security-audit

Project overview

Repo Forensics scans untrusted agent repositories locally for prompt injection, malicious packages, MCP tool poisoning, credential access, data exfiltration, obfuscated execution, and compound attack chains. It can audit an existing agent stack or install hooks that block known package indicators before commands and run a broader review after clones or installs. Detection rules and vulnerability intelligence can be updated separately, and the scanner reports no telemetry.

Project overview

Use the skill in audit, scan, guide, or harden mode to review a backend project. It detects the stack, maps the attack surface, traces untrusted input to dangerous sinks, checks dependencies and configuration, and reports verified findings with file locations, severity, and fix guidance. Its coverage is anchored to OWASP and ASVS, but it is not runtime testing, a professional penetration test, or a compliance program, and it does not edit code without approval.