws-security-hub-compliance/SKILL.md104### Step 3: Review Compliance Scores and Failed ControlsCOMMENT
LOW…ills/implementing-aws-security-hub-compliance/SKILL.md132### Step 4: Create Custom Security InsightsCOMMENT
LOW…ills/implementing-aws-security-hub-compliance/SKILL.md161### Step 5: Configure Automated Remediation with EventBridgeCOMMENT
LOW…ills/implementing-aws-security-hub-compliance/SKILL.md220### Step 6: Export Findings and Generate Compliance ReportsCOMMENT
LOW…analyzing-threat-actor-ttps-with-mitre-attack/SKILL.md73### Step 1: Query ATT&CK Data ProgrammaticallyCOMMENT
LOW…analyzing-threat-actor-ttps-with-mitre-attack/SKILL.md99### Step 2: Map Threat Actor to ATT&CK TechniquesCOMMENT
LOW…analyzing-threat-actor-ttps-with-mitre-attack/SKILL.md130### Step 3: Generate ATT&CK Navigator LayerCOMMENT
LOW…analyzing-threat-actor-ttps-with-mitre-attack/SKILL.md198### Step 4: Identify Detection GapsCOMMENT
LOW…analyzing-threat-actor-ttps-with-mitre-attack/SKILL.md236### Step 5: Cross-Group Technique ComparisonCOMMENT
LOWskills/analyzing-dns-logs-for-exfiltration/SKILL.md59### Step 1: Detect DNS Tunneling via Subdomain Length AnalysisCOMMENT
LOWskills/analyzing-dns-logs-for-exfiltration/SKILL.md82### Step 2: Detect High-Entropy Domain Queries (DGA Detection)COMMENT
2826 more matches not shown…
Empty Error Handlers317 hits · 1585 pts
SeverityFileLineSnippetContext
HIGH…ng-cobaltstrike-malleable-c2-profiles/scripts/agent.py97except ValueError:CODE
HIGH…ting-just-in-time-access-provisioning/scripts/agent.py81except ValueError:CODE
HIGH…ting-just-in-time-access-provisioning/scripts/agent.py132except ValueError:CODE
HIGHskills/escaping-containers-to-host/scripts/agent.py94except OSError:CODE
HIGH…nting-api-security-posture-management/scripts/agent.py104except Exception:CODE
HIGH…ing-anomalous-authentication-patterns/scripts/agent.py178except Exception:CODE
HIGH…mplementing-patch-management-workflow/scripts/agent.py126except json.JSONDecodeError:CODE
HIGH…/performing-jwt-none-algorithm-attack/scripts/agent.py121except Exception:CODE
HIGH…ills/performing-service-account-audit/scripts/agent.py90except (FileNotFoundError, json.JSONDecodeError):CODE
HIGH…ls/performing-service-account-audit/scripts/process.py95except ValueError:CODE
HIGH…ls/performing-service-account-audit/scripts/process.py121except ValueError:CODE
HIGH…s/performing-api-rate-limiting-bypass/scripts/agent.py192except Exception:CODE
HIGH…s/performing-api-rate-limiting-bypass/scripts/agent.py67except Exception:CODE
HIGH…s/performing-api-rate-limiting-bypass/scripts/agent.py167except Exception:CODE
HIGH…s/performing-api-rate-limiting-bypass/scripts/agent.py88except Exception:CODE
HIGH…ing-vulnerabilities-with-cvss-scoring/scripts/agent.py99except requests.RequestException:CODE
HIGH…ing-vulnerabilities-with-cvss-scoring/scripts/agent.py112except requests.RequestException:CODE
HIGH…ls/detecting-attacks-on-scada-systems/scripts/agent.py49except socket.error:CODE
HIGH…omalies-in-industrial-control-systems/scripts/agent.py106except socket.error:CODE
HIGH…ementing-immutable-backup-with-restic/scripts/agent.py267except OSError:CODE
HIGH…ementing-immutable-backup-with-restic/scripts/agent.py194except json.JSONDecodeError:CODE
HIGH…ementing-immutable-backup-with-restic/scripts/agent.py290except json.JSONDecodeError:CODE
HIGH…ementing-immutable-backup-with-restic/scripts/agent.py301except json.JSONDecodeError:CODE
HIGH…ng-timeline-reconstruction-with-plaso/scripts/agent.py92except (ValueError, TypeError):CODE
HIGH…ing-wireless-network-penetration-test/scripts/agent.py86except subprocess.TimeoutExpired:CODE
HIGH…ing-wireless-network-penetration-test/scripts/agent.py138except (subprocess.TimeoutExpired, FileNotFoundError):CODE
HIGH…ersary-infrastructure-tracking-system/scripts/agent.py74except requests.RequestException:CODE
HIGH…ersary-infrastructure-tracking-system/scripts/agent.py81except requests.RequestException:CODE
HIGH…ing-tls-certificate-transparency-logs/scripts/agent.py280except socket.gaierror:CODE
HIGH…ing-tls-certificate-transparency-logs/scripts/agent.py268except Exception:CODE
HIGH…loiting-kerberoasting-with-impacket/scripts/process.py186except ValueError:CODE
HIGH…lementing-pci-dss-compliance-controls/scripts/agent.py214except Exception:CODE
HIGH…ming-endpoint-forensics-investigation/scripts/agent.py101except Exception:CODE
HIGHskills/relaying-ntlm-for-adcs-esc8/scripts/agent.py82except Exception:CODE
HIGH…menting-endpoint-detection-with-wazuh/scripts/agent.py45except requests.RequestException:CODE
HIGH…yzing-windows-lnk-files-for-artifacts/scripts/agent.py113except Exception:CODE
HIGH…/extracting-iocs-from-malware-samples/scripts/agent.py168except Exception:CODE
HIGH…iting-insecure-data-storage-in-mobile/scripts/agent.py54except PermissionError:CODE
HIGH…iting-insecure-data-storage-in-mobile/scripts/agent.py96except (sqlite3.Error, PermissionError):CODE
HIGH…iting-insecure-data-storage-in-mobile/scripts/agent.py119except (PermissionError, UnicodeDecodeError):CODE
HIGH…ing-insecure-data-storage-in-mobile/scripts/process.py192except (OSError, UnicodeDecodeError):CODE
HIGH…ing-insecure-data-storage-in-mobile/scripts/process.py225except (OSError, UnicodeDecodeError):CODE
HIGH…ing-insecure-data-storage-in-mobile/scripts/process.py152except sqlite3.OperationalError:CODE
HIGH…lyzing-windows-registry-for-artifacts/scripts/agent.py111except Exception:CODE
HIGH…lyzing-windows-registry-for-artifacts/scripts/agent.py126except Exception:CODE
HIGH…lyzing-windows-registry-for-artifacts/scripts/agent.py131except Exception:CODE
HIGH…lyzing-windows-registry-for-artifacts/scripts/agent.py150except Exception:CODE
HIGH…lyzing-windows-registry-for-artifacts/scripts/agent.py35except Exception:CODE
HIGH…lyzing-windows-registry-for-artifacts/scripts/agent.py58except Exception:CODE
HIGH…lyzing-windows-registry-for-artifacts/scripts/agent.py109except Exception:CODE
HIGH…scating-powershell-obfuscated-malware/scripts/agent.py21except Exception:CODE
HIGH…scating-powershell-obfuscated-malware/scripts/agent.py30except Exception:CODE
HIGH…ating-powershell-obfuscated-malware/scripts/process.py158except Exception:CODE
HIGH…ating-powershell-obfuscated-malware/scripts/process.py173except Exception:CODE
HIGH…ating-powershell-obfuscated-malware/scripts/process.py185except (ValueError, OverflowError):CODE
HIGH…ating-powershell-obfuscated-malware/scripts/process.py206except Exception:CODE
HIGH…ating-powershell-obfuscated-malware/scripts/process.py232except Exception:CODE
HIGH…/analyzing-malicious-url-with-urlscan/scripts/agent.py37except requests.RequestException:CODE
HIGH…/analyzing-malicious-url-with-urlscan/scripts/agent.py82except (ValueError, TypeError):CODE
HIGH…nalyzing-malicious-url-with-urlscan/scripts/process.py140except Exception:CODE
257 more matches not shown…
Deep Nesting976 hits · 947 pts
SeverityFileLineSnippetContext
LOWtools/validate-agentskills.py80CODE
LOW…implementing-gcp-binary-authorization/scripts/agent.py137CODE
LOW…-identity-verification-for-zero-trust/scripts/agent.py101CODE
LOW…dentity-verification-for-zero-trust/scripts/process.py234CODE
LOW…dentity-verification-for-zero-trust/scripts/process.py340CODE
LOW…lware-hash-enrichment-with-virustotal/scripts/agent.py108CODE
LOW…g-gcp-organization-policy-constraints/scripts/agent.py145CODE
LOW…gcp-organization-policy-constraints/scripts/process.py112CODE
LOW…ls/analyzing-uefi-bootkit-persistence/scripts/agent.py189CODE
LOW…ls/analyzing-uefi-bootkit-persistence/scripts/agent.py419CODE
LOW…ng-just-in-time-access-provisioning/scripts/process.py220CODE
LOW…ing-honeypot-for-ransomware-detection/scripts/agent.py98CODE
LOW…g-honeypot-for-ransomware-detection/scripts/process.py240CODE
LOW…g-honeypot-for-ransomware-detection/scripts/process.py222CODE
LOW…lementing-aws-security-hub-compliance/scripts/agent.py88CODE
LOW…g-threat-actor-ttps-with-mitre-attack/scripts/agent.py33CODE
LOW…g-threat-actor-ttps-with-mitre-attack/scripts/agent.py52CODE
LOW…threat-actor-ttps-with-mitre-attack/scripts/process.py301CODE
LOWskills/escaping-containers-to-host/scripts/agent.py35CODE
LOWskills/escaping-containers-to-host/scripts/agent.py69CODE
LOW…tracting-credentials-from-memory-dump/scripts/agent.py72CODE
LOW…ills/analyzing-linux-system-artifacts/scripts/agent.py48CODE
LOW…ills/analyzing-linux-system-artifacts/scripts/agent.py106CODE
LOW…ills/analyzing-linux-system-artifacts/scripts/agent.py207CODE
LOW…core-for-vulnerability-prioritization/scripts/agent.py46CODE
LOW…re-for-vulnerability-prioritization/scripts/process.py52CODE
LOW…001-information-security-management/scripts/process.py163CODE
LOW…s/hunting-for-dns-tunneling-with-zeek/scripts/agent.py29CODE
LOW…hunting-for-dns-tunneling-with-zeek/scripts/process.py33CODE
LOW…scanning-infrastructure-with-nessus/scripts/process.py396CODE
LOW…scanning-infrastructure-with-nessus/scripts/process.py143CODE
LOW…scanning-infrastructure-with-nessus/scripts/process.py225CODE
LOW…ing-anomalous-authentication-patterns/scripts/agent.py123CODE
LOW…mplementing-patch-management-workflow/scripts/agent.py216CODE
LOW…lementing-patch-management-workflow/scripts/process.py277CODE
LOW…nting-mobile-application-management/scripts/process.py41CODE
LOW…/performing-jwt-none-algorithm-attack/scripts/agent.py132CODE
LOW…ills/performing-service-account-audit/scripts/agent.py58CODE
LOW…ls/performing-service-account-audit/scripts/process.py83CODE
LOW…ls/performing-service-account-audit/scripts/process.py110CODE
LOW…s/performing-api-rate-limiting-bypass/scripts/agent.py54CODE
LOW…ting-for-process-injection-techniques/scripts/agent.py52CODE
LOW…ing-vulnerabilities-with-cvss-scoring/scripts/agent.py75CODE
LOW…g-vulnerabilities-with-cvss-scoring/scripts/process.py309CODE
LOW…g-vulnerabilities-with-cvss-scoring/scripts/process.py128CODE
LOW…g-vulnerabilities-with-cvss-scoring/scripts/process.py271CODE
LOW…s/abusing-dpapi-for-credential-access/scripts/agent.py96CODE
LOW…ilding-patch-tuesday-response-process/scripts/agent.py74CODE
LOW…ilding-patch-tuesday-response-process/scripts/agent.py104CODE
LOW…ding-patch-tuesday-response-process/scripts/process.py72CODE
LOW…ding-patch-tuesday-response-process/scripts/process.py90CODE
LOW…t-modeling-with-owasp-threat-dragon/scripts/process.py45CODE
LOW…ting-network-deception-with-honeypots/scripts/agent.py86CODE
LOW…ementing-immutable-backup-with-restic/scripts/agent.py106CODE
LOW…ementing-immutable-backup-with-restic/scripts/agent.py228CODE
