agent skill security scanner
by Elyas
Audits agent skills and MCP manifests for prompt injection, data exfiltration, and over-permissioned access.
I built regulatorysignals.com (liability platform), alongside a catalog of Claude Code skills spanning compliance audits (GDPR, SOC 2, DORA, EU AI Act), Stripe/Supabase/agent-infrastructure security review, and agent/MCP infrastructure — each one grounded in a dated, primary-source snapshot rather than model memory, and put through an adversarial review pass before it ships.
by Elyas
Audits agent skills and MCP manifests for prompt injection, data exfiltration, and over-permissioned access.
by Elyas
Static security auditor for MCP servers to detect injection, confused-deputy, and scope-creep vulnerabilities.
by Elyas
Audit product readiness for EU Digital Product Passports across ESPR and Battery Regulation categories.
by Elyas
Audit skill libraries for trigger collisions, coverage gaps, and invisible tools using static frontmatter analysis.
by Elyas
Discover unsanctioned AI agents, MCP servers, and LLM scaffolds committed across your git organization.
by Elyas
Audit your entire Claude Code setup for behavioral contradictions, precedence gaps, and stale instructions.
by Elyas
Design compliance-ready audit trail schemas for MCP servers mapped to SOC 2 and ISO 27001 controls.
by Elyas
Generate evidence-based MCP tool allowlists and RBAC configs from historical agent usage logs.
by Elyas
Audit and patch existing LiteLLM, Portkey, and TensorZero routing configs for broken fallbacks and pricing drift.
by Elyas
Enforce pre-execution justification and human-in-the-loop approval gates for high-blast-radius agent tools.
by Elyas
Static audit for multi-agent swarm orchestration to prevent budget overruns caused by recursive spawns and racy ledgers.
by Elyas
Static pre-deploy audit for LangGraph, CrewAI, and AutoGen to catch deadlocks and unbounded loops.
by Elyas
Audit and harden data contracts between agents in OpenAI Agents SDK, CrewAI, and LangGraph to prevent silent corruption.
by Elyas
Generate portable, fail-closed security policy files for MCP agents to prevent unauthorized destructive tool calls.
by Elyas
Install a mechanical, one-time capability gate for Python agent tools to prevent replays and unauthorized access.
by Elyas
Independent configuration audit for MCP gateways to verify auth, rate-limiting, and multi-tenant isolation.
by Elyas
Deep spec-compliance audit for MCP OAuth 2.1, PKCE, and CIMD implementations to prevent auth bypass and SSRF.
by Elyas
Generate a cost-tiered regression testing harness to catch silent behavioral breakages after editing SKILL.md files.
by Elyas
Validate and score alternative data anomalies using independent source corroboration and z-score analysis.
by Elyas
Structured company research agent that enforces source-grounded evidence, metric reconciliation, and data provenance.
by Elyas
Calculate scenario headroom and liquidation risks for cross-margin portfolios using linear fixed-maintenance models.
by Elyas
Analyze execution quality by attributing costs and price gaps between paper and live trading records.
by Elyas
A rigorous verification engine for auditing financial news claims, metadata integrity, and event provenance.
by Elyas
Audit backtests for data leakage, verify point-in-time feature availability, and calculate cost-adjusted returns.
by Elyas
Validate market data integrity by detecting sequence gaps, stale timestamps, and crossed quotes in feed exports.
by Elyas
Deterministic multi-agent capital allocation simulator for preventing budget overruns and conflicting trade intents.
by Elyas
Accurately attribute blockchain flows by separating internal transfers from external entity demand across multiple chains.
by Elyas
Calculate physical delivery scenarios, cash shortfalls, and share obligations for options expiry and assignment.
by Elyas
Calculate European option Greeks and diagnose volatility surface data integrity using Black-Scholes-Merton.
by Elyas
Attribute linear spot/perp basis P&L, reconcile funding cash flows, and identify residual hedge risks.
by Elyas
Monitor portfolio volatility shifts, correlation breakdowns, and drawdown metrics against historical baselines.
by Elyas
A deterministic evaluation suite for scoring trading agent logic, math, and policy adherence against reviewed baselines.
by Elyas
Generate hash-linked evidence manifests for trading decisions, model versions, and audit trails.
by Elyas
Replay and audit trading order events to identify duplicate fills, race conditions, and unresolved broker states.
by Elyas
Reconstruct positions and cash from fills to identify discrepancies against broker statements.
by Elyas
Validate trading session windows, maintenance halts, and timestamp classifications for venue compliance.
by Elyas
Construct provenance-linked, deduplicated evaluation datasets from real-world agent incident logs.
by Elyas
Security test suite for detecting cross-tenant data leakage in RAG retrieval and LLM memory phases.
by Elyas
Turn redacted agent incident traces into reproducible regression tests and score candidate fixes.
by Elyas
Run bounded OAuth authorization and token-rejection tests for MCP resource servers to generate runtime evidence.
by Elyas
Validate battery passport JSON against versioned, hash-pinned schemas with strict evidence discipline and gap reporting.
by Elyas
Normalize messy supplier CSVs into audit-ready Digital Product Passport records with strict field-level provenance.
