Security

vamseeachanta Skill

Sub-skill of audit-support: Deficiency (+4).

vamseeachanta Skill

Sub-skill of github-actions: 1. Security Best Practices (+3).

vamseeachanta Skill

Sub-skill of audit-support: IT General Controls (ITGCs) (+4).

vamseeachanta Skill

Sub-skill of github-code-review: Security Issue (+1).

vamseeachanta Skill

Sub-skill of audit-support: Workpaper Requirements (+2).

vamseeachanta Skill

Sub-skill of clean-code: Top P1 Candidates (2026-02-25 audit).

vamseeachanta Skill

Sub-skill of sparc-architecture: Example 3: Security Architecture (+1).

vamseeachanta Skill

Sub-skill of testing-production: Example 4: Security Validation.

vamseeachanta Skill

Reconcile duplicate/colliding workspace-hub skills without losing useful content, while avoiding pre-commit skill-content security scan regressions.

ferroxlabs Skill

Becomes a senior QA engineer who designs comprehensive test strategies, writes automated tests, and builds quality assurance processes for software projects. Use when the user needs test plans, test case design, automated test suites, coverage analysis, or regression testing strategies. Do NOT use when writing production application code, designing system architecture, or performing security-focused audits.

ferroxlabs Skill

Threat modeling expertise covering STRIDE methodology, attack trees, data flow diagrams, trust boundaries, threat prioritization with DREAD scoring, mitigation strategies, threat modeling for APIs and microservices, and automated threat modeling tools for proactively identifying security risks during system design. Use when the user asks about threat modeler, threat modeler best practices, or needs guidance on threat modeler implementation. Do NOT use when the user needs a different specialized skill or is asking about an unrelated technology domain.

ferroxlabs Skill

Web Application Firewall configuration expertise covering OWASP Core Rule Set design, rate limiting rules, geo-blocking, bot detection, custom rules for application-specific attacks, logging and monitoring, false positive management, and WAF bypass prevention for protecting web applications at the network edge. Use when the user asks about waf configurer, waf configurer best practices, or needs guidance on waf configurer implementation. Do NOT use when the user needs a different specialized skill or is asking about an unrelated technology domain.

ferroxlabs Skill

Cryptography implementation expertise covering symmetric vs asymmetric encryption, password hashing (bcrypt, argon2), digital signatures, key management, TLS configuration, secure random generation, common cryptographic pitfalls, and practical usage of libsodium and OpenSSL for building secure systems. Use when the user asks about crypto engineer, crypto engineer best practices, or needs guidance on crypto engineer implementation. Do NOT use when the user needs a different specialized skill or is asking about an unrelated technology domain.

ferroxlabs Skill

Becomes a senior code reviewer who evaluates pull requests and code changes for correctness, security, performance, and maintainability. Use when the user asks for code review, PR feedback, code quality assessment, or merge readiness evaluation. Do NOT use when writing new code, debugging runtime errors, designing system architecture, or performing security penetration testing.

ferroxlabs Skill

Comprehensive guide to tenant rights including lease review, security deposit rules, habitability standards, repair procedures, eviction process, rent increases, lease breaking options, documentation practices, and fair housing basics. Use when the user asks about tenant rights, or needs help with comprehensive guide to tenant rights including lease review, security deposit rules, habitability standards, repair procedures, eviction process, rent increases, lease breaking options, documentation practices, and fair housing basics. Do NOT use when the request requires professional legal advice or falls outside the scope of tenant rights.

ferroxlabs Skill

OAuth 2.0 and OpenID Connect implementation expertise covering Authorization Code with PKCE, Client Credentials flow, token management, scope design, consent flows, token introspection, revocation, JWT validation, provider integration patterns, and security considerations for building secure authentication and authorization systems. Use when the user asks about oauth specialist, oauth specialist best practices, or needs guidance on oauth specialist implementation. Do NOT use when the user needs a different specialized skill or is asking about an unrelated technology domain.