LOW…ementing-immutable-backup-with-restic/scripts/agent.py353CODE
LOW…ing-wireless-network-penetration-test/scripts/agent.py55CODE
LOW…lls/securing-api-gateway-with-aws-waf/scripts/agent.py136CODE
LOW…forming-log-source-onboarding-in-siem/scripts/agent.py135CODE
LOW…rming-log-source-onboarding-in-siem/scripts/process.py99CODE
916 more matches not shown…
Hyper-Verbose Identifiers862 hits · 850 pts
SeverityFileLineSnippetContext
LOW…-identity-verification-for-zero-trust/scripts/agent.py30def assess_authentication_methods(auth_config):CODE
LOW…-identity-verification-for-zero-trust/scripts/agent.py62def assess_conditional_access(policies_path):CODE
LOW…dentity-verification-for-zero-trust/scripts/process.py91def assess_conditional_access(policies: list) -> dict:CODE
LOW…dentity-verification-for-zero-trust/scripts/process.py292def generate_identity_maturity_report(config: dict) -> dict:CODE
LOW…rming-malware-hash-enrichment-with-virustotal/SKILL.md300def generate_enrichment_report(hash_report, behavior, network, yara_data):CODE
LOW…ng-cobaltstrike-malleable-c2-profiles/scripts/agent.py36def parse_profile_with_dissect(profile_path):CODE
LOW…g-gcp-organization-policy-constraints/scripts/agent.py45def audit_baseline_compliance(org_id):CODE
LOW…g-gcp-organization-policy-constraints/scripts/agent.py89def check_resource_location_constraint(org_id):CODE
LOW…g-gcp-organization-policy-constraints/scripts/agent.py101def generate_terraform_policies(org_id, constraints=None):CODE
LOW…g-gcp-organization-policy-constraints/scripts/agent.py129def generate_compliance_report(findings):CODE
LOW…gcp-organization-policy-constraints/scripts/process.py187def generate_compliance_report(audit_results, org_id):CODE
LOW…ls/analyzing-uefi-bootkit-persistence/scripts/agent.py361def run_firmware_security_audit():CODE
LOW…ting-just-in-time-access-provisioning/scripts/agent.py63def audit_standing_privileges(privileges_path):CODE
LOW…mplementing-dragos-platform-for-ot-monitoring/SKILL.md178 def generate_siem_integration_config(self, siem_type: str = "splunk"):CODE
LOW…ing-dragos-platform-for-ot-monitoring/scripts/agent.py77def generate_monitoring_config():CODE
LOW…g-broken-function-level-authorization/scripts/agent.py54def test_privilege_escalation(base_url, low_priv_token, endpoints=None):CODE
LOW…ing-honeypot-for-ransomware-detection/scripts/agent.py98def detect_ransomware_indicators(watch_dir, window_seconds=60):CODE
LOW…ing-honeypot-for-ransomware-detection/scripts/agent.py142def generate_honeypot_share_config(share_name="FinanceArchive", share_path="/srv/honeypot"):CODE
LOW…lementing-aws-security-hub-compliance/scripts/agent.py108def create_compliance_insight(hub_client, name, group_by_attr, severity_filter=None):CODE
LOW…s/analyzing-dns-logs-for-exfiltration/scripts/agent.py29def extract_registered_domain(fqdn):CODE
LOW…nting-api-security-posture-management/scripts/agent.py11def discover_apis_from_traffic(log_path):CODE
LOW…nting-api-security-posture-management/scripts/agent.py94def check_api_security_controls(apis, spec_path=None):CODE
LOW…lls/detecting-pass-the-ticket-attacks/scripts/agent.py63def detect_cross_host_ticket_reuse(events):CODE
LOW…lls/detecting-pass-the-ticket-attacks/scripts/agent.py90def detect_anomalous_tgs_volume(events, threshold=50):CODE
LOW…ills/analyzing-linux-system-artifacts/scripts/agent.py155def check_systemd_persistence(evidence_root):CODE
LOW…ills/analyzing-linux-system-artifacts/scripts/agent.py207def find_suspicious_tmp_files(evidence_root):CODE
LOW…uilding-identity-governance-lifecycle-process/SKILL.md610 def generate_remediation_plan(self, orphaned_accounts):CODE
LOW…identity-governance-lifecycle-process/scripts/agent.py126def generate_lifecycle_report(token):CODE
LOW…g-epss-score-for-vulnerability-prioritization/SKILL.md151def prioritize_vulnerabilities(scan_results_csv, output_csv):CODE
LOW…core-for-vulnerability-prioritization/scripts/agent.py46def prioritize_vulnerabilities(cve_scores, epss_threshold=0.1, percentile_threshold=0.9):CODE
LOW…001-information-security-management/scripts/process.py511 def generate_compliance_dashboard(self) -> dict:CODE
LOW…ls/implementing-endpoint-dlp-controls/scripts/agent.py26def scan_file_for_sensitive_data(file_path):CODE
LOW…s/hunting-for-dns-tunneling-with-zeek/scripts/agent.py55def analyze_domain_statistics(entries):CODE
LOW…ing-role-mining-for-rbac-optimization/scripts/agent.py27def build_user_permission_matrix(assignments):CODE
LOW…ing-role-mining-for-rbac-optimization/scripts/agent.py106def calculate_optimization_metrics(user_matrix, candidate_roles):CODE
LOW…ls/conducting-cloud-incident-response/scripts/agent.py109def aws_list_attacker_resources(username, events):CODE
LOW…ls/conducting-cloud-incident-response/scripts/agent.py119def aws_check_all_regions_instances():CODE
LOW…s/detecting-anomalous-authentication-patterns/SKILL.md430def detect_behavioral_anomalies(event, baseline):CODE
LOW…s/detecting-anomalous-authentication-patterns/SKILL.md491def isolation_forest_anomaly_detection(df):CODE
LOW…s/detecting-anomalous-authentication-patterns/SKILL.md599def calculate_auth_risk_score(user, alerts, baseline):CODE
LOWskills/implementing-patch-management-workflow/SKILL.md121def get_windows_pending_patches():CODE
LOWskills/implementing-patch-management-workflow/SKILL.md144def get_linux_pending_patches():STRING
LOW…-patch-management-workflow/references/api-reference.md46def get_tenable_missing_patches(scan_id):CODE
LOW…lementing-patch-management-workflow/scripts/process.py220def generate_compliance_report(summary: dict, compliance_df: pd.DataFrame,CODE
LOW…menting-mobile-application-management/scripts/agent.py40def get_app_protection_policies(base_url, token):CODE
LOW…menting-mobile-application-management/scripts/agent.py84def audit_protection_policies(policies):CODE
LOWskills/performing-jwt-none-algorithm-attack/SKILL.md168 def craft_privilege_escalation(self, role_field: str = "role",CODE
LOWskills/performing-jwt-none-algorithm-attack/SKILL.md231 def test_empty_signature_variants(self) -> list:CODE
LOW…ills/performing-service-account-audit/scripts/agent.py28 def discover_ad_service_accounts(self):CODE
LOW…ls/performing-service-account-audit/scripts/process.py162 def _check_password_never_expires(self):CODE
LOW…figuring-aws-verified-access-for-ztna/scripts/agent.py16def list_verified_access_instances(session):CODE
LOW…figuring-aws-verified-access-for-ztna/scripts/agent.py32def list_verified_access_groups(session):CODE
LOW…figuring-aws-verified-access-for-ztna/scripts/agent.py48def list_verified_access_endpoints(session):CODE
LOW…guring-aws-verified-access-for-ztna/scripts/process.py48 def permit_group_with_device_trust(self, group: str, min_score: int = 50) -> str:CODE
LOWskills/performing-api-rate-limiting-bypass/SKILL.md152def test_path_variation_bypass(base_endpoint, token):CODE
LOWskills/performing-api-rate-limiting-bypass/SKILL.md249def test_account_rotation_bypass(login_endpoint, target_password_list):CODE
LOWskills/performing-api-rate-limiting-bypass/SKILL.md279def test_parameter_pollution_bypass(endpoint):CODE
LOWskills/performing-api-rate-limiting-bypass/SKILL.md301async def distributed_rate_limit_test(endpoint, total_requests=1000, concurrency=50):CODE
LOW…s/performing-api-rate-limiting-bypass/scripts/agent.py31def detect_rate_limit_headers(url, auth_header=None):CODE
LOW…ting-for-process-injection-techniques/scripts/agent.py74def detect_remote_thread_injection(events):CODE
802 more matches not shown…
Excessive Try-Catch Wrapping699 hits · 757 pts
SeverityFileLineSnippetContext
LOW…rming-malware-hash-enrichment-with-virustotal/SKILL.md151 except Exception as e:CODE
LOW…rming-malware-hash-enrichment-with-virustotal/SKILL.md246 except Exception as e:CODE
LOW…lware-hash-enrichment-with-virustotal/scripts/agent.py81 except Exception as e:CODE
LOW…curity-information-sharing-with-stix2/scripts/agent.py131 except Exception as e:CODE
LOW…curity-information-sharing-with-stix2/scripts/agent.py143 except Exception as e:CODE
LOW…nting-api-security-posture-management/scripts/agent.py104 except Exception:CODE
LOW…s/detecting-anomalous-authentication-patterns/SKILL.md179 except Exception:CODE
LOW…ing-anomalous-authentication-patterns/scripts/agent.py63 except Exception:CODE
LOW…ing-anomalous-authentication-patterns/scripts/agent.py102 except Exception:CODE
LOW…ing-anomalous-authentication-patterns/scripts/agent.py140 except Exception:CODE
LOW…ing-anomalous-authentication-patterns/scripts/agent.py178 except Exception:CODE
LOW…mplementing-patch-management-workflow/scripts/agent.py143 except Exception:CODE
LOW…/performing-jwt-none-algorithm-attack/scripts/agent.py86 except Exception as e:CODE
LOW…/performing-jwt-none-algorithm-attack/scripts/agent.py115 except Exception as e:CODE
LOW…/performing-jwt-none-algorithm-attack/scripts/agent.py121 except Exception:CODE
LOW…g-build-provenance-with-slsa-sigstore/scripts/agent.py85 except Exception:CODE
LOWskills/performing-api-rate-limiting-bypass/SKILL.md185 except Exception:CODE
LOWskills/performing-api-rate-limiting-bypass/SKILL.md323 except Exception:CODE
MEDIUMskills/performing-api-rate-limiting-bypass/SKILL.md305def make_request(session, request_num):CODE
LOW…s/performing-api-rate-limiting-bypass/scripts/agent.py50 except Exception as e:CODE
LOW…s/performing-api-rate-limiting-bypass/scripts/agent.py67 except Exception:CODE
LOW…s/performing-api-rate-limiting-bypass/scripts/agent.py88 except Exception:CODE
LOW…s/performing-api-rate-limiting-bypass/scripts/agent.py114 except Exception:CODE
LOW…s/performing-api-rate-limiting-bypass/scripts/agent.py167 except Exception:CODE
LOW…s/performing-api-rate-limiting-bypass/scripts/agent.py192 except Exception:CODE
LOW…g-vulnerabilities-with-cvss-scoring/scripts/process.py172 except Exception as e:CODE
LOW…g-vulnerabilities-with-cvss-scoring/scripts/process.py190 except Exception as e:CODE
LOW…g-vulnerabilities-with-cvss-scoring/scripts/process.py208 except Exception as e:CODE
LOW…ls/detecting-attacks-on-scada-systems/scripts/agent.py93 except Exception as e:CODE
LOW…ls/detecting-attacks-on-scada-systems/scripts/agent.py125 except Exception as e:CODE
LOW…ls/detecting-attacks-on-scada-systems/scripts/agent.py150 except Exception as e:CODE
LOW…ding-patch-tuesday-response-process/scripts/process.py69 except Exception as e:CODE
LOW…ding-patch-tuesday-response-process/scripts/process.py86 except Exception as e:CODE
