Run This Before Feeding Code to an LLM: A DIY Python SAST Audit Script That Instantly Detects Confidential Data, API Keys, and Injection Vulnerabilities with Zero External Packages

Incidents where API keys are leaked due to code written by developers, leading to cloud bankruptcy, are endless. When requesting code reviews from LLMs, cases where confidential credentials or unverif ...
GitHub

server-side-exec-2.md

For injection attacks (SQLi, SSTI, SSRF, XXE, command injection, PHP type juggling, PHP file inclusion), see server-side.md. For deserialization attacks (Java, Pickle) and race conditions, see ...
GitHub

SKILL.md

description Local-tooling companion to the bug-bounty orchestrator — carries the SAME complete bug-bounty workflow, but reach for THIS variant when you also need to resolve where tools, wordlists, and ...