redcap-droid

Meta-dispatcher for the redcap suite. Routes red-team and device-research intent to the appropriate sibling skill. Start here when the right sibling isn't obvious or when a task needs multiple siblings chained.

1 skill

Security compliance baseline audit using ComplianceAsCode/content. Compare a target system or device config to a hardening baseline — SCAP, STIG (DISA), CIS benchmarks, PCI-DSS, OSPP, USGCB. Emit deviation report with specific rule references (OVAL, XCCDF, CCE).

1 skill

Autonomous penetration testing via local PentestGPT CLI. Subprocess wrapper around a private fork of GreyDGL/PentestGPT for CTF challenges, Hack The Box machines, and authorized engagements. Streams walkthrough, detects flags, maintains session state. Isolates upstream's adversarial system prompt.

1 skill

Binary reverse engineering with ImHex. Hex editing, Pattern Language for structured binary parsing, YARA, diffing, multi-ISA disassembly (ARM32/64, x86, MIPS, RISC-V), entropy and magic-byte analysis. Uses ImHex's native MCP server when installed, otherwise teaches the pattern language for manual use.

1 skill

Firmware and kernel analysis workbench. Unpack MTK scatter / squashfs / ubifs / ext4 partitions. Grep for compile-time feature gates (em_support, show_5g_toggle, engineer_mode, debug_mode). Audit advertised features vs actual compile-time state. Detect FCC-filing gaps. Corpus grows as you acquire trees and dumps.

1 skill

Offensive payload library lookup. SQL injection, XSS, SSTI, LDAP, XXE, CSRF, CRLF, SSRF, deserialization, auth bypass, WAF bypass, CVE-specific exploits. Thin wrapper around a local clone of swisskyrepo/PayloadsAllTheThings with topic-folder navigation and Intruder wordlist retrieval.

1 skill

Harness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses

200 skills · 98 commands · 71 agents · 1 MCP server · hooks

Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.

hooks

Cross-installation agent federation with zero-trust security, PII-gated data flow, and compliance-grade audit trails

3 skills · 1 command · 1 agent

Install the "AAS Security Engineer" editorial skill bundle for Claude Code.

12 skills

Duende development skills and agents for Claude Code — covering OAuth/OIDC protocols, IdentityServer, token management, ASP.NET Core authentication/authorization, BFF patterns, and secure identity architecture

24 skills · 2 agents

Comprehensive UI/UX design plugin for mobile (iOS, Android, React Native) and web applications with design systems, accessibility, and modern patterns

9 skills · 4 commands · 3 agents