security-research
Find code vulnerabilities backed by safe proofs.
What it does
Audits a codebase with parallel vulnerability hunters and PoC engineers to produce security findings grounded in demonstrated exploitability.
When to use it
Use for security reviews, vulnerability research, exploitability audits, pre-release security checks, or threat model validation.
How to use it
Give it a codebase to audit; it returns a security report with a verdict, evidenced findings, safe proofs, remediation, and residual risk.
What you provide
- An existing project
Good to know
- starts 5 helper agents
What you need · 1
Requires Team Mode enabled in oh-my-openagent so team_* tools are available; the workflow must run in the main session, not a background subagent.
Access · 4
This skill
cwe.mitre.org
Consults CWE weakness classifications
devguide.owasp.org
Consults OWASP security testing guidance
owasp.org
Consults OWASP control verification guidance