robertsolves

Find Exploits — Development skill for Claude Code

Development community

Find ways a user or outsider could break into, abuse or take over the app — missing ownership checks, auth bypasses, injectable queries, weak tokens, unsigned webhooks, unthrottled endpoints, unchecke.

How to install Find Exploits

Installs to ~/.claude/skills/robertsolves-agent-commands-find-exploits/SKILL.md

Terminal

mkdir -p ~/.claude/skills/robertsolves-agent-commands-find-exploits && curl -fsSL https://raw.githubusercontent.com/robertsolves/agent-commands/HEAD/commands/find-exploits.md -o ~/.claude/skills/robertsolves-agent-commands-find-exploits/SKILL.md

Restart Claude Code, or start a new session, for it to be picked up.

What Find Exploits does

description: Find ways a user or outsider could break into, abuse or take over the app — missing ownership checks, auth bypasses, injectable queries, weak tokens, unsigned webhooks, unthrottled endpoints, unchecked uploads — state each as a concrete attack, ask which to fix, then fix them with a regression test each. Run before opening to real users, after auth or billing changes, or as a periodic whole-repo sweep. argument-hint: "[path or area to focus on] (default: the whole server-side su

Alternatives in Development

JWT Scan — JWT attack toolkit (offline) — alg:none forgery, RS256→HS256 algorithm confusion, weak-secret crack, static cl 4.5k ★
Claude Keysmith — Managed Claude Code instruction deployment with safe CLI recovery and an unsigned macOS/Windows desktop beta 696 ★
Claude Notifications Go — Cross-platform smart notifications -- 6 types, click-to-focus, context analysis, webhooks 365 ★