Home / Skills / agentic-app-audit
agentic-app-audit From the maker
awarexone/Agentic-Bug-HunterSkill
Black-box security audit of a DEPLOYED AI agent (not the MCP server behind it) — tool-call hijacking, cross-session memory poisoning, confused-deputy via connected tools, agent-to-agent IDOR, excessive agency / unconfirmed destructive actions, and privilege compromise where the agent holds broader perms than the user. Use when the target is a live assistant/agent product with tool access (bookings, email, payments, file/RAG, browsing) rather than a raw LLM chat box or an MCP server you can read.
Why this score
This repo hosts 10 skills, so its 5,379 stars are split between them (about 538 each) for scoring.
Popularity score: 77/100 from public GitHub signals only. It shows how widely used and maintained this is, not how well it works. Not included yet: the fake-star check. The security scan is shown separately and doesn't change the score. How we rank
Security
Scanned Oct 20, 2026 at commit 40b03eeea639, with Cisco's open-source skill-scanner.
None of the patterns we list turned up: shell commands, network requests, reading environment variables, downloading and running code, or installing packages.
A scan lists patterns in the code. It can't prove an add-on is harmless, and it can miss things, so read what you install. How we scan
Alternatives
Other makers' add-ons that do the same job, next to this one.
| Name | Score | Stars | Context | Updated |
|---|---|---|---|---|
| This oneagentic-app-audit awarexone/Agentic-Bug-Hunter · Skill | 77 | ★ 5.4k | ≈130 always | 26d ago |
| agent-agentic-payments ruvnet/ruflo · Skill Both about agentic and payment | 90 | ★ 77k | ≈23 always | 16d ago |
| agentic-tool-integration samugit83/redamon · Skill Both about agentic and call | 76 | ★ 3.2k | ≈25 always | 16d ago |
| agentic-eval sandbaseai/sandbase-skills · Skill Same job: ai engineering | 52 | ★ 202 | ≈49 always | 1mo ago |
| agentic bergside/awesome-design-skills · Skill Both about agentic | 65 | ★ 3.3k | ≈32 always | 4mo ago |
| agentic-review Ovid/paad · Skill Both about agentic | 59 | ★ 138 | ≈67 always | 16d ago |