nicoarias81

GitHub profile1 plugin in the catalog

Plugins by nicoarias81

1 plugins by nicoarias81 in the catalog, most-starred first.

nicoarias81leashLean OWASP Top 10 pentest toolkit run by the agent against your own dev app: scope-gated recon (TCP scan, same-origin crawl), multi-identity access-control testing with canary-based leak detection, parameter fuzzing, security-header audit and an evidence ledger that turns findings into a plain-language report grouped by OWASP category. Disclosure — sends TCP connects and HTTP requests (including model-chosen methods, headers, bodies and test payloads) only to hosts and CIDRs listed in the user's scope file, and refuses everything when no scope file is set; in the default audit mode its pre_tool_call hook only logs out-of-scope targets seen in terminal, web_extract and browser tool arguments (enforce mode blocks them); stores test-identity session cookies and tokens in plain JSON under plugin-data/leash, outside model context.Communitytools