by Elyas
Optimize MCP tool definitions and schemas to stop agents from calling the wrong tools or hallucinating parameters.
by Elyas
Dynamic red-teaming skill for testing prompt injection vulnerabilities in live MCP server and agent setups.
by Elyas
Operationalize MCP server security with version-pinned registries, typosquat detection, and automated CI/CD gates.
by Elyas
Migrate Next.js routes to App Router with mandatory verification of cache semantics and component boundaries.
by Elyas
Audit cold email campaigns against CAN-SPAM, CASL, PECR, and GDPR using primary statutory requirements.
by Elyas
Builds pSEO pipelines anchored to Google's spam policies to prevent scaled content abuse penalties.
by Elyas
Generate real estate marketing copy with automated federal Fair Housing Act language screening and risk flagging.
by Elyas
Generate GDPR Article 30 ROPA documents by tracing PII flows directly from source code and SDK integrations.
by Elyas
Converts law firm intake notes into attorney memos with conflict-check lists and high-risk deadline flags.
by Elyas
Extracts shipment details from RFQs and drafts accurate quotes using your specific freight rate cards.
by Elyas
Data-driven menu engineering and research-backed description rewriting for restaurants.
by Elyas
Professional ASO metadata optimizer for iOS and Google Play that prevents rejection and maximizes indexing space.
by Elyas
Flags high-cost Terraform anti-patterns and infrastructure trade-offs before you hit apply.
by Elyas
Triage SaaS contracts for auto-renewal traps, liability gaps, and IP risks using a concrete risk playbook.
by Elyas
Generates audit-ready SOC 2 evidence artifacts for CC6 and CC8 mapped to actual system exports and logs.
by Elyas
Commercial packaging and catalog-overlap protection for production-grade Claude Code skills.
by Elyas
Audit and fix Stripe integration bugs including webhook idempotency, race conditions, and missing dispute handling.
by Elyas
Instruments code with prompt caching, model downgrades, budget guards, and cost logging to reduce LLM spend.
by Elyas
Audit Supabase RLS policies for IDOR vulnerabilities and verify fixes with cross-tenant attack queries.
by Elyas
Generates machine-readable AI licensing terms and robots.txt configs for pay-per-crawl and bot management.
by Elyas
Audit and design behavioral-based moderation systems for communities to stop AI spam without relying on text detectors.
by Elyas
Identify ADA Title II web compliance deadlines and audit surfaces against WCAG 2.1 AA for government entities.
by Elyas
Audits AI hiring tools against Illinois HB 3773 requirements, including ZIP code proxies and notice obligations.
by Elyas
Determines NIS2 scope, entity classification, and readiness gaps based on sector, size, and EU Member State law.
by Elyas
Audits marketing copy and packaging against EU Directive 2024/825 to catch greenwashing gaps before 2026 enforcement.
by Elyas
Audits EVM contract bytecode for honeypots, drainers, and malicious owner patterns before you interact.
by Elyas
Simulate and analyze EVM transactions on local forks to verify state changes and slippage before broadcasting.
by Elyas
Audit cookie consent flows and manage DSAR workflows against active GDPR and ePrivacy standards.
by Elyas
High-precision fact checking that traces claims to primary sources and assigns provenance-strength grades.
by Elyas
Audits DORA ICT registers and contracts for template integrity, missing arrangements, and Article 30 clause compliance.
by Elyas
Audit email infrastructure against 2024/2025 Gmail, Yahoo, and Outlook bulk-sender compliance requirements.
by Elyas
Identify and audit EU AI Act Article 50 transparency obligations for chatbots and AI-generated content.
by Elyas
Audit GPSR readiness for non-EU sellers to prevent listing suppression on Amazon, Etsy, and eBay.
by Elyas
Audit LLM spend to find recoverable waste in prompt caching, model routing, and token usage.
by Elyas
Audit e-commerce payment pages for PCI DSS v4.0.1 script integrity and tamper-detection compliance.
by Elyas
Audits contracts for regulatory-change triggers and maps obligations to primary monitoring sources.
by Elyas
Turn instructional videos into structured, schema-validated specs without hallucinating missing details.
by Elyas
Add WebMCP annotations to help AI agents navigate, search, and interact with your website forms.
by Elyas
Audit agentic systems against runtime controls and generate compliance artifacts for ISO 42001 and NIST AI RMF.
by Elyas
Automates CCPA ADMT scoping and generates regulatory risk assessments for AI deployments.
by Elyas
Replace ignored B2B cold emails with a structural framing that targets buyer confidence instead of ignorance.
by Elyas
Audit and remediate Shopify and WooCommerce stores for EAA, WCAG 2.1 AA, and ADA Title II compliance.
by Elyas
Audits codebases for HIPAA Security Rule gaps, identifies PHI leaks, and maps BAA requirements.
by Elyas
HTSUS classification and duty-stacking audit tool for defensible customs entries and duty-savings identification.
by Elyas
Enforce three-way IOLTA reconciliation and detect regulatory defects to prevent bar discipline.
by Elyas
A 6-layer engineering containment gate for agents that move real money.
by Elyas
An evidence-based 7-pillar security gate for AI-assisted apps to prevent leaks, IDOR, and infrastructure gaps.