LOW…omalies-in-industrial-control-systems/scripts/agent.py49 except Exception as e:CODE
LOW…omalies-in-industrial-control-systems/scripts/agent.py127 except Exception as e:CODE
MEDIUM…ementing-immutable-backup-with-restic/scripts/agent.py388 print("Error: --source required for backup")CODE
MEDIUM…ementing-immutable-backup-with-restic/scripts/agent.py418 print("Error: --bucket required for Object Lock configuration")CODE
MEDIUM…ementing-immutable-backup-with-restic/scripts/agent.py431 print("Error: --source required for full pipeline")CODE
LOW…lls/securing-api-gateway-with-aws-waf/scripts/agent.py73 except Exception as e:CODE
LOW…lls/securing-api-gateway-with-aws-waf/scripts/agent.py90 except Exception as e:CODE
LOW…forming-log-source-onboarding-in-siem/scripts/agent.py71 except Exception as e:CODE
LOW…ing-for-unusual-service-installations/scripts/agent.py84 except Exception:CODE
LOW…ing-tls-certificate-transparency-logs/scripts/agent.py268 except Exception:CODE
LOW…ing-tls-certificate-transparency-logs/scripts/agent.py282 except Exception as exc:CODE
LOW…ing-tls-certificate-transparency-logs/scripts/agent.py651 except Exception as exc:CODE
LOW…enting-runtime-security-with-tetragon/scripts/agent.py37 except Exception as e:CODE
LOWskills/performing-kerberoasting-attack/scripts/agent.py41 except Exception as e:CODE
LOWskills/performing-kerberoasting-attack/scripts/agent.py59 except Exception as e:CODE
LOWskills/performing-kerberoasting-attack/scripts/agent.py86 except Exception as e:CODE
LOWskills/performing-kerberoasting-attack/scripts/agent.py143 except Exception as e:CODE
LOW…lls/performing-kerberoasting-attack/scripts/process.py111 except Exception as e:CODE
LOW…lls/performing-kerberoasting-attack/scripts/process.py217 except Exception as e:CODE
LOW…ssing-vector-and-embedding-weaknesses/scripts/agent.py147 except Exception as exc:CODE
MEDIUM…ssing-vector-and-embedding-weaknesses/scripts/agent.py30def get_embedder(model_name):CODE
LOW…zing-packed-malware-with-upx-unpacker/scripts/agent.py187 except Exception as e:CODE
LOW…lls/deploying-ransomware-canary-files/scripts/agent.py211 except Exception as e:CODE
LOW…lls/deploying-ransomware-canary-files/scripts/agent.py253 except Exception as e:CODE
LOW…lls/deploying-ransomware-canary-files/scripts/agent.py276 except Exception as e:CODE
LOW…lls/deploying-ransomware-canary-files/scripts/agent.py487 except Exception as e:CODE
LOW…lementing-pci-dss-compliance-controls/scripts/agent.py55 except Exception as e:CODE
639 more matches not shown…
Decorative Section Separators222 hits · 682 pts
SeverityFileLineSnippetContext
MEDIUM…ls/analyzing-uefi-bootkit-persistence/scripts/agent.py28# ---------------------------------------------------------------------------STRING
MEDIUM…ls/analyzing-uefi-bootkit-persistence/scripts/agent.py30# ---------------------------------------------------------------------------STRING
MEDIUM…ls/analyzing-uefi-bootkit-persistence/scripts/agent.py106# ---------------------------------------------------------------------------STRING
MEDIUM…ls/analyzing-uefi-bootkit-persistence/scripts/agent.py108# ---------------------------------------------------------------------------STRING
MEDIUM…ls/analyzing-uefi-bootkit-persistence/scripts/agent.py181# ---------------------------------------------------------------------------COMMENT
MEDIUM…ls/analyzing-uefi-bootkit-persistence/scripts/agent.py183# ---------------------------------------------------------------------------COMMENT
MEDIUM…ls/analyzing-uefi-bootkit-persistence/scripts/agent.py286# ---------------------------------------------------------------------------COMMENT
MEDIUM…ls/analyzing-uefi-bootkit-persistence/scripts/agent.py288# ---------------------------------------------------------------------------COMMENT
MEDIUM…ls/analyzing-uefi-bootkit-persistence/scripts/agent.py324# ---------------------------------------------------------------------------COMMENT
MEDIUM…ls/analyzing-uefi-bootkit-persistence/scripts/agent.py326# ---------------------------------------------------------------------------COMMENT
MEDIUM…ls/analyzing-uefi-bootkit-persistence/scripts/agent.py381# ---------------------------------------------------------------------------COMMENT
MEDIUM…ls/analyzing-uefi-bootkit-persistence/scripts/agent.py383# ---------------------------------------------------------------------------COMMENT
MEDIUM…ls/analyzing-uefi-bootkit-persistence/scripts/agent.py415# ---------------------------------------------------------------------------COMMENT
MEDIUM…ls/analyzing-uefi-bootkit-persistence/scripts/agent.py417# ---------------------------------------------------------------------------COMMENT
MEDIUM⚡…ing-tls-certificate-transparency-logs/scripts/agent.py40# ---------------------------------------------------------------------------COMMENT
MEDIUM⚡…ing-tls-certificate-transparency-logs/scripts/agent.py42# ---------------------------------------------------------------------------COMMENT
MEDIUM⚡…ing-tls-certificate-transparency-logs/scripts/agent.py166# ---------------------------------------------------------------------------COMMENT
MEDIUM⚡…ing-tls-certificate-transparency-logs/scripts/agent.py168# ---------------------------------------------------------------------------COMMENT
MEDIUM⚡…ing-tls-certificate-transparency-logs/scripts/agent.py501# ---------------------------------------------------------------------------COMMENT
MEDIUM⚡…ing-tls-certificate-transparency-logs/scripts/agent.py503# ---------------------------------------------------------------------------COMMENT
MEDIUM⚡…ing-tls-certificate-transparency-logs/scripts/agent.py689# ---------------------------------------------------------------------------COMMENT
MEDIUM⚡…ing-tls-certificate-transparency-logs/scripts/agent.py691# ---------------------------------------------------------------------------COMMENT
MEDIUM…ing-tls-certificate-transparency-logs/scripts/agent.py252# ---------------------------------------------------------------------------COMMENT
MEDIUM…ing-tls-certificate-transparency-logs/scripts/agent.py254# ---------------------------------------------------------------------------COMMENT
MEDIUM…ing-tls-certificate-transparency-logs/scripts/agent.py315# ---------------------------------------------------------------------------COMMENT
MEDIUM…ing-tls-certificate-transparency-logs/scripts/agent.py317# ---------------------------------------------------------------------------COMMENT
MEDIUM…ing-tls-certificate-transparency-logs/scripts/agent.py582# ---------------------------------------------------------------------------COMMENT
MEDIUM…ing-tls-certificate-transparency-logs/scripts/agent.py584# ---------------------------------------------------------------------------COMMENT
MEDIUM…ing-tls-certificate-transparency-logs/scripts/agent.py785# ---------------------------------------------------------------------------COMMENT
MEDIUM…ing-tls-certificate-transparency-logs/scripts/agent.py787# ---------------------------------------------------------------------------COMMENT
MEDIUM…ing-tls-certificate-transparency-logs/scripts/agent.py813# ---------------------------------------------------------------------------COMMENT
MEDIUM…ing-tls-certificate-transparency-logs/scripts/agent.py815# ---------------------------------------------------------------------------COMMENT
MEDIUM…ing-tls-certificate-transparency-logs/scripts/agent.py104# ---------------------------------------------------------------------------STRING
MEDIUM…ing-tls-certificate-transparency-logs/scripts/agent.py106# ---------------------------------------------------------------------------STRING
MEDIUM⚡…lementing-llm-guardrails-for-security/scripts/agent.py29# ---------------------------------------------------------------------------COMMENT
MEDIUM⚡…lementing-llm-guardrails-for-security/scripts/agent.py31# ---------------------------------------------------------------------------COMMENT
MEDIUM⚡…g-post-quantum-cryptography-migration/scripts/agent.py28# ---------------------------------------------------------------------------COMMENT
MEDIUM⚡…g-post-quantum-cryptography-migration/scripts/agent.py30# ---------------------------------------------------------------------------COMMENT
MEDIUM⚡…g-post-quantum-cryptography-migration/scripts/agent.py35# ---------------------------------------------------------------------------COMMENT
MEDIUM⚡…g-post-quantum-cryptography-migration/scripts/agent.py37# ---------------------------------------------------------------------------COMMENT
MEDIUM⚡…g-post-quantum-cryptography-migration/scripts/agent.py1027# ---------------------------------------------------------------------------COMMENT
MEDIUM⚡…g-post-quantum-cryptography-migration/scripts/agent.py1029# ---------------------------------------------------------------------------COMMENT
MEDIUM⚡…g-post-quantum-cryptography-migration/scripts/agent.py1234# ---------------------------------------------------------------------------COMMENT
MEDIUM⚡…g-post-quantum-cryptography-migration/scripts/agent.py1236# ---------------------------------------------------------------------------COMMENT
MEDIUM…g-post-quantum-cryptography-migration/scripts/agent.py167# ---------------------------------------------------------------------------COMMENT
MEDIUM…g-post-quantum-cryptography-migration/scripts/agent.py169# ---------------------------------------------------------------------------COMMENT
MEDIUM…g-post-quantum-cryptography-migration/scripts/agent.py470# ---------------------------------------------------------------------------COMMENT
MEDIUM…g-post-quantum-cryptography-migration/scripts/agent.py472# ---------------------------------------------------------------------------COMMENT
MEDIUM…g-post-quantum-cryptography-migration/scripts/agent.py619# ---------------------------------------------------------------------------COMMENT
MEDIUM…g-post-quantum-cryptography-migration/scripts/agent.py621# ---------------------------------------------------------------------------COMMENT
MEDIUM…g-post-quantum-cryptography-migration/scripts/agent.py730# ---------------------------------------------------------------------------COMMENT
MEDIUM…g-post-quantum-cryptography-migration/scripts/agent.py732# ---------------------------------------------------------------------------COMMENT
