Blurjp
- 20 skills
- 0 followers
- 3 days ago last updated
- ▌ PDF · blurjp bundlePDF manipulation toolkit. Extract text/tables, create PDFs, merge/split, fill forms, for programmatic document processing and analysis.
- ▌ DOCX · blurjp bundleDocument toolkit (.docx). Create/edit documents, tracked changes, comments, formatting preservation, text extraction, for professional document processing.
- ▌ PPTX · blurjp bundlePresentation toolkit (.pptx). Create/edit slides, layouts, content, speaker notes, comments, for programmatic presentation creation and modification.
- ▌ XLSX · blurjp bundleSpreadsheet toolkit (.xlsx/.csv). Create/edit with formulas/formatting, analyze data, visualization, recalculate formulas, for spreadsheet processing and analysis.
- ▌ Fix Review · blurjp bundleVerifies that git commits address security audit findings without introducing bugs. This skill should be used when the user asks to "verify these commits fix the audit findings", "check if TOB-XXX was addressed", "review the fix branch", "validate remediation commits", "did these changes address the security report", "post-audit remediation review", "compare fix commits to audit report", or when reviewing commits against security audit reports.
- ▌ Ossfuzz · blurjpOSS-Fuzz provides free continuous fuzzing for open source projects. Use when setting up continuous fuzzing infrastructure or enrolling projects.
- ▌ Libfuzzer · blurjpCoverage-guided fuzzer built into LLVM for C/C++ projects. Use for fuzzing C/C++ code that can be compiled with Clang.
- ▌ Variant Analysis · blurjp bundleFind similar vulnerabilities and bugs across codebases using pattern-based analysis. Use when hunting bug variants, building CodeQL/Semgrep queries, analyzing security vulnerabilities, or performing systematic code audits after finding an initial issue.
- ▌ Cargo Fuzz · blurjpcargo-fuzz is the de facto fuzzing tool for Rust projects using Cargo. Use for fuzzing Rust code with libFuzzer backend.
- ▌ Wycheproof · blurjpWycheproof provides test vectors for validating cryptographic implementations. Use when testing crypto code for known attacks and edge cases.
- ▌ Harness Writing · blurjpTechniques for writing effective fuzzing harnesses across languages. Use when creating new fuzz targets or improving existing harness code.
- ▌ Address Sanitizer · blurjpAddressSanitizer detects memory errors during fuzzing. Use when fuzzing C/C++ code to find buffer overflows and use-after-free bugs.
- ▌ Coverage Analysis · blurjpCoverage analysis measures code exercised during fuzzing. Use when assessing harness effectiveness or identifying fuzzing blockers.
- ▌ Fuzzing Obstacles · blurjpTechniques for patching code to overcome fuzzing obstacles. Use when checksums, global state, or other barriers block fuzzer progress.
- ▌ Fuzzing Dictionary · blurjpFuzzing dictionaries guide fuzzers with domain-specific tokens. Use when fuzzing parsers, protocols, or format-specific code.
- ▌ Constant Time Analysis · blurjp bundleDetects timing side-channel vulnerabilities in cryptographic code. Use when implementing or reviewing crypto code, encountering division on secrets, secret-dependent branches, or constant-time programming questions in C, C++, Go, Rust, Swift, Java, Kotlin, C#, PHP, JavaScript, TypeScript, Python, or Ruby.
- ▌ Constant Time Testing · blurjpConstant-time testing detects timing side channels in cryptographic code. Use when auditing crypto implementations for timing vulnerabilities.
- ▌ Ask Questions If Underspecified · blurjpClarify requirements before implementing. Use when serious doubts araise.
- ▌ Semgrep Rule Creator · blurjp bundleCreate custom Semgrep rules for detecting bug patterns and security vulnerabilities. This skill should be used when the user explicitly asks to "create a Semgrep rule", "write a Semgrep rule", "make a Semgrep rule", "build a Semgrep rule", or requests detection of a specific bug pattern, vulnerability, or insecure code pattern using Semgrep.
- ▌ Semgrep · blurjpSemgrep is a fast static analysis tool for finding bugs and enforcing code standards. Use when scanning code for security issues or integrating into CI/CD pipelines.