scramblerlab

Full PR lifecycle for solo workflow — cut feature branch from local main commits, push, create PR, wait for merge confirmation, clean up, sync main, compact context.

Black-box web application penetration test — enumerate, exploit, fix, re-test, and report. Covers OWASP Top 10 2025, API Security Top 10 2023, JWT, WebSocket, cloud metadata, LLM threats, and more. Attack patterns auto-refresh every 30 days.

Creates new Agent Skills by generating SKILL.md files. Activates when the user asks to create, build, or define a new skill.