kulchankas/paranoid

Your app is guilty until proven secure: an agent skill whose /hack-me breaks into your own running app, proves each bug with a real request, patches it, and re-verifies. Claude Code · Codex · Cursor.

Install

npx skills add kulchankas/paranoid

gh skill install kulchankas/paranoid

git clone --depth 1 https://github.com/kulchankas/paranoid

Skills in this collection

• PParanoidSofiyaWrite and review code as if it gets pentested tomorrow. Load this whenever code touches a trust boundary: authentication, authorization, user input, database access, secrets or environment variables, file uploads, outbound requests (fetch/webhooks), API or webhook endpoints, or anything that runs raw SQL/shell/HTML.Security48 Repository stars