Exécutez n'importe quel Skill dans Manus
en un clic

Exécutez n'importe quel Skill dans Manus en un clic

agentsmith-profiles

Étoiles2

Forks0

Mis à jour16 mars 2026 à 02:38

Choose and combine AI analysis profiles for Agent Smith scans. Use when selecting profiles, combining multiple profiles, or understanding which profile fits a target codebase.

Installation

Installer avec Codex ou Claude Copiez ce prompt, collez-le dans Codex, Claude ou un autre assistant, puis laissez-le vérifier la page du skill et l'installer pour vous.

Exécuter dans Manus

Source

babywyrm

babywyrm/agentsmith

Ouvrir le dépôt GitHub Voir les dépôts du créateur

Téléchargement

Exécuter dans Manus

Métiers associésSOC

Basé sur la classification professionnelle SOC

Analystes en sécurité de l'informationProfessions informatiques et mathématiques·SOC 15-1212

SKILL.md

readonly

name	agentsmith-profiles
description	Choose and combine AI analysis profiles for Agent Smith scans. Use when selecting profiles, combining multiple profiles, or understanding which profile fits a target codebase.

Agent Smith Profile Selection

When to Use

User needs to pick the right AI profile(s) for their target codebase.

Available Profiles

Profile	Best for	What it checks
`owasp`	Any web app	OWASP Top 10: injection, XSS, CSRF, auth, crypto, SSRF
`ctf`	CTF challenges	Exploitable vulns, flags, quick wins, attack chains
`springboot`	Java/Spring	SpEL injection, actuator exposure, bean manipulation, JDBC
`flask`	Python/Flask	SSTI (Jinja2), SQLAlchemy injection, debug mode, pickle
`cpp_conan`	C++/Conan	Buffer overflow, use-after-free, format string, supply chain
`pci`	Payment systems	PCI-DSS compliance: cardholder data, encryption, access control
`soc2`	SaaS/enterprise	SOC2: logging, access control, change management
`code_review`	General	Code quality, maintainability, best practices

Combining Profiles

Profiles can be combined with commas. The deduplication engine merges findings.

# Web app with OWASP + framework-specific checks
python3 agentsmith.py hybrid ./app ./scanner --profile owasp,flask

# CTF with OWASP coverage
python3 agentsmith.py hybrid ./challenge ./scanner --profile ctf,owasp

# Compliance + security
python3 agentsmith.py hybrid ./app ./scanner --profile pci,owasp

Detect and Suggest

python3 agentsmith.py hybrid ./app --detect-tech-stack

Returns detected languages, frameworks, and suggests matching profiles.

Profile vs Preset

Preset = scanning configuration (how many files, what features)
Profile = AI analysis focus (what vulnerabilities to look for)

Combine them: --preset ctf --profile ctf,owasp

Quick Decision Tree

Don't know the stack? → --detect-tech-stack
Web app? → owasp + framework profile (flask, springboot)
CTF? → ctf (or ctf,owasp for broader coverage)
C++ native code? → cpp_conan
Compliance? → pci or soc2 (+ owasp for security)
Code review? → code_review,owasp

Plus depuis ce dépôt

même dépôt

agentsmith-ctf

babywyrm/agentsmith

Run Agent Smith in CTF mode for Capture The Flag challenges. Use when doing CTF, finding flags, hunting exploitable vulnerabilities, or analyzing challenge code for quick wins.

2026-03-162

agentsmith-extend-rules

babywyrm/agentsmith

Add new static analysis rules to Agent Smith's rule engine. Use when creating detection rules, adding regex patterns for vulnerabilities, or extending the static scanner.

2026-03-162

agentsmith-interpret

babywyrm/agentsmith

Interpret and triage Agent Smith scan findings. Use when reading scan results, understanding severity ratings, or deciding what to fix first.

2026-03-162

agentsmith-mcp-server

babywyrm/agentsmith

Start, configure, and use the Agent Smith MCP server from Cursor. Use when setting up the MCP server, running scans via MCP tools, or integrating Agent Smith into Cursor IDE workflows.

2026-03-162

agentsmith-scan

babywyrm/agentsmith

Run Agent Smith security scans with the right mode, preset, and flags. Use when scanning code for vulnerabilities, running security audits, or when the user mentions agentsmith, security scan, or vulnerability analysis.

2026-03-162

Agent Smith Profile Selection

When to Use

User needs to pick the right AI profile(s) for their target codebase.

Available Profiles

Profile

Best for

What it checks

owasp

Any web app

OWASP Top 10: injection, XSS, CSRF, auth, crypto, SSRF

ctf

CTF challenges

Exploitable vulns, flags, quick wins, attack chains

springboot

Java/Spring

SpEL injection, actuator exposure, bean manipulation, JDBC

flask

Python/Flask

SSTI (Jinja2), SQLAlchemy injection, debug mode, pickle

cpp_conan

C++/Conan

Buffer overflow, use-after-free, format string, supply chain

pci

Payment systems

PCI-DSS compliance: cardholder data, encryption, access control

soc2

SaaS/enterprise

SOC2: logging, access control, change management

code_review

General

Code quality, maintainability, best practices

Combining Profiles

Profiles can be combined with commas. The deduplication engine merges findings.

# Web app with OWASP + framework-specific checks python3 agentsmith.py hybrid ./app ./scanner --profile owasp,flask # CTF with OWASP coverage python3 agentsmith.py hybrid ./challenge ./scanner --profile ctf,owasp # Compliance + security python3 agentsmith.py hybrid ./app ./scanner --profile pci,owasp

Detect and Suggest

python3 agentsmith.py hybrid ./app --detect-tech-stack

Returns detected languages, frameworks, and suggests matching profiles.

Profile vs Preset

Preset = scanning configuration (how many files, what features)

Profile = AI analysis focus (what vulnerabilities to look for)

Combine them: --preset ctf --profile ctf,owasp

Quick Decision Tree

Don't know the stack? → --detect-tech-stack

Web app? → owasp + framework profile (flask, springboot)

CTF? → ctf (or ctf,owasp for broader coverage)

C++ native code? → cpp_conan

Compliance? → pci or soc2 (+ owasp for security)

Code review? → code_review,owasp