The Agent Skills Directory

[SAFE]: The skill includes two Python scripts, scripts/agent.py and scripts/process.py, which are designed for static analysis of application source code and configuration files. These scripts use regular expressions to detect known cryptographic vulnerabilities including broken hash algorithms (MD5, SHA-1), insecure block cipher modes (ECB), and hardcoded credentials. \n- [SAFE]: The scanning logic implements security best practices, such as the redaction of detected secrets in report outputs (found in process.py), and provides remediation guidance based on industry standards (OWASP, NIST). \n- [SAFE]: The TLS auditing functionality utilizes standard Python libraries (ssl and socket) to verify the strength of server configurations and certificate validity. This functionality is intended for security testing and is controlled by user-provided targets. \n- [SAFE]: External references and links included in the references/ directory point exclusively to established and trusted organizations such as NIST, OWASP, and reputable open-source security tool repositories.

performing-cryptographic-audit-of-application