Browse Skills

Triage Validation applies a 7-question gate, 4 pre-submission gates, and a never-submit list to bug bounty findings before writing any report. Use it to filter out invalid, out-of-scope, or unproven issues and reduce N/A submissions.

Web2 Vulnerability Classes provides a complete reference for 26 web2 bug classes with root causes, detection patterns, bypass tables, exploit techniques, and real paid examples. Use it when hunting a specific vulnerability class or studying what makes bugs pay.

Web3 Audit catalogs 10 DeFi bug classes with grep patterns, Foundry PoC templates, and pre-dive kill signals for smart contract bug bounties.

Web Design Guidelines reviews UI code for compliance with Web Interface Guidelines, covering usability, accessibility, and design best practices. Use it when asked to review a UI, audit design, or check accessibility.

Code Review runs a multi-LLM pipeline to analyze pull requests for security vulnerabilities, code quality, performance, TDD compliance, and stubs. Use it before merging changes with security or architecture impact.

Flow Deliver coordinates multiple AI providers to validate, score, and review code or documents during the Double Diamond delivery phase. Use it to get multi-model quality, security, and completeness checks before finalizing deliverables.

Octopus Security Audit performs OWASP compliance, vulnerability scanning, and adversarial red team testing for security reviews. Use it for quick scans or deep audits of code, git history, CI/CD, and dependencies.

Systematic Audit examines a codebase for issues, inconsistencies, and broken patterns using a structured, checklist-driven process. Use it for pre-release reviews, tech debt assessment, or comprehensive quality verification across an application.

Systematic Debugging guides developers through a four-phase process to find root causes of errors, test failures, and unexpected behavior before applying a fix. Use it when stuck on bugs, failing tests, or unexplained behavior.

Test Coverage Audit traces codepaths in a diff, maps each path against existing tests, and generates missing coverage tests for gaps. Use it before shipping PRs to visualize coverage and reduce untested branches.

AST-Grep Find performs syntax-aware code search and refactoring using ast-grep patterns. Use it to find function calls, imports, and class definitions, or rename and replace code across a codebase.

Async REPL Protocol defines rules for using Agentica's async REPL harness during testing: await Future-returning tools and compute and return results in a single code block.