MEDIUM…g-post-quantum-cryptography-migration/scripts/agent.py898# ---------------------------------------------------------------------------COMMENT
MEDIUM…g-post-quantum-cryptography-migration/scripts/agent.py900# ---------------------------------------------------------------------------COMMENT
MEDIUM…g-post-quantum-cryptography-migration/scripts/agent.py1361# ---------------------------------------------------------------------------STRING
MEDIUM…g-post-quantum-cryptography-migration/scripts/agent.py1363# ---------------------------------------------------------------------------STRING
MEDIUM…etecting-command-and-control-over-dns/scripts/agent.py51# ---------------------------------------------------------------------------COMMENT
MEDIUM…etecting-command-and-control-over-dns/scripts/agent.py53# ---------------------------------------------------------------------------COMMENT
MEDIUM…etecting-command-and-control-over-dns/scripts/agent.py125# ---------------------------------------------------------------------------COMMENT
MEDIUM…etecting-command-and-control-over-dns/scripts/agent.py127# ---------------------------------------------------------------------------COMMENT
162 more matches not shown…
Unused Imports570 hits · 552 pts
SeverityFileLineSnippetContext
LOWtools/lint-descriptions.py32CODE
LOWtools/update-contributors.py20CODE
LOWtools/generate-index.py13CODE
LOWtools/detect-collisions.py23CODE
LOWtools/skill_frontmatter.py27CODE
LOW…plementing-gcp-binary-authorization/scripts/process.py11CODE
LOW…dentity-verification-for-zero-trust/scripts/process.py10CODE
LOW…dentity-verification-for-zero-trust/scripts/process.py11CODE
LOW…dentity-verification-for-zero-trust/scripts/process.py12CODE
LOW…dentity-verification-for-zero-trust/scripts/process.py15CODE
LOW…gcp-organization-policy-constraints/scripts/process.py11CODE
LOW…ls/analyzing-uefi-bootkit-persistence/scripts/agent.py13CODE
LOW…ng-just-in-time-access-provisioning/scripts/process.py10CODE
LOW…g-honeypot-for-ransomware-detection/scripts/process.py19CODE
LOW…g-threat-actor-ttps-with-mitre-attack/scripts/agent.py11CODE
LOW…re-for-vulnerability-prioritization/scripts/process.py13CODE
LOW…re-for-vulnerability-prioritization/scripts/process.py15CODE
LOW…re-for-vulnerability-prioritization/scripts/process.py15CODE
LOW…re-for-vulnerability-prioritization/scripts/process.py16CODE
LOW…001-information-security-management/scripts/process.py11CODE
LOW…001-information-security-management/scripts/process.py12CODE
LOW…g-role-mining-for-rbac-optimization/scripts/process.py13CODE
LOW…g-role-mining-for-rbac-optimization/scripts/process.py16CODE
LOW…g-role-mining-for-rbac-optimization/scripts/process.py17CODE
LOW…scanning-infrastructure-with-nessus/scripts/process.py24CODE
LOW…mplementing-patch-management-workflow/scripts/agent.py14CODE
LOW…lementing-patch-management-workflow/scripts/process.py18CODE
LOW…lementing-patch-management-workflow/scripts/process.py20CODE
LOW…lementing-patch-management-workflow/scripts/process.py21CODE
LOW…lementing-patch-management-workflow/scripts/process.py23CODE
LOW…nting-mobile-application-management/scripts/process.py13CODE
LOW…nting-mobile-application-management/scripts/process.py15CODE
LOW…ls/performing-service-account-audit/scripts/process.py10CODE
LOW…guring-aws-verified-access-for-ztna/scripts/process.py9CODE
LOW…guring-aws-verified-access-for-ztna/scripts/process.py10CODE
LOW…g-vulnerabilities-with-cvss-scoring/scripts/process.py19CODE
LOW…g-vulnerabilities-with-cvss-scoring/scripts/process.py21CODE
LOW…ding-patch-tuesday-response-process/scripts/process.py19CODE
LOW…ding-patch-tuesday-response-process/scripts/process.py20CODE
LOW…ing-wireless-network-penetration-test/scripts/agent.py11CODE
LOW…rming-log-source-onboarding-in-siem/scripts/process.py9CODE
LOW…rming-log-source-onboarding-in-siem/scripts/process.py10CODE
LOW…rming-log-source-onboarding-in-siem/scripts/process.py11CODE
LOW…ing-tls-certificate-transparency-logs/scripts/agent.py9CODE
LOW…ing-tls-certificate-transparency-logs/scripts/agent.py12CODE
LOW…ing-tls-certificate-transparency-logs/scripts/agent.py21CODE
LOW…ing-tls-certificate-transparency-logs/scripts/agent.py22CODE
LOW…ing-tls-certificate-transparency-logs/scripts/agent.py22CODE
LOW…ting-runtime-security-with-tetragon/scripts/process.py14CODE
LOW…ting-runtime-security-with-tetragon/scripts/process.py15CODE
LOW…loiting-kerberoasting-with-impacket/scripts/process.py9CODE
LOW…loiting-kerberoasting-with-impacket/scripts/process.py10CODE
LOW…loiting-kerberoasting-with-impacket/scripts/process.py11CODE
LOW…loiting-kerberoasting-with-impacket/scripts/process.py12CODE
LOW…loiting-kerberoasting-with-impacket/scripts/process.py16CODE
LOW…menting-zero-trust-dns-with-nextdns/scripts/process.py13CODE
LOW…lls/performing-kerberoasting-attack/scripts/process.py21CODE
LOW…lls/performing-kerberoasting-attack/scripts/process.py120CODE
LOW…lls/performing-kerberoasting-attack/scripts/process.py120CODE
LOW…lls/performing-kerberoasting-attack/scripts/process.py121CODE
510 more matches not shown…
Cross-Language Confusion35 hits · 200 pts
SeverityFileLineSnippetContext
HIGH…tracting-credentials-from-memory-dump/scripts/agent.py146 if not username or username == "(null)":CODE
HIGH…mplementing-cloud-workload-protection/scripts/agent.py82 "ls -la /dev/tcp 2>/dev/null; ls -la /proc/*/fd 2>/dev/null | grep socket | head -20",CODE
HIGH…ng-agentless-vulnerability-scanning/scripts/process.py105 out, _ = self._exec(client, "ss -tlnp 2>/dev/null || netstat -tlnp 2>/dev/null")CODE
HIGH…everse-engineering-ios-app-with-frida/scripts/agent.py58 var SSLSetPeerDomainName = Module.findExportByName(null, 'SSLSetPeerDomainName');CODE
HIGH⚡…erse-engineering-ios-app-with-frida/scripts/process.py23 if (name.indexOf("Auth") !== -1 || name.indexOf("Crypto") !== -1 ||CODE
HIGH⚡…erse-engineering-ios-app-with-frida/scripts/process.py24 name.indexOf("Token") !== -1 || name.indexOf("Key") !== -1 ||CODE
HIGH⚡…erse-engineering-ios-app-with-frida/scripts/process.py25 name.indexOf("Secret") !== -1 || name.indexOf("Login") !== -1) {CODE
HIGH⚡…erse-engineering-ios-app-with-frida/scripts/process.py27 results.classes.push({name: name, method_count: methods.length});CODE
HIGH⚡…erse-engineering-ios-app-with-frida/scripts/process.py29 if (m.toLowerCase().indexOf("auth") !== -1 || m.toLowerCase().indexOf("login") !== -1) {CODE
HIGH⚡…erse-engineering-ios-app-with-frida/scripts/process.py30 results.auth_methods.push(name + " " + m);CODE
HIGH⚡…erse-engineering-ios-app-with-frida/scripts/process.py32 if (m.toLowerCase().indexOf("encrypt") !== -1 || m.toLowerCase().indexOf("decrypt") !== -1 ||CODE
HIGH⚡…erse-engineering-ios-app-with-frida/scripts/process.py33 m.toLowerCase().indexOf("key") !== -1 || m.toLowerCase().indexOf("cipher") !== -1) {CODE
HIGH⚡…erse-engineering-ios-app-with-frida/scripts/process.py34 results.crypto_methods.push(name + " " + m);CODE
HIGH…erse-engineering-ios-app-with-frida/scripts/process.py71 base: main.base.toString(),CODE
HIGH…-network-traffic-analysis-with-tshark/scripts/agent.py142 ["tshark", "-r", pcap_path, "-Y", "tcp.flags.syn==1 && tcp.flags.ack==0",CODE
HIGH…ploiting-constrained-delegation-abuse/scripts/agent.py45 "| Where-Object {$_.'msDS-AllowedToActOnBehalfOfOtherIdentity' -ne $null} "CODE
HIGH…erforming-ios-app-security-assessment/scripts/agent.py157 send({type: 'keychain_error', class: classNames[kSecClasses[i]], error: e.toString()});CODE
HIGH…erforming-ios-app-security-assessment/scripts/agent.py204 if (this.url.indexOf('cydia://') !== -1 || this.url.indexOf('sileo://') !== -1) {CODE
HIGH…erforming-ios-app-security-assessment/scripts/agent.py212 var fork = Module.findExportByName(null, 'fork');CODE
HIGH…alyzing-network-traffic-for-incidents/scripts/agent.py45 connections = run_tshark(pcap_path, "tcp.flags.syn==1 && tcp.flags.ack==0",CODE
HIGH…rming-dynamic-analysis-of-android-app/scripts/agent.py46 results.methods.push('TrustManagerImpl.verifyChain');CODE
HIGH…rming-dynamic-analysis-of-android-app/scripts/agent.py54 results.methods.push('OkHostnameVerifier.verify');CODE
HIGHskills/detecting-stuxnet-style-attacks/scripts/agent.py45 ["tshark", "-r", pcap_path, "-Y", "modbus || s7comm",CODE
HIGH…menting-privileged-access-workstation/scripts/agent.py76 "Select-Object DisplayName,Publisher,InstallDate | Where-Object {$_.DisplayName -ne $null} | "CODE
HIGH⚡…forming-lateral-movement-with-wmiexec/scripts/agent.py90 "dcerpc.cn_bind_uuid == 4d9f4ab8-7d1c-11cf-861e-0020af6e7c57 || tcp.port == 135 || dcom",CODE
HIGH…ls/performing-packet-injection-attack/scripts/agent.py144 print("Tests: syn, xmas, null, flags, spoof, land, frag, icmp, all")CODE
HIGH…plementing-aws-nitro-enclave-security/scripts/agent.py216 "commands": ["cat /etc/nitro_enclaves/allocator.yaml 2>/dev/null || echo 'NOT_FOUND'"]CODE
HIGH…-hardware-security-key-authentication/scripts/agent.py434 const displayName = document.getElementById('reg-display').value || username;CODE
HIGH…-hardware-security-key-authentication/scripts/agent.py487 body: JSON.stringify({username: username || null})CODE
HIGH…-hardware-security-key-authentication/scripts/agent.py487 body: JSON.stringify({username: username || null})CODE
HIGH…-hardware-security-key-authentication/scripts/agent.py512 b64encode(assertion.response.userHandle) : null,CODE
HIGH…yzing-persistence-mechanisms-in-linux/scripts/agent.py46 ["bash", "-c", "for u in $(cut -d: -f1 /etc/passwd); do crontab -l -u $u 2>/dev/null && echo \"__USER:$u\"; doneCODE
HIGH…ng-authenticated-vulnerability-scan/scripts/process.py94 _, stdout, stderr = client.exec_command("id && uname -a", timeout=10)CODE
HIGH…lyzing-network-traffic-with-wireshark/scripts/agent.py123 stdout, _, rc = run_tshark(pcap_path, '-Y "icmp && frame.len > 100" -T fields -e ip.src -e ip.dst -e frame.len')CODE
HIGH…lyzing-network-traffic-with-wireshark/scripts/agent.py143 '-Y "http && tcp.port != 80 && tcp.port != 443 && tcp.port != 8080" 'CODE
Magic Placeholder Names32 hits · 189 pts
SeverityFileLineSnippetContext
HIGH…rming-malware-hash-enrichment-with-virustotal/SKILL.md202batch_enrich("YOUR_API_KEY", "hashes.txt", "enrichment_results.csv")CODE
HIGH…mplementing-dragos-platform-for-ot-monitoring/SKILL.md222 api_key="your-api-key",CODE
HIGH⚡…ills/implementing-zero-trust-dns-with-nextdns/SKILL.md308curl -H "X-Api-Key: your-api-key" \CODE
HIGH⚡…ills/implementing-zero-trust-dns-with-nextdns/SKILL.md312curl -H "X-Api-Key: your-api-key" \CODE
