I build security tooling for AI agents and the web — static analysis, agent skills, and the evidence in between.
A static security auditor for AI agent skills and Claude Code plugins, mapped to the OWASP Agentic Skills Top 10. It answers one question: what can this skill do to my machine?
107 rules · AST01–AST10 · offline · zero dependencies · Python
python-for-security — a 12-week curriculum that rebuilds Python fluency through six application-security projects. Currently: Week 0, setup.
Private security tooling.
Notes on agent security, static analysis, and the evidence in between.
Latest: Playing with AI Pentest Tools.