Gedik

Breaks your own code, artifacts, and configuration like an attacker to find gedik — so they can be closed. First MEASURES the architecture (triage T1-T12), then opens only that architecture's surface - A client/offline/mobile (Android, iOS) · B server/API/DB/identity (injection variants, IDOR, OAuth/MFA, CORS, webhook, rate limiting, business logic, WebSocket, GraphQL, request smuggling, fail-open) · C BaaS-RLS (Supabase/Firebase, PostgREST) · D AI/LLM (prompt injection, tool authorization, vector/embedding, MCP) · E shipped-artifact hygiene - plus code review + mechanical scanning, dependency

1 starsAI, LLMs & Agents

Install

skills CLI (Claude Code, Cursor, Codex and more)

npx skills add onur-kesim/gedik --skill gedik

Manual install

git clone --depth 1 https://github.com/onur-kesim/gedik.git /tmp/gedik
mkdir -p ~/.claude/skills
cp -r /tmp/gedik/skills/gedik ~/.claude/skills/gedik

Personal skills live in ~/.claude/skills. Use .claude/skills in a project folder to share a skill with your team.

From the SKILL.md

# GEDIK — Adversarial Input and Security Audit (v2.8.0)

You are an independent security auditor working for defensive purposes. Your job is not
to please the developer (yourself included) — it is **to break this system with malicious
or malformed input** — then deliver where you broke it with reproducible evidence and a
concrete patch.

> **Why your name is gedik:** your output is a gedik list. You find the hole in the
> castle wall so it **can be closed.** Findings are numbered `G-1`, `G-2`; the verdict
> becomes "N gedik open."

> **This skill's axis:** ADVERSARIAL INPUT and AUTHORIZATION. "If I feed it malformed or
> malicious data, what breaks, what can an attacker do with this artifact, what can
> someone without authorization reach." Spec compliance and product logic are the
> subject of OTHER work (§5 handoff table).

---

## 0. SCOPE LOCK — verify before starting work

This skill runs only under the following conditions:

- The target is a codebase, artifact (APK/AAB/build), configuration, BaaS project, or
  local test instance **that the user themselves owns** — **or any open source; open
  source is inspected read-only only** (the v2.5 block below).
- **No requests are sent** to a live site/service — even if the user owns it — **unless
  the authorization gate in §0.1 has opened.** By default this skill reads **the code,
  the configuration, and the artifact**; it runs its tests against the user's own
  project/instance.

Read the full skill on GitHub

Details

Skill name: gedik
Repository: onur-kesim/gedik
Path: skills/gedik/SKILL.md
License: MIT
Repo updated: 28 October 2026
Listed in: karanb192/awesome-claude-skills

FAQ

What does the Gedik skill do?

How do I install the Gedik skill?

skills CLI (Claude Code, Cursor, Codex and more): npx skills add onur-kesim/gedik --skill gedik. Skills go in ~/.claude/skills (personal) or .claude/skills (project), and Claude loads them automatically when a task matches the description.

Is Gedik popular?

It lives in onur-kesim/gedik, which has 1 GitHub stars and 0 forks, and is included in 1 curated skill list.

Related skills

Moodtrip Hotel Search

adiny/moodtrip-hotel-search

Search, compare, evaluate, and hand off hotel bookings using the MoodTrip.ai MCP server (api.moodtrip.ai). Use this skill whenever the user mentions hotels, accommodation, lodging, stays, travel bookings, hotel search, hotel comparison, hotel reviews, hotel pricing, or anything related to finding or booking a place to stay. Also trigger when the user asks about hotel amenities, room types, check-in/check-out logistics, travel destinations with accommodation needs, or says things like "find me a hotel", "where should I stay", "book a room", "hotel recommendations", or "compare hotels". This ski

AI, LLMs & AgentsIn 1 list

Danshari Skill

swaylq/danshari-skill

断舍离.skill — 审计当前 agent 装的全部 skill，对照现在的模型能力、harness 内建功能和已接入的 MCP 工具，找出不再需要的那些：证据化判决（能力型先盲测）→ 用户确认 → 归档移除（一键可恢复），并报告每轮省下的 token。模型每变强一代，就该跑一次。触发词：「skill 断舍离」「清理 skill」「skill 太多了」「移除不需要的 skill」「审计 skill」「换了新模型清理一下」「prune skills」「declutter skills」「skill audit」。

AI, LLMs & AgentsIn 1 list

Rule Architect

moveju112/rule-architect

Use when a project needs AI agent rules built or upgraded — no AI_RULES.md exists, an existing rule index has grown into one bloated file, or the user asks for a project rule set. Triggers on "make rules for this project", "generate AI rules", "set up project rules", "upgrade the project rules", "rule-architect", "/rule-architect", and the Korean equivalents "룰 만들어줘", "룰 생성", "AI 룰 만들어", "프로젝트 룰 고도화", or refreshing rules after a major refactor ("--update"). English and Korean triggers are equivalent.

AI, LLMs & AgentsIn 1 list

Crosscheck

moveju112/skill_verify

Claude-hosted Claude↔Codex crosschecks of improvement ideas, plans, and completed changes. Automatically selects independent proposals, draft critique, or mutual review and allows candid rejection. Use for explicit requests such as "크로스체크", "코덱스랑 핑퐁", "둘이 의견 취합해", "cross-check with codex", or "/crosscheck". Discussing or editing this skill does not authorize another model call.

AI, LLMs & AgentsIn 1 list

Sechelix

omarmohelal/SecHelix

Evidence-first application-security audit workflow for authorized repositories and environments. Use when reviewing a codebase, pull request, API, web application, AI-generated code, agent or MCP integration, cloud configuration, authorization (BOLA, IDOR, BFLA), business logic, payments, race conditions, secrets, supply chain, or release readiness for security weaknesses. Also supports explicitly requested technical SEO audits and evidence-backed codebase cleanup. Maps trust boundaries, selects applicable checks, runs parallel specialist review, independently verifies every material finding a

AI, LLMs & AgentsIn 1 list

AI Meeting

bin1874/ai-meeting-skill

Run structured AI meetings for plans, product ideas, technical designs, business decisions, feature proposals, and strategy choices. Use when the user wants an AI meeting, AI roundtable, multi-agent discussion, debate, proposal review, plan review, decision review, or wants Codex, Claude Code, qoderclicn, and other CLI agents to analyze a proposal across multiple expert roles, challenge assumptions, preserve per-agent sessions, and produce a final decision report with provenance. 也适用于中文场景：方案评审、多 Agent 讨论、技术路线评审、商业决策评审。

AI, LLMs & AgentsIn 1 list

Browse the most popular Claude skills, all ai, llms & agents skills, or write your own with the skills generator.