HIGH⚡…ills/implementing-zero-trust-dns-with-nextdns/SKILL.md316curl -H "X-Api-Key: your-api-key" \CODE
HIGH…ero-trust-dns-with-nextdns/references/api-reference.md7Header: X-Api-Key: <your-api-key>CODE
HIGHskills/extracting-iocs-from-malware-samples/SKILL.md234VT_API_KEY = "your_api_key"CODE
HIGH⚡skills/analyzing-malicious-url-with-urlscan/SKILL.md78 Header: API-Key: your-api-keyCODE
HIGH…malicious-url-with-urlscan/references/api-reference.md10API-Key: YOUR_API_KEYCODE
HIGH…elationships-with-malpedia/references/api-reference.md10Authorization: apitoken YOUR_API_KEYCODE
HIGH…s/performing-ot-vulnerability-scanning-safely/SKILL.md250 api_key="your-api-key-here",CODE
HIGH…s/performing-network-forensics-with-wireshark/SKILL.md146 -H "x-apikey: YOUR_API_KEY" | python3 -c "CODE
HIGH…s/performing-threat-hunting-with-elastic-siem/SKILL.md196 -H "Authorization: ApiKey YOUR_API_KEY" \CODE
HIGH…pply-chain-vulnerabilities/references/api-reference.md12Header: apiKey: <your-api-key>CODE
HIGH⚡…eat-intelligence-platforms/references/api-reference.md8 -H "Authorization: YOUR_API_KEY" -H "Accept: application/json"CODE
HIGH⚡…eat-intelligence-platforms/references/api-reference.md12 -H "Authorization: YOUR_API_KEY" -H "Content-Type: application/json" \CODE
HIGH⚡…eat-intelligence-platforms/references/api-reference.md17 -H "Authorization: YOUR_API_KEY" -H "Accept: application/json" \CODE
HIGH⚡…eat-intelligence-platforms/references/api-reference.md21curl "https://misp.example.com/feeds/index.json" -H "Authorization: YOUR_API_KEY"CODE
HIGH…zing-email-headers-for-phishing-investigation/SKILL.md199 -H "Key: YOUR_API_KEY" -H "Accept: application/json" | python3 -m json.toolCODE
HIGH…for-phishing-investigation/references/api-reference.md82 -H "Key: YOUR_API_KEY" \CODE
HIGH⚡…rrelating-threat-campaigns/references/api-reference.md8 -H "Authorization: YOUR_API_KEY" -H "Content-Type: application/json" \CODE
HIGH⚡…rrelating-threat-campaigns/references/api-reference.md13 -H "Authorization: YOUR_API_KEY" -H "Content-Type: application/json" \CODE
HIGH⚡…rrelating-threat-campaigns/references/api-reference.md18 -H "Authorization: YOUR_API_KEY" -H "Accept: application/json"CODE
HIGH⚡…rrelating-threat-campaigns/references/api-reference.md22 -H "Authorization: YOUR_API_KEY" -H "Content-Type: application/json" \CODE
HIGH⚡…ills/collecting-threat-intelligence-with-misp/SKILL.md88misp = PyMISP('https://misp.local', 'YOUR_API_KEY', ssl=False)CODE
HIGH…ills/collecting-threat-intelligence-with-misp/SKILL.md130misp = PyMISP('https://misp.local', 'YOUR_API_KEY', ssl=False)CODE
HIGH⚡…cting-threat-intelligence-with-misp/scripts/process.py16 python process.py --url https://misp.local --key YOUR_API_KEY --action collectSTRING
HIGH⚡…cting-threat-intelligence-with-misp/scripts/process.py17 python process.py --url https://misp.local --key YOUR_API_KEY --action export --format stix2STRING
HIGH⚡…cting-threat-intelligence-with-misp/scripts/process.py18 python process.py --url https://misp.local --key YOUR_API_KEY --action feeds --enable-defaultsSTRING
HIGH…kens-for-network-intrusion/references/api-reference.md112console = canarytools.Console(domain="yourcompany", api_key="YOUR_API_KEY")CODE
HIGH…lligence-sharing-with-misp/references/api-reference.md16 key="YOUR_API_KEY",CODE
HIGH…ath-analysis-with-xm-cyber/references/api-reference.md14 --api-key YOUR_API_KEY \CODE
Modern Structural Boilerplate153 hits · 154 pts
SeverityFileLineSnippetContext
LOW…/implementing-pam-for-database-access/scripts/agent.py12logger = logging.getLogger(__name__)CODE
LOW…tracting-credentials-from-memory-dump/scripts/agent.py15logger = logging.getLogger(__name__)CODE
LOW…/extracting-browser-history-artifacts/scripts/agent.py14logger = logging.getLogger(__name__)CODE
LOW…ing-role-mining-for-rbac-optimization/scripts/agent.py12logger = logging.getLogger(__name__)CODE
LOW…ls/conducting-cloud-incident-response/scripts/agent.py12logger = logging.getLogger(__name__)CODE
LOW…menting-mobile-application-management/scripts/agent.py12logger = logging.getLogger(__name__)CODE
LOW…enting-siem-correlation-rules-for-apt/scripts/agent.py15logger = logging.getLogger(__name__)CODE
LOW…ilding-patch-tuesday-response-process/scripts/agent.py12logger = logging.getLogger(__name__)CODE
LOW…ting-network-deception-with-honeypots/scripts/agent.py13logger = logging.getLogger(__name__)CODE
LOW…ementing-immutable-backup-with-restic/scripts/agent.py27logger = logging.getLogger(__name__)CODE
LOW…ing-wireless-network-penetration-test/scripts/agent.py17logger = logging.getLogger(__name__)CODE
LOW…ersary-infrastructure-tracking-system/scripts/agent.py13logger = logging.getLogger(__name__)CODE
LOW⚡…ing-tls-certificate-transparency-logs/scripts/agent.py31logger = logging.getLogger(__name__)CODE
LOW…ng-syslog-centralization-with-rsyslog/scripts/agent.py13logger = logging.getLogger(__name__)CODE
LOW…end-to-end-encryption-for-messaging/scripts/process.py34logger = logging.getLogger(__name__)CODE
LOW…-network-traffic-analysis-with-nozomi/scripts/agent.py12logger = logging.getLogger(__name__)CODE
LOW…rk-intrusion-prevention-with-suricata/scripts/agent.py13logger = logging.getLogger(__name__)CODE
LOW…lls/deploying-ransomware-canary-files/scripts/agent.py49logger = logging.getLogger(__name__)CODE
LOW…nting-network-policies-for-kubernetes/scripts/agent.py11logger = logging.getLogger(__name__)CODE
LOW…g-cloud-forensics-with-aws-cloudtrail/scripts/agent.py11logger = logging.getLogger(__name__)CODE
LOW…ementing-nerc-cip-compliance-controls/scripts/agent.py11logger = logging.getLogger(__name__)CODE
LOW…/extracting-iocs-from-malware-samples/scripts/agent.py17logger = logging.getLogger(__name__)CODE
LOW…g-smb-vulnerabilities-with-metasploit/scripts/agent.py19logger = logging.getLogger(__name__)CODE
LOW⚡…lementing-llm-guardrails-for-security/scripts/agent.py27logger = logging.getLogger(__name__)CODE
LOW…/building-soc-playbook-for-ransomware/scripts/agent.py14logger = logging.getLogger(__name__)CODE
LOW…/analyzing-malicious-url-with-urlscan/scripts/agent.py13logger = logging.getLogger(__name__)CODE
LOW…plementing-code-signing-for-artifacts/scripts/agent.py22logger = logging.getLogger(__name__)CODE
LOW…oss-prevention-with-microsoft-purview/scripts/agent.py15logger = logging.getLogger(__name__)CODE
LOW…lementing-network-segmentation-for-ot/scripts/agent.py11logger = logging.getLogger(__name__)CODE
LOW…re-family-relationships-with-malpedia/scripts/agent.py13logger = logging.getLogger(__name__)CODE
LOW…er-image-minimal-base-with-distroless/scripts/agent.py13logger = logging.getLogger(__name__)CODE
LOW…s/implementing-bgp-security-with-rpki/scripts/agent.py18logger = logging.getLogger(__name__)CODE
LOW…ing-malware-persistence-with-autoruns/scripts/agent.py13logger = logging.getLogger(__name__)CODE
LOW…g-authentication-with-forced-browsing/scripts/agent.py14logger = logging.getLogger(__name__)CODE
LOW…vice-posture-assessment-in-zero-trust/scripts/agent.py13logger = logging.getLogger(__name__)CODE
LOWskills/detecting-wmi-persistence/scripts/agent.py13logger = logging.getLogger(__name__)CODE
LOW…tack-pattern-library-from-cti-reports/scripts/agent.py13logger = logging.getLogger(__name__)CODE
LOW…enting-jwt-signing-and-verification/scripts/process.py37logger = logging.getLogger(__name__)CODE
LOW…/exploiting-sql-injection-with-sqlmap/scripts/agent.py14logger = logging.getLogger(__name__)CODE
LOW…enerating-threat-intelligence-reports/scripts/agent.py13logger = logging.getLogger(__name__)CODE
LOW…etecting-bluetooth-low-energy-attacks/scripts/agent.py20logger = logging.getLogger(__name__)CODE
LOW…rforming-hash-cracking-with-hashcat/scripts/process.py30logger = logging.getLogger(__name__)CODE
LOW⚡…ing-ai-model-prompt-injection-attacks/scripts/agent.py27logger = logging.getLogger(__name__)CODE
LOW…g-tls-1-3-for-secure-communications/scripts/process.py36logger = logging.getLogger(__name__)CODE
LOW…-aqua-security-for-container-scanning/scripts/agent.py14logger = logging.getLogger(__name__)CODE
LOW…ing-ntlm-relay-with-event-correlation/scripts/agent.py15logger = logging.getLogger(__name__)CODE
LOW…loud-vulnerability-posture-management/scripts/agent.py20logger = logging.getLogger(__name__)CODE
LOW…lls/hunting-for-dcom-lateral-movement/scripts/agent.py14logger = logging.getLogger(__name__)CODE
LOW…ing-incident-timeline-with-timesketch/scripts/agent.py12logger = logging.getLogger(__name__)CODE
LOW…/conducting-cloud-penetration-testing/scripts/agent.py13logger = logging.getLogger(__name__)CODE
LOW…work-segmentation-with-firewall-zones/scripts/agent.py12logger = logging.getLogger(__name__)CODE
LOW…ls/configuring-pfsense-firewall-rules/scripts/agent.py13logger = logging.getLogger(__name__)CODE
LOW…ing-aws-macie-for-data-classification/scripts/agent.py19logger = logging.getLogger(__name__)CODE
LOW…tecting-serverless-function-injection/scripts/agent.py25logger = logging.getLogger(__name__)CODE
LOW…/conducting-malware-incident-response/scripts/agent.py14logger = logging.getLogger(__name__)CODE
LOW…erforming-ios-app-security-assessment/scripts/agent.py19logger = logging.getLogger(__name__)CODE
LOW…s/conducting-network-penetration-test/scripts/agent.py13logger = logging.getLogger(__name__)CODE
LOW…menting-mitre-attack-coverage-mapping/scripts/agent.py11logger = logging.getLogger(__name__)CODE
LOW…loiting-bgp-hijacking-vulnerabilities/scripts/agent.py18logger = logging.getLogger(__name__)CODE
LOW…lls/exploiting-http-request-smuggling/scripts/agent.py20logger = logging.getLogger(__name__)CODE
93 more matches not shown…
Over-Commented Block112 hits · 112 pts
SeverityFileLineSnippetContext
LOW…g-epss-score-for-vulnerability-prioritization/SKILL.md61# "total": 1,COMMENT
LOWskills/extracting-browser-history-artifacts/SKILL.md261COMMENT
LOW…ing-infrastructure-with-nessus/references/workflows.md61COMMENT
LOW…lls/analyzing-windows-lnk-files-for-artifacts/SKILL.md101# - Target path (file that was accessed)COMMENT
LOW…figuring-identity-aware-proxy-with-google-iap/SKILL.md301COMMENT
LOWskills/performing-security-headers-audit/SKILL.md81```bashCOMMENT
LOWskills/performing-security-headers-audit/SKILL.md221# Expected: Restrict unused featuresCOMMENT
LOW…erforming-web-application-scanning-with-nikto/SKILL.md101 -Format htmCOMMENT
LOW…erforming-web-application-scanning-with-nikto/SKILL.md181COMMENT
LOWskills/performing-directory-traversal-testing/SKILL.md61# /view?page=about.htmlCOMMENT
LOWskills/performing-ssl-stripping-attack/SKILL.md161# Attacker to real server: HTTPS (port 443, encrypted)COMMENT