ferroxlabs Skill

Complete guide for setting up and managing two-factor authentication including TOTP apps, FIDO2/WebAuthn hardware keys, recovery strategies, backup codes, and account protection prioritization. Use when the user asks about two factor setup, related techniques, best practices, or needs guidance in this domain. Do NOT use when the request is outside the scope of two factor setup or requires a different specialized skill.

ferroxlabs Skill

Comprehensive guide to creating a healthier, more sustainable home covering energy audit walkthroughs, non-toxic cleaning product recipes and alternatives, water conservation strategies for fixtures and landscaping, indoor air quality improvement, sustainable materials for renovation projects, and understanding green building certifications. Use when the user asks about green home, or needs help with comprehensive guide to creating a healthier, more sustainable home covering energy audit walkthroughs, non-toxic cleaning product recipes and alternatives, water conservation strategies for fixtures and landscaping, indoor air quality improvement, sustainable materials for renovation projects, and understanding green building certifications. Do NOT use when the request requires professional specialized advice or falls outside the scope of green home.

ferroxlabs Skill

Creates Keep-a-Changelog compliant CHANGELOG.md files with dated, categorized entries (Added, Changed, Deprecated, Removed, Fixed, Security) and semantic versioning. Use when the user needs to write or update a changelog file, document version history, or create a structured change log. Do NOT use for release notes (use `release-notes`), commit messages, or status updates (use `status-update`).

ferroxlabs Skill

API security expertise covering OWASP API Security Top 10, API authentication and authorization patterns, API key management, rate limiting and throttling, JWT security best practices, OAuth 2.0 implementation, input validation, API gateway hardening, API inventory management, and security testing for protecting APIs from abuse and exploitation. Use when the user asks about api security engineer, api security engineer best practices, or needs guidance on api security engineer implementation. Do NOT use when the user needs a different specialized skill or is asking about an unrelated technology domain.

ferroxlabs Skill

Systematic process to audit, identify weak passwords, check for breaches, update credentials, and establish a secure password management workflow. Use when the user asks about password audit runner, related techniques, best practices, or needs guidance in this domain. Do NOT use when the request is outside the scope of password audit runner or requires a different specialized skill.

ferroxlabs Skill

Advanced PostgreSQL mastery covering indexing strategies (GIN, GiST, BRIN, B-tree), table partitioning, pg_stat analysis, VACUUM tuning, connection pooling with PgBouncer, JSONB operations, full-text search, row-level security, replication topologies, and essential extensions like PostGIS and pg_cron. Use when the user asks about postgres expert, postgres expert best practices, or needs guidance on postgres expert implementation. Do NOT use when the user needs a different specialized skill or is asking about an unrelated technology domain.

ferroxlabs Skill

Ethereum Layer 2 scaling expertise covering optimistic rollups, ZK rollups, validiums, rollup architecture, bridge mechanics, L2 selection criteria, cost analysis, security assumptions, data availability, interoperability, and migration strategies for building and deploying on Layer 2 networks. Use when the user asks about layer2 specialist, related techniques, best practices, or needs guidance in this domain. Do NOT use when the request is outside the scope of layer2 specialist or requires a different specialized skill.

ferroxlabs Skill

Guided workflow for eliminating debt systematically from comprehensive debt audit and strategy selection through creditor negotiation, execution discipline, and prevention planning. Covers credit cards, student loans, medical debt, personal loans, and other consumer debt. Use when the user wants to get out of debt or needs a structured multi-step process for this goal. Do NOT use when the request is a single-step task or requires professional advice beyond educational guidance.

ferroxlabs Skill

Guides the user through the complete retirement transition from savings assessment through lifestyle design, chaining retirement calculators, financial tracking, budgeting, insurance, estate planning, and career transition skills across multiple categories. Use when the user is planning to retire, preparing for retirement within 2 years, or evaluating whether they are financially ready to retire. Do NOT use for early retirement (FIRE) investment strategy, pension administration, or Social Security disability claims.

ferroxlabs Skill

Security operations center expertise covering SIEM query writing, alert triage workflows, incident investigation procedures, IOC analysis, threat hunting techniques, playbook design, log analysis patterns, Splunk and Elastic SIEM queries, alert fatigue reduction, escalation procedures, and shift handoff practices. Use when the user asks about soc analyst, soc analyst best practices, or needs guidance on soc analyst implementation. Do NOT use when the user needs a different specialized skill or is asking about an unrelated technology domain.

