Oscar Marion: “Oh nice! I have been using other skills like the ones from h…”

Oscar Marion @osrim5df25ecac

If you're looking for a skill manager, I've built one with some security audit features built-in: https://github.com/osrim/niksi I would be super happy to have some feedback, it's the first time I ship a CLI!

GitHubGitHub - osrim/niksi: 🪄 Install, review, and share agent skills.🪄 Install, review, and share agent skills. Contribute to osrim/niksi development by creating an account on GitHub.

Tom @8bitcurser5d7ab500e

osrim have you tried the one of cloudflare? I gave it a spin yesterday pretty decent.

Oscar Marion @osrim5dd538548

Nope, haven't heard of it! What's the name?

Tom @8bitcurser5d3292e04

https://github.com/cloudflare/security-audit-skill check it out! it burns a shit ton of tokens but given the current state of things, better be safe than sorry

GitHubGitHub - cloudflare/security-audit-skill: A coding-agent skill for multi-phase security audits with independently verified, machine-readable findingsA coding-agent skill for multi-phase security audits with independently verified, machine-readable findings - cloudflare/security-audit-skill

Oscar Marion @osrim5d

Oh nice! I have been using other skills like the ones from https://github.com/trailofbits/skills! I'll try it, thanks for sharing niksi is just running static analysis, mostly around permissions, URL and IP detections, etc. to do a first pass at prompt injection attempts. It's pretty good, but obviously not enough for really sophisticated patterns. I know that https://rosieskills.dev recommends to run their skill manager inside an agent, to go beyond simple static analysis.

GitHubGitHub - trailofbits/skills: Trail of Bits skills for security research, vulnerability detection, and audit workflowsTrail of Bits skills for security research, vulnerability detection, and audit workflows - trailofbits/skills

23:11 · Oct 22, 2026commit 40ab902

Tom @8bitcurser4d

Ill give it a spin! i have a few smaller projects that could do with a review

Commit