LOWskills/testing-for-host-header-injection/SKILL.md161```COMMENT
LOW…nting-device-posture-assessment-in-zero-trust/SKILL.md121COMMENT
LOW…nting-device-posture-assessment-in-zero-trust/SKILL.md141# {"signal_id": "kernel_protection", "meets_criteria": "yes"}COMMENT
LOW…s/triaging-security-incident-with-ir-playbook/SKILL.md101### Step 4: Assign Severity LevelCOMMENT
LOWskills/performing-binary-exploitation-analysis/SKILL.md101# NX (No-eXecute): Prevents executing code on the stack (DEP)COMMENT
LOW…erforming-cloud-penetration-testing-with-pacu/SKILL.md101# Check current session dataCOMMENT
LOW…erforming-cloud-penetration-testing-with-pacu/SKILL.md121# Method 8: iam:PassRole + datapipeline:CreatePipelineCOMMENT
LOW…rming-log-analysis-for-forensic-investigation/SKILL.md101COMMENT
LOW…s/detecting-ntlm-relay-with-event-correlation/SKILL.md501# Audit all NTLM authentication in this domainCOMMENT
LOWskills/hunting-for-dcom-lateral-movement/SKILL.md81COMMENT
LOWskills/hunting-for-dcom-lateral-movement/SKILL.md581# New-NetFirewallRule -DisplayName "Block Inbound DCOM/RPC" `COMMENT
LOW…-source-intelligence-gathering/references/workflows.md181# Glassdoor: Target Corporation technology stackCOMMENT
LOW…-source-intelligence-gathering/references/workflows.md201# Google Street View:COMMENT
LOWskills/performing-web-cache-poisoning-attack/SKILL.md61 "(cache-control|x-cache|cf-cache|age|vary|x-varnish|x-served-by|cdn|via)"COMMENT
LOWskills/performing-web-cache-poisoning-attack/SKILL.md81```COMMENT
LOW…erforming-aws-privilege-escalation-assessment/SKILL.md101COMMENT
LOWskills/recovering-from-ransomware-attack/SKILL.md81COMMENT
LOWskills/testing-for-broken-access-control/SKILL.md81 -H "Authorization: Bearer $USER_TOKEN"COMMENT
LOWskills/testing-for-broken-access-control/SKILL.md101# Authorization: Bearer low_priv_tokenCOMMENT
LOW…/performing-memory-forensics-with-volatility3/SKILL.md81COMMENT
LOW…/performing-memory-forensics-with-volatility3/SKILL.md101# Machine Type 34404COMMENT
LOW…ls/performing-web-application-firewall-bypass/SKILL.md61COMMENT
LOW…s/performing-network-forensics-with-wireshark/SKILL.md201wget https://www.netresec.com/?download=NetworkMiner -O NetworkMiner.zipCOMMENT
LOWskills/analyzing-pdf-malware-with-pdfid/SKILL.md61# Run PDFiD to identify suspicious elementsCOMMENT
LOWskills/performing-file-carving-with-foremost/SKILL.md141 /cases/case-2024-001/images/evidence.ddCOMMENT
LOWskills/exploiting-broken-link-hijacking/SKILL.md161COMMENT
LOWskills/testing-for-email-header-injection/SKILL.md161 -H "Content-Type: application/json" \COMMENT
LOWskills/detecting-lateral-movement-in-network/SKILL.md61```bashCOMMENT
LOWskills/detecting-lateral-movement-in-network/SKILL.md121# index=wineventlog EventCode=7045 ServiceName="PSEXESVC" OR ServiceName="*psexec*"COMMENT
LOWskills/detecting-lateral-movement-in-network/SKILL.md301COMMENT
LOWskills/detecting-lateral-movement-in-network/SKILL.md321# SOAR playbook for lateral movement response (pseudocode)COMMENT
LOWskills/detecting-lateral-movement-in-network/SKILL.md341COMMENT
LOWskills/detecting-lateral-movement-in-network/SKILL.md361COMMENT
LOWskills/exploiting-ipv6-vulnerabilities/SKILL.md81COMMENT
LOW…rforming-wifi-password-cracking-with-aircrack/SKILL.md81# Scan all channels for access pointsCOMMENT
LOW…/exploiting-prototype-pollution-in-javascript/SKILL.md61// Or use constructor: http://target.com/page?constructor[prototype][polluted]=trueCOMMENT
LOW…/exploiting-prototype-pollution-in-javascript/SKILL.md101### Step 3 — Exploit Client-Side for DOM XSSCOMMENT
LOW…esting-for-xss-vulnerabilities-with-burpsuite/SKILL.md161# Common DOM XSS sinks to monitor:COMMENT
LOW…esting-for-xss-vulnerabilities-with-burpsuite/SKILL.md201# Case variation: <ScRiPt>alert(1)</ScRiPt>COMMENT
LOWskills/testing-for-sensitive-data-exposure/SKILL.md161COMMENT
LOWskills/testing-for-sensitive-data-exposure/SKILL.md181COMMENT
LOWskills/testing-for-sensitive-data-exposure/SKILL.md241# - AWS access keys (AKIA...)COMMENT
LOW…loiting-zerologon-vulnerability-cve-2020-1472/SKILL.md101COMMENT
LOW…onfiguring-windows-defender-advanced-settings/SKILL.md141# Network Protection leverages Microsoft SmartScreen intelligenceCOMMENT
LOWskills/performing-clickjacking-attack-test/SKILL.md341COMMENT
LOW…nfiguring-windows-event-logging-for-detection/SKILL.md121COMMENT
LOWskills/detecting-network-anomalies-with-zeek/SKILL.md101# conn.log - All network connections (TCP, UDP, ICMP)COMMENT
LOWskills/exploiting-deeplink-vulnerabilities/SKILL.md121```COMMENT
LOWskills/performing-steganography-detection/SKILL.md121zsteg -a /cases/case-2024-001/media/suspect_image.pngCOMMENT
52 more matches not shown…
AI Slop Vocabulary91 hits · 95 pts
SeverityFileLineSnippetContext
MEDIUM⚡index.json1{"version":"1.1.0","generated_at":"2026-08-24T10:40:36Z","repository":"https://github.com/mukul975/Anthropic-CybersecuriCODE
MEDIUM⚡index.json1{"version":"1.1.0","generated_at":"2026-08-24T10:40:36Z","repository":"https://github.com/mukul975/Anthropic-CybersecuriCODE
MEDIUM…dentity-verification-for-zero-trust/scripts/process.py293 """Generate a comprehensive identity maturity assessment."""STRING
MEDIUM…ls/analyzing-uefi-bootkit-persistence/scripts/agent.py362 """Run a comprehensive set of chipsec security modules."""STRING
MEDIUM…identity-governance-lifecycle-process/scripts/agent.py127 """Generate comprehensive identity governance report."""STRING
MEDIUM…/extracting-browser-history-artifacts/scripts/agent.py159 """Generate comprehensive browser forensics report."""STRING
MEDIUM…ementing-immutable-backup-with-restic/scripts/agent.py328 """Generate comprehensive backup status report."""STRING
MEDIUM…ing-for-unusual-service-installations/scripts/agent.py147 """Run comprehensive service installation threat hunt."""STRING
MEDIUM⚡…ing-tls-certificate-transparency-logs/scripts/agent.py694 """Generate a comprehensive CT monitoring report."""STRING
MEDIUM…ting-runtime-security-with-tetragon/scripts/process.py233 """Generate a comprehensive security report."""STRING
MEDIUM…nting-google-workspace-admin-security/scripts/agent.py142 """Run comprehensive Google Workspace security audit."""STRING
MEDIUMskills/securing-serverless-functions/scripts/agent.py128 """Run comprehensive serverless security audit."""STRING
MEDIUM…certificate-transparency-for-phishing/scripts/agent.py150 """Generate comprehensive CT monitoring report."""STRING
MEDIUMskills/profiling-threat-actor-groups/scripts/agent.py50 """Build a comprehensive profile for a specific threat actor group."""STRING
MEDIUM…asswordless-auth-with-microsoft-entra/scripts/agent.py146 """Run comprehensive passwordless authentication audit."""STRING
MEDIUM…oss-prevention-with-microsoft-purview/scripts/agent.py240 """Generate comprehensive DLP compliance report."""STRING
MEDIUM…ng-cloudflare-access-for-zero-trust/scripts/process.py176 """Generate comprehensive audit report."""STRING
MEDIUM…ills/implementing-zero-trust-in-cloud/scripts/agent.py157 """Run comprehensive zero trust assessment."""STRING
MEDIUM…detecting-port-scanning-with-fail2ban/scripts/agent.py196 """Generate comprehensive Fail2ban security report."""STRING
MEDIUM…-supply-chain-security-with-in-toto/scripts/process.py167 """Generate a comprehensive verification report."""STRING
MEDIUMskills/detecting-wmi-persistence/scripts/agent.py162 """Generate comprehensive WMI persistence hunt report."""STRING
MEDIUM…ecuring-azure-with-microsoft-defender/scripts/agent.py135 """Generate a comprehensive security posture report."""STRING
MEDIUM…etecting-bluetooth-low-energy-attacks/scripts/agent.py502 """Generate comprehensive BLE security assessment report."""STRING
MEDIUM…tion-based-detection-with-canarytoken/scripts/agent.py156 """Run comprehensive Canarytoken deployment audit."""STRING
MEDIUM…g-kubernetes-etcd-security-assessment/scripts/agent.py131 """Run comprehensive etcd security assessment."""STRING
MEDIUM…entitlement-review-with-sailpoint-iiq/scripts/agent.py86 """Generate a comprehensive entitlement review report."""STRING
MEDIUM…g-analysis-for-forensic-investigation/scripts/agent.py161 """Generate a comprehensive forensic log analysis report."""STRING
MEDIUM…-open-source-intelligence-gathering/scripts/process.py375 """Generate comprehensive OSINT report."""STRING
MEDIUM…ing-dark-web-monitoring-for-threats/scripts/process.py139 """Generate comprehensive dark web monitoring report."""STRING
MEDIUM…unting-for-startup-folder-persistence/scripts/agent.py238 """Run comprehensive startup persistence threat hunt."""STRING
MEDIUM…ng-microsegmentation-for-zero-trust/scripts/process.py234 """Generate comprehensive microsegmentation report."""STRING
MEDIUM…rforming-soc2-type2-audit-preparation/scripts/agent.py673 """Generate a comprehensive audit readiness report."""STRING
MEDIUM…ing-memory-forensics-with-volatility3/scripts/agent.py117 """Run comprehensive memory analysis and generate report."""STRING
MEDIUM…ged-access-management-with-cyberark/scripts/process.py304 """Generate comprehensive PAM audit report."""STRING
MEDIUM…tecting-serverless-function-injection/scripts/agent.py477 """Generate comprehensive serverless injection detection report."""STRING
MEDIUM…/implementing-alert-fatigue-reduction/scripts/agent.py112 """Build comprehensive alert fatigue reduction report."""STRING
MEDIUM…erforming-ios-app-security-assessment/scripts/agent.py514 """Generate comprehensive iOS security assessment report."""STRING
MEDIUM…ming-network-forensics-with-wireshark/scripts/agent.py194 """Generate comprehensive network forensics report."""STRING
MEDIUM…lls/implementing-siem-use-case-tuning/scripts/agent.py125 """Generate comprehensive tuning report with recommendations."""STRING
MEDIUM…performing-file-carving-with-foremost/scripts/agent.py103 """Build a comprehensive evidence catalog of carved files."""STRING
MEDIUMskills/detecting-rootkit-activity/scripts/agent.py173 """Generate comprehensive rootkit detection report."""STRING
MEDIUM…detecting-lateral-movement-in-network/scripts/agent.py178 """Generate comprehensive lateral movement detection report."""STRING
MEDIUM…rming-cloud-log-forensics-with-athena/scripts/agent.py572 """Run all forensic queries and compile a comprehensive report."""STRING
MEDIUM…s/implementing-gcp-vpc-firewall-rules/scripts/agent.py135 """Run a comprehensive firewall audit."""STRING
