메뉴
Choose and combine AI analysis profiles for Agent Smith scans. Use when selecting profiles, combining multiple profiles, or understanding which profile fits a target codebase.
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
Run Agent Smith in CTF mode for Capture The Flag challenges. Use when doing CTF, finding flags, hunting exploitable vulnerabilities, or analyzing challenge code for quick wins.
Add new static analysis rules to Agent Smith's rule engine. Use when creating detection rules, adding regex patterns for vulnerabilities, or extending the static scanner.
Interpret and triage Agent Smith scan findings. Use when reading scan results, understanding severity ratings, or deciding what to fix first.
Start, configure, and use the Agent Smith MCP server from Cursor. Use when setting up the MCP server, running scans via MCP tools, or integrating Agent Smith into Cursor IDE workflows.
Run Agent Smith security scans with the right mode, preset, and flags. Use when scanning code for vulnerabilities, running security audits, or when the user mentions agentsmith, security scan, or vulnerability analysis.
SOC 직업 분류 기준
| name | agentsmith-profiles |
| description | Choose and combine AI analysis profiles for Agent Smith scans. Use when selecting profiles, combining multiple profiles, or understanding which profile fits a target codebase. |
User needs to pick the right AI profile(s) for their target codebase.
| Profile | Best for | What it checks |
|---|---|---|
owasp | Any web app | OWASP Top 10: injection, XSS, CSRF, auth, crypto, SSRF |
ctf | CTF challenges | Exploitable vulns, flags, quick wins, attack chains |
springboot | Java/Spring | SpEL injection, actuator exposure, bean manipulation, JDBC |
flask | Python/Flask | SSTI (Jinja2), SQLAlchemy injection, debug mode, pickle |
cpp_conan | C++/Conan | Buffer overflow, use-after-free, format string, supply chain |
pci | Payment systems | PCI-DSS compliance: cardholder data, encryption, access control |
soc2 | SaaS/enterprise | SOC2: logging, access control, change management |
code_review | General | Code quality, maintainability, best practices |
Profiles can be combined with commas. The deduplication engine merges findings.
# Web app with OWASP + framework-specific checks
python3 agentsmith.py hybrid ./app ./scanner --profile owasp,flask
# CTF with OWASP coverage
python3 agentsmith.py hybrid ./challenge ./scanner --profile ctf,owasp
# Compliance + security
python3 agentsmith.py hybrid ./app ./scanner --profile pci,owasp
python3 agentsmith.py hybrid ./app --detect-tech-stack
Returns detected languages, frameworks, and suggests matching profiles.
Combine them: --preset ctf --profile ctf,owasp
--detect-tech-stackowasp + framework profile (flask, springboot)ctf (or ctf,owasp for broader coverage)cpp_conanpci or soc2 (+ owasp for security)code_review,owasp