Skip to content
View cicada-369's full-sized avatar

Block or report cicada-369

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
cicada-369/README.md

Bo Kaung

I build security tooling for AI agents and the web — static analysis, agent skills, and the evidence in between.

Featured: SkillTriage

A static security auditor for AI agent skills and Claude Code plugins, mapped to the OWASP Agentic Skills Top 10. It answers one question: what can this skill do to my machine?

107 rules · AST01–AST10 · offline · zero dependencies · Python

Read the intro · Repository

Building now

python-for-security — a 12-week curriculum that rebuilds Python fluency through six application-security projects. Currently: Week 0, setup.

Private work

Private security tooling.

Writing

Notes on agent security, static analysis, and the evidence in between.
Latest: Playing with AI Pentest Tools.

Read the writing

Elsewhere

LinkedIn · Hashnode

Pinned Loading

  1. SkillTriage SkillTriage Public

    Static security auditor for AI agent skills and Claude Code plugins, mapped to the OWASP Agentic Skills Top 10.

    Python

  2. cicada-369.github.io cicada-369.github.io Public

    Personal blog: AI agent security, static analysis, and the evidence in between.

    HTML

  3. python-for-security python-for-security Public

    A 12-week curriculum rebuilding Python fluency through six application-security projects.