Home

poki

A vulnerability harness for Claude Code. It is a set of security skills plus a Dockerized static-analysis backend that turn the agent into a security auditor.

Pages

• Security Audit: the six-phase multi-agent audit pipeline.
• Joern Skill: CPGQL queries over the Code Property Graph.
• Joern Gateway: the Dockerized Joern server and Python gateway.

What is in it

• security-audit skill runs a fleet of parallel sub-agents through a six-phase pipeline to find exploitable vulnerabilities with real impact. It is a from-scratch rebuild of Cloudflare's Build your own vulnerability harness and security-audit-skill.
• joern skill drives Joern for structural and data-flow queries (CPGQL): taint tracking and source-to-sink reachability.
• joern-gateway is a standalone Joern server plus a Python WebSocket gateway in Docker, driven by the joernctl CLI.

Security-audit workflow

Joern gateway architecture

Quick start

cd joern-gateway
docker compose up -d --build
./joernctl health
./joernctl import /work/target
./joernctl query 'cpg.call.name("system").reachableByFlows(cpg.parameter).p'

Links

• README
• Joern gateway README