MEDIUM…sbom-for-supply-chain-vulnerabilities/scripts/agent.py509 """Generate a comprehensive vulnerability analysis report."""STRING
MEDIUM…eploying-software-defined-perimeter/scripts/process.py216 """Generate comprehensive SDP deployment report."""STRING
MEDIUM…-gcp-security-assessment-with-forseti/scripts/agent.py144 """Generate a comprehensive GCP security assessment report."""STRING
MEDIUM…/analyzing-golang-malware-with-ghidra/scripts/agent.py201 """Generate comprehensive Go malware analysis report."""STRING
MEDIUM…-hardware-security-module-integration/scripts/agent.py154 """Run comprehensive HSM compliance audit."""STRING
MEDIUM…s/performing-malware-triage-with-yara/scripts/agent.py118 """Generate comprehensive triage report."""STRING
MEDIUM…detecting-network-anomalies-with-zeek/scripts/agent.py266 """Generate comprehensive Zeek network analysis report."""STRING
MEDIUM…menting-privileged-access-workstation/scripts/agent.py132 """Run comprehensive PAW compliance audit."""STRING
MEDIUM…-active-directory-forest-trust-attack/scripts/agent.py178 """Run comprehensive forest trust security audit."""STRING
MEDIUMskills/performing-ransomware-response/scripts/agent.py189 """Generate comprehensive ransomware incident report."""STRING
MEDIUM…ing-zscaler-private-access-for-ztna/scripts/process.py242 """Generate comprehensive ZPA audit report."""STRING
MEDIUM…ntity-federation-with-saml-azure-ad/scripts/process.py152 """Generate comprehensive federation health report."""STRING
MEDIUM…/performing-sqlite-database-forensics/scripts/agent.py176 """Generate comprehensive forensic analysis report."""STRING
MEDIUM…erforming-sqlite-database-forensics/scripts/process.py158 """Generate comprehensive forensic analysis report."""STRING
MEDIUM…ng-active-directory-with-bloodhound/scripts/process.py321 """Generate comprehensive analysis report."""STRING
MEDIUM…nalyzing-android-malware-with-apktool/scripts/agent.py162 """Run comprehensive APK malware analysis."""STRING
31 more matches not shown…
Modern AI Meta-Vocabulary27 hits · 76 pts
SeverityFileLineSnippetContext
MEDIUM⚡index.json1{"version":"1.1.0","generated_at":"2026-08-24T10:40:36Z","repository":"https://github.com/mukul975/Anthropic-CybersecuriCODE
MEDIUM⚡index.json1{"version":"1.1.0","generated_at":"2026-08-24T10:40:36Z","repository":"https://github.com/mukul975/Anthropic-CybersecuriCODE
MEDIUM⚡index.json1{"version":"1.1.0","generated_at":"2026-08-24T10:40:36Z","repository":"https://github.com/mukul975/Anthropic-CybersecuriCODE
MEDIUM⚡index.json1{"version":"1.1.0","generated_at":"2026-08-24T10:40:36Z","repository":"https://github.com/mukul975/Anthropic-CybersecuriCODE
MEDIUM⚡index.json1{"version":"1.1.0","generated_at":"2026-08-24T10:40:36Z","repository":"https://github.com/mukul975/Anthropic-CybersecuriCODE
MEDIUM⚡index.json1{"version":"1.1.0","generated_at":"2026-08-24T10:40:36Z","repository":"https://github.com/mukul975/Anthropic-CybersecuriCODE
MEDIUMtools/detect-collisions.py58# disambiguation scaffolding and score only the descriptive part.STRING
MEDIUM…lls/assessing-vector-and-embedding-weaknesses/SKILL.md85### Step 1: Inventory the RAG pipelineCOMMENT
MEDIUM⚡…lm-guardrails-for-security/references/api-reference.md195- NeMo Guardrails Documentation: https://docs.nvidia.com/nemo/guardrails/latest/index.htmlCODE
MEDIUM⚡…lm-guardrails-for-security/references/api-reference.md196- Guardrails AI Framework: https://github.com/guardrails-ai/guardrailsCODE
MEDIUM⚡…lm-guardrails-for-security/references/api-reference.md199- OpenAI Guardrails Python: https://github.com/openai/openai-guardrails-pythonCODE
MEDIUM⚡…lm-guardrails-for-security/references/api-reference.md200- Colang 2.0 Guide: https://docs.nvidia.com/nemo/guardrails/latest/configure-rails/colang/index.htmlCODE
MEDIUM⚡…lm-guardrails-for-security/references/api-reference.md201- NeMo Guardrails Security Guidelines: https://docs.nvidia.com/nemo/guardrails/latest/security/guidelines.htmlCODE
MEDIUM…g-nist-rmf-authorization-to-operate/scripts/process.py149 # decision scaffoldCOMMENT
MEDIUMskills/auditing-mcp-servers-for-tool-poisoning/SKILL.md176### 7. Enforce runtime guardrails (optional)COMMENT
MEDIUMskills/securing-agentic-ai-tool-invocation/SKILL.md244| OWASP Agentic AI Top 10 | Threats and controls for agents | https://genai.owasp.org/resource/agentic-ai-threats-and-miCODE
MEDIUM…ing-agentic-ai-tool-invocation/references/standards.md29- OWASP Agentic AI threats & mitigations: https://genai.owasp.org/resource/agentic-ai-threats-and-mitigations/CODE
MEDIUM…agentic-ai-tool-invocation/references/api-reference.md47- NeMo Guardrails docs: https://docs.nvidia.com/nemo/guardrails/CODE
MEDIUM…agentic-ai-tool-invocation/references/api-reference.md49- OWASP Agentic AI Top 10: https://genai.owasp.org/resource/agentic-ai-threats-and-mitigations/CODE
MEDIUMskills/defending-llms-with-guardrails/SKILL.md269| NeMo docs | Colang + YAML schema reference | https://docs.nvidia.com/nemo/guardrails/ |CODE
MEDIUM…lls/testing-prompt-injection-in-rag-pipelines/SKILL.md27# Testing Prompt Injection in RAG PipelinesCOMMENT
MEDIUM…lls/testing-prompt-injection-in-rag-pipelines/SKILL.md94# Baseline request to the RAG chat endpoint (adjust to the target's API)COMMENT
MEDIUM…lls/testing-prompt-injection-in-rag-pipelines/SKILL.md141### 3. Build a Promptfoo RAG red-team configCOMMENT
MEDIUM…lls/testing-prompt-injection-in-rag-pipelines/SKILL.md194 # Point PyRIT at the RAG app's OpenAI-compatible endpointCOMMENT
MEDIUM…mpt-injection-in-rag-pipelines/references/standards.md1# Standards and References — Prompt Injection Testing in RAG PipelinesCOMMENT
MEDIUM…injection-in-rag-pipelines/references/api-reference.md1# API Reference — RAG Prompt Injection Testing ToolsCOMMENT
MEDIUM⚡…ting-gdpr-data-subject-access-request/scripts/agent.py1050# DSAR Workflow Engine -- orchestrates the full lifecycleCOMMENT
Cross-File Repetition10 hits · 50 pts
SeverityFileLineSnippetContext
HIGH…ing-vulnerabilities-with-cvss-scoring/scripts/agent.py0fetch the cisa known exploited vulnerabilities catalog.STRING
HIGH…-endpoint-vulnerability-remediation/scripts/process.py0fetch the cisa known exploited vulnerabilities catalog.STRING
HIGH…lding-vulnerability-scanning-workflow/scripts/agent.py0fetch the cisa known exploited vulnerabilities catalog.STRING
HIGH…ing-threat-modeling-with-mitre-attack/scripts/agent.py0generate att&ck navigator layer json for heatmap visualization.STRING
HIGHskills/mapping-mitre-attack-techniques/scripts/agent.py0generate att&ck navigator layer json for heatmap visualization.STRING
HIGHskills/performing-purple-team-atomic-testing/SKILL.md0generate att&ck navigator layer json for heatmap visualization.STRING
HIGHskills/testing-jwt-token-security/scripts/agent.py0decode jwt header and payload without verification.STRING
HIGH…ng-for-json-web-token-vulnerabilities/scripts/agent.py0decode jwt header and payload without verification.STRING
HIGHskills/testing-api-authentication-weaknesses/SKILL.md0decode jwt header and payload without verification.STRING
HIGH…testing-api-authentication-weaknesses/scripts/agent.py0decode jwt header and payload without verification.STRING
Fake / Example Data43 hits · 43 pts
SeverityFileLineSnippetContext
LOWskills/performing-jwt-none-algorithm-attack/SKILL.md100# Output: {'sub': '1234567890', 'name': 'John Doe', 'role': 'user', 'iat': 1516239022}COMMENT
LOW…eat-modeling-with-owasp-threat-dragon/scripts/agent.py72 "placeholder": f"New {diagram_type} diagram",CODE
LOW…second-order-sql-injection/references/api-reference.md48 {"id": 1, "username": "admin", "email": "admin@example.com"},CODE
LOW…second-order-sql-injection/references/api-reference.md49 {"id": 2, "username": "' UNION SELECT 1,2,3--", "email": "test@test.com"}CODE
LOWskills/exploiting-mass-assignment-in-rest-apis/SKILL.md83 -d '{"username":"testuser","email":"test@test.com","role":"admin"}'CODE
LOW…rce-intelligence-gathering/references/api-reference.md16python agent.py social --name "John Doe"CODE
LOW⚡…ing-dark-web-monitoring-for-threats/scripts/process.py15 python process.py --org "Acme Corp" --domains acme.com,acme.io --check-credentialsSTRING
LOW⚡…ing-dark-web-monitoring-for-threats/scripts/process.py16 python process.py --org "Acme Corp" --check-ransomwareSTRING
LOW⚡…ing-dark-web-monitoring-for-threats/scripts/process.py17 python process.py --org "Acme Corp" --full-scan --output report.jsonSTRING
LOW…nting-gdpr-data-protection-controls/scripts/process.py466 "data_subject_name": "Jane Doe",CODE
LOWskills/testing-for-email-header-injection/SKILL.md157 -d '{"to":["test@test.com","attacker@evil.com"],"subject":"Test","body":"Test"}'CODE
LOWskills/testing-for-email-header-injection/SKILL.md162 -d '{"to":"test@test.com","subject":"Test","body":"{{constructor.constructor(\"return process.env\")()}}"}'CODE
LOW…ls/testing-for-email-header-injection/scripts/agent.py103 def test_contact_form(self, endpoint="/contact", base_email="test@test.com"):CODE
LOW…ls/testing-for-email-header-injection/scripts/agent.py119 def test_json_api(self, endpoint, base_email="test@test.com"):CODE
LOW…ls/testing-for-email-header-injection/scripts/agent.py142 def test_smtp_commands(self, endpoint, field_name="email", base_email="test@test.com"):CODE
LOW…lls/exploiting-jwt-algorithm-confusion-attack/SKILL.md186 modifications={"role": "admin", "sub": "admin@example.com"})CODE
LOW…-authentication-with-fido2/references/api-reference.md11 user: { id: userId, name: "user@example.com", displayName: "User" },CODE
LOWskills/testing-api-security-with-owasp-top-10/SKILL.md186 -d '{"email":"test@test.com","password":"wrong"}' \CODE
LOW…esting-api-security-with-owasp-top-10/scripts/agent.py44 resp = requests.post(url, json={"email": "test@test.com", "password": f"wrong{i}"},CODE
LOWskills/testing-jwt-token-security/SKILL.md67# Output: {"sub":"1234567890","name":"John Doe","iat":1516239022}COMMENT
LOWskills/testing-jwt-token-security/SKILL.md93PAYLOAD=$(echo -n '{"sub":"1234567890","name":"John Doe","role":"admin","iat":1516239022}' | base64 | tr -d '=' | tr '+/CODE
LOW…implementing-browser-isolation-for-zero-trust/SKILL.md101 organization="Acme Corp",CODE
LOW…r-isolation-for-zero-trust/references/api-reference.md13 organization="Acme Corp",CODE
LOW…r-isolation-for-zero-trust/references/api-reference.md260python agent.py --action demo --org "Acme Corp" --output report.jsonCODE
LOWskills/performing-privacy-impact-assessment/SKILL.md73 data_controller="Acme Corp",CODE
