Aboubakar Koïta
Community@akoita
Aboubakar Koïta maintains a security-focused skill registry covering threat modeling, SAST/SCA scanning, smart contract audits, supply-chain hardening, and multi-agent development orchestration.
Agent Skills by Aboubakar Koïta
Showing 12 vetted skills indexed across 1 GitHub repositories.
akoitasetup-agent-toolkit
Inspect, preview, and install Agent Toolkit skills and policy files with conflict detection and backups.
akoitasecurity-threat-model
Builds repository-grounded threat models with trust boundaries, ranked abuse paths, and mitigations.
akoitasecurity-scan
Runs free deterministic security scanners and normalizes their output into one SARIF digest.
akoitasecurity-ai
Reviews LLM applications, AI agents, MCP servers, and AI supply chains for security vulnerabilities.
akoitasecurity-smart-contracts
Audit Solidity and EVM smart contracts for vulnerabilities using static analysis, fuzzing, and manual review.
akoitasecurity-audit
Audit a repository for vulnerabilities using two-pass discovery, triage, and structured reporting.
akoitasecurity-supply-chain
Audit CI/CD workflows, dependency intake, and release pipelines for software supply chain integrity.
akoitasecurity-review
Review git diffs and pull requests for security-relevant changes with inline advisory comments.
akoitamaestro
Orchestrates development work in Claude Code by delegating bounded tasks to subagents.
akoitaplan-milestone
Plan dependency-ordered project milestones from issue tracker and repository context.
akoitadocument-software
Create, reorganize, and maintain software project documentation scaled to project maturity and risk.
akoitacodex-maestro
Orchestrate software changes with a Sol root and Luna worker agents in Codex.
Frequently Asked Questions About Aboubakar Koïta
FAQPage SchemaWhat security tasks can I perform with akoita's skills?▼
You can run repository-wide security audits, review pull request diffs for risk, execute SAST/SCA/secrets/IaC/DAST scanner toolchains, build threat models, audit Solidity and EVM smart contracts, harden software supply chains, and assess LLM apps, MCP servers, and agent permission boundaries.
Who should use these skills?▼
Security engineers, application security reviewers, smart contract auditors, and platform teams responsible for CI/CD hardening and compliance readiness. Developers using Claude Code or Codex orchestration also benefit from the maestro, codex-maestro, plan-milestone, and document-software skills.
How do I install and run these skills safely?▼
Use the setup-agent-toolkit skill, which defaults to read-only inspection and dry-run previews. It detects conflicts with existing configuration, requires explicit approval, creates backups, performs atomic writes, validates results, and provides rollback guidance before modifying any agent or project setup.
Are these skills free and what do they cost?▼
The security-scan skill explicitly runs a free deterministic toolchain covering SAST, ecosystem linters, SCA, secrets, IaC, DAST, and fuzzing. Smart contract auditing leverages open-source analyzers such as Slither, Aderyn, Echidna, Medusa, Halmos, and Foundry.
What compliance frameworks do the supply-chain skills cover?▼
The security-supply-chain skill works through OpenSSF Scorecard, OSPS Baseline, EU CRA, NIST SSDF, OWASP ASVS, and SAMM. It audits CI/CD workflows, pins actions to commit SHAs, enforces lockfiles and release cooldowns, emits SBOMs, and produces signed build provenance.