Ghost Security
Ghost Security publishes skills that let an AI agent run security work on code and dependencies, including static analysis for injection, XSS, SSRF and other OWASP categories, software composition analysis against known CVEs, and scanning for leaked keys and credentials. Their catalog also covers repository mapping, combined security reporting, validation of findings as true or false positives, and an intercepting proxy for capturing and replaying HTTP traffic. Taken together, the skills form a pipeline from codebase orientation through scanning to triage and runtime testing.
Skills
8 skills · 438 stars · Apache-2.0
Ghost Exo The single interface for building, improving, and debugging exo workflows.
Ghost Proxy Starts and controls the reaper MITM proxy to capture, inspect, search, and replay HTTP/HTTPS traf…
Ghost Repo Context Scans directory structure, detects projects, maps dependencies, and documents code organization i…
Ghost Report Ghost Security — combined security report.
Ghost Scan Code Ghost Security - SAST code scanner.
Ghost Scan Deps Ghost Security - Software Composition Analysis (SCA) scanner.
Ghost Scan Secrets Ghost Security - Secrets and credentials scanner.
Ghost Validate This skill should be used when the user asks to "validate a finding", "check if a vulnerability i…