LOW…-privacy-impact-assessment/references/api-reference.md13 organization_name="Acme Corp",CODE
LOW…-privacy-impact-assessment/references/api-reference.md26 data_controller="Acme Corp", # Controller nameCODE
LOW…-privacy-impact-assessment/references/api-reference.md236python agent.py --action demo --org "Acme Corp" --output report.jsonCODE
LOW…-middle-phishing-detection/references/api-reference.md55 "mailboxOwner": "user@example.com",CODE
LOW…ls/testing-for-business-logic-vulnerabilities/SKILL.md157 -d '{"cart_id": "abc123", "shipping_address": "123 Main St"}' \CODE
LOW…ls/testing-for-business-logic-vulnerabilities/SKILL.md265 -d '{"email":"test@test.com","password":"Test1234!","role":"admin"}' \CODE
LOW…testing-api-for-mass-assignment-vulnerability/SKILL.md3022. Register another user with injected role: `POST /api/v1/register {"name":"Admin","email":"admin@example.com","passworCODE
LOW…s/performing-web-application-penetration-test/SKILL.md198{"orderId":10452,"customerName":"Jane Smith","email":"jane@...","address":"123 Main St"}CODE
LOW…ential-access-with-lazagne/references/api-reference.md184 "Login": "admin@example.com",CODE
LOW…gdpr-compliance-assessment/references/api-reference.md25node scripts/submit_dsar.js --email user@example.com --company "Acme Corp"CODE
LOW…gdpr-compliance-assessment/references/api-reference.md178pseudonym = pseudonymize("user@example.com", secret)CODE
LOW…ng-broken-object-property-level-authorization/SKILL.md69 "name": "John Doe",CODE
LOW…implementing-gdpr-data-subject-access-request/SKILL.md258 requester_name="John Doe",CODE
LOW…implementing-gdpr-data-subject-access-request/SKILL.md274 data_subject="John Doe",CODE
LOW…ata-subject-access-request/references/api-reference.md74| `search_identifiers` | `dict` | required | Key-value pairs to search for (e.g., `{"email": "user@example.com"}`) |CODE
LOWskills/testing-mobile-api-authentication/SKILL.md151 -d '{"email":"test@test.com","password":"pass"}' | jq -r '.token')CODE
LOW…testing-api-authentication-weaknesses/scripts/agent.py170 {"username": "admin@example.com", "password": "wrong"})CODE
LOW…r-spearphishing-indicators/references/api-reference.md57result, _, _ = spf.check2(ip="1.2.3.4", sender="user@example.com", helo="mail.example.com")CODE
Redundant / Tautological Comments29 hits · 42 pts
SeverityFileLineSnippetContext
LOW…loiting-kerberoasting-with-impacket/scripts/process.py158 # Check if privilegedCOMMENT
LOW…ulti-factor-authentication-with-duo/scripts/process.py156 # Check if denials happened within a short windowCOMMENT
LOW…-malware-behavior-with-cuckoo-sandbox/scripts/agent.py199 # Check if argument is a report JSON pathCOMMENT
LOW…ing-insecure-data-storage-in-mobile/scripts/process.py86 # Check if database is encryptedCOMMENT
LOW…g-post-quantum-cryptography-migration/scripts/agent.py702 # Check if connection succeeded with the specified groupCOMMENT
LOW…g-for-command-and-control-beaconing/scripts/process.py172 # Check if beaconing threshold metCOMMENT
LOW…etecting-bluetooth-low-energy-attacks/scripts/agent.py384 # Check if Secure Connections flag is not setCOMMENT
LOW…lls/hunting-for-dcom-lateral-movement/scripts/agent.py261 # Check if DCOM is enabledCOMMENT
LOW…teral-movement/scripts/detect_dcom_lateral_movement.py165 # Check if this might be interactive (less suspicious) or DCOM (more suspicious)COMMENT
LOW…ementing-ransomware-backup-strategy/scripts/process.py262 # Check if restore test is recent enoughCOMMENT
LOW…orming-soc2-type2-audit-preparation/scripts/process.py326 # Display resultsCOMMENT
LOW…s/detecting-dll-sideloading-attacks/scripts/process.py93 # Check if DLL is a known sideloading targetCOMMENT
LOW…s/detecting-dll-sideloading-attacks/scripts/process.py95 # Check if loaded from non-standard pathCOMMENT
LOW…tecting-serverless-function-injection/scripts/agent.py216 # Check if event data flows into this sinkCOMMENT
LOW…g-dcsync-attack-in-active-directory/scripts/process.py74 # Check if this is a legitimate domain controllerCOMMENT
LOW…-soar-playbook-with-palo-alto-xsoar/scripts/process.py111 # Check if preceding task is manualCOMMENT
LOW…rologon-vulnerability-cve-2020-1472/scripts/process.py100 # Check if Netlogon is accessibleCOMMENT
LOW…-phishing-reporting-button-workflow/scripts/process.py137 # Check if it's a known simulationCOMMENT
LOW…-decoy-files-for-ransomware-detection/scripts/agent.py126 # Check if file was renamed with ransomware extensionCOMMENT
LOW…r-compliance-assessment/scripts/article30_validator.py76 # Check if safeguards are documentedCOMMENT
LOW…detecting-container-escape-attempts/scripts/process.py329 # Print resultsCOMMENT
LOW…tecting-process-hollowing-technique/scripts/process.py183 # Check if process path is from unexpected locationCOMMENT
LOW…g-business-email-compromise-with-ai/scripts/process.py155 # Check if first-time sender to this recipientCOMMENT
LOW…g-business-email-compromise-with-ai/scripts/process.py167 # Check if request type is unusual for senderCOMMENT
LOW…g-spearphishing-simulation-campaign/scripts/process.py336 # Check if domain resolvesCOMMENT
LOW…ng-for-living-off-the-land-binaries/scripts/process.py399 # Output resultsCOMMENT
LOW…d-team-c2-infrastructure-with-havoc/scripts/process.py227 # Check if domain is too new (WHOIS-based heuristic)COMMENT
LOW…menting-sigstore-for-software-signing/scripts/agent.py231 result = run_cosign(["env"]) # Check if rekor-cli is betterCODE
LOW…mplementing-usb-device-control-policy/scripts/agent.py22 # Check if USBGuard is installed and runningCOMMENT
Verbosity Indicators20 hits · 35 pts
SeverityFileLineSnippetContext
LOW…ting-bootkits-in-efi-system-partition/scripts/agent.py127 # Step 2: anomalous root entriesCOMMENT
LOW…ting-bootkits-in-efi-system-partition/scripts/agent.py152 # Step 6: YARACOMMENT
LOW⚡…tecting-serverless-function-injection/scripts/agent.py540 # Step 1: Enumerate functionsCOMMENT
LOW⚡…tecting-serverless-function-injection/scripts/agent.py545 # Step 2: Get event source mappingsCOMMENT
LOW⚡…tecting-serverless-function-injection/scripts/agent.py548 # Step 3: Scan code for injection patternsCOMMENT
LOW⚡…tecting-serverless-function-injection/scripts/agent.py564 # Step 4: Audit layersCOMMENT
LOW⚡…tecting-serverless-function-injection/scripts/agent.py567 # Step 5: Detect privilege escalation pathsCOMMENT
LOW⚡…tecting-serverless-function-injection/scripts/agent.py570 # Step 6: Check CloudTrail for suspicious modificationsCOMMENT
LOW⚡…tecting-serverless-function-injection/scripts/agent.py573 # Step 7: Check function URL securityCOMMENT
LOW⚡…plementing-aws-nitro-enclave-security/scripts/agent.py447 # Step 1: Find enclave-enabled instancesCOMMENT
LOW⚡…plementing-aws-nitro-enclave-security/scripts/agent.py450 # Step 2: Audit KMS key policiesCOMMENT
LOW⚡…plementing-aws-nitro-enclave-security/scripts/agent.py467 # Step 3: Audit IAM rolesCOMMENT
LOW⚡…plementing-aws-nitro-enclave-security/scripts/agent.py474 # Step 4: Search CloudTrail eventsCOMMENT
LOW⚡…plementing-aws-nitro-enclave-security/scripts/agent.py477 # Step 5: Validate attestation document if providedCOMMENT
LOW⚡…ting-gdpr-data-subject-access-request/scripts/agent.py1442 # Step 3: Data MappingCOMMENT
LOW⚡…ting-gdpr-data-subject-access-request/scripts/agent.py1447 # Step 4: Exemption ReviewCOMMENT
LOW…ting-gdpr-data-subject-access-request/scripts/agent.py1398 # Step 1: Register DSARCOMMENT
LOW…ting-gdpr-data-subject-access-request/scripts/agent.py1416 # Step 2: PII DiscoveryCOMMENT
LOW…ting-gdpr-data-subject-access-request/scripts/agent.py1458 # Step 5: Response GenerationCOMMENT
LOW…ting-gdpr-data-subject-access-request/scripts/agent.py1477 # Step 6: Mark completeCOMMENT
Self-Referential Comments8 hits · 28 pts
SeverityFileLineSnippetContext
MEDIUM⚡…eploying-active-directory-honeytokens/scripts/agent.py120# Create the honeytoken accountCOMMENT
MEDIUM⚡…eploying-active-directory-honeytokens/scripts/agent.py257# Create the GPO folder structure in SYSVOLCOMMENT
MEDIUM⚡…eploying-active-directory-honeytokens/scripts/agent.py266# Create the Groups.xml with a fake cpasswordCOMMENT
MEDIUM…eploying-active-directory-honeytokens/scripts/agent.py294# Create a matching real AD account (disabled or with different password)COMMENT
MEDIUM…ting-browser-isolation-for-zero-trust/scripts/agent.py817 # Create a session (which evaluates all policies)COMMENT
MEDIUM…rming-deception-technology-deployment/scripts/agent.py65 content += f"# This file is a decoy. Any access triggers a security alert.\n"CODE
MEDIUM…s/testing-mobile-api-authentication/scripts/process.py136 # Create a JWT with expired timestamp (modifying payload)COMMENT
MEDIUM…fuzz-testing-in-cicd-with-aflplusplus/scripts/agent.py33 # Create a minimal seed if none providedCOMMENT
AI Structural Patterns17 hits · 16 pts
SeverityFileLineSnippetContext
LOW…ls/analyzing-indicators-of-compromise/scripts/agent.py41CODE
LOW…ls/analyzing-indicators-of-compromise/scripts/agent.py50CODE
LOW…everse-engineering-ios-app-with-frida/scripts/agent.py88CODE
LOW…etecting-cloud-threats-with-guardduty/scripts/agent.py41CODE
LOW…etecting-cloud-threats-with-guardduty/scripts/agent.py73CODE
LOW…zing-lnk-file-and-jump-list-artifacts/scripts/agent.py111CODE
LOW…ng-lnk-file-and-jump-list-artifacts/scripts/process.py71CODE
LOW…sbom-for-supply-chain-vulnerabilities/scripts/agent.py646CODE
LOW…ilding-threat-intelligence-platform/scripts/process.py41CODE
LOWskills/performing-ransomware-response/scripts/agent.py95CODE
LOW…/performing-privacy-impact-assessment/scripts/agent.py674CODE
LOW…/performing-privacy-impact-assessment/scripts/agent.py907CODE
LOW…xecuting-phishing-simulation-campaign/scripts/agent.py118CODE
LOW…nfrastructure-with-sliver-framework/scripts/process.py76CODE
LOWskills/exploiting-idor-vulnerabilities/scripts/agent.py139CODE
LOW…detecting-misconfigured-azure-storage/scripts/agent.py58CODE
LOW…detecting-misconfigured-azure-storage/scripts/agent.py98CODE
Synthetic Comment Markers2 hits · 15 pts
SeverityFileLineSnippetContext
HIGH⚡index.json1{"version":"1.1.0","generated_at":"2026-08-24T10:40:36Z","repository":"https://github.com/mukul975/Anthropic-CybersecuriCODE
HIGH⚡index.json1{"version":"1.1.0","generated_at":"2026-08-24T10:40:36Z","repository":"https://github.com/mukul975/Anthropic-CybersecuriCODE
Overly Generic Function Names1 hit · 1 pts
SeverityFileLineSnippetContext
LOW…lls/performing-red-team-with-covenant/scripts/agent.py131 def execute_task(self, grunt_id, task_name, parameters=None):CODE