ferroxlabs Skill

Creates structured content audits with performance categorization, gap analysis, and prioritized action recommendations for existing content libraries. Use when the user wants to evaluate their existing content, audit blog posts or website pages, identify underperforming content, or plan content updates. Do NOT use for planning new content (use `editorial-calendar`), writing content briefs (use `content-brief`), or analyzing audience personas (use `audience-analysis`).

ferroxlabs Skill

Creates writer-ready content briefs with audience definition, content angle, detailed outline, keyword targets, source suggestions, and tone guidance. Use when the user needs to brief a writer, plan a content piece before drafting, or create an assignment document for content creation. Do NOT use for editorial calendars (use `editorial-calendar`), content audits (use `content-audit`), or writing the actual content piece (use `blog-post-writing`).

ferroxlabs Skill

Runs a structured annual review including achievement audit, theme identification, lesson extraction, and 12-month forward projection. Use when the user wants to reflect on the past year, identify patterns in their accomplishments and failures, extract lessons learned, or plan the year ahead. Do NOT use for business annual reviews or performance evaluations (use business HR skills), quarterly planning (use `quarterly-planning`), or single-goal assessment (use `smart-goal-builder` instead).

ferroxlabs Skill

Digital forensics and incident investigation expertise covering evidence acquisition and preservation, chain of custody procedures, timeline analysis, memory forensics, disk forensics, log analysis, network traffic analysis, malware triage, forensic reporting, and legal admissibility requirements for thorough and defensible incident investigations. Use when the user asks about forensics analyst, forensics analyst best practices, or needs guidance on forensics analyst implementation. Do NOT use when the user needs a different specialized skill or is asking about an unrelated technology domain.

ferroxlabs Skill

Identity and access management deep dive covering OAuth 2.0 grant types and PKCE, OpenID Connect flows, SAML federation, SCIM user provisioning, multi-factor authentication strategies, session management, token lifecycle, JWT security, zero-trust identity patterns, and identity provider architecture. Use when the user asks about identity engineer, identity engineer best practices, or needs guidance on identity engineer implementation. Do NOT use when the user needs a different specialized skill or is asking about an unrelated technology domain.

ferroxlabs Skill

Systematic home decluttering and organization workflow from initial audit and system design through room-by-room execution and long-term maintenance habits for a permanently organized living space. Use when the user wants to declutter organize home or needs a structured multi-step process for this goal. Do NOT use when the request is a single-step task or requires professional advice beyond educational guidance.

ferroxlabs Skill

Compliance framework audit expertise covering SOC 2 Type II controls, GDPR technical requirements, HIPAA security rule, PCI DSS for developers, ISO 27001 controls, audit evidence collection, compliance-as-code, and continuous compliance monitoring for meeting regulatory and industry security standards. Use when the user asks about compliance checker, compliance checker best practices, or needs guidance on compliance checker implementation. Do NOT use when the user needs a different specialized skill or is asking about an unrelated technology domain.

ferroxlabs Skill

Penetration testing methodology for authorized security testing covering OWASP Testing Guide, reconnaissance techniques, injection testing, XSS detection, CSRF testing, authentication bypass, privilege escalation, API security testing, and professional report formatting. For defensive and authorized testing purposes only. Use when the user asks about penetration tester, penetration tester best practices, or needs guidance on penetration tester implementation. Do NOT use when the user needs a different specialized skill or is asking about an unrelated technology domain.

ferroxlabs Skill

Becomes a senior technical writer who produces clear, accurate, and audience-appropriate documentation including API references, developer guides, changelogs, and onboarding materials. Use when the user needs documentation written, restructured, or improved for technical or non-technical audiences. Do NOT use when writing application code, conducting security audits, or designing system architecture.

ferroxlabs Skill

Plans a smart home system covering device compatibility frameworks, hub versus hub-free architectures, network requirements, and privacy considerations. Produces a phased implementation plan with device categories, protocol selection, and network preparation steps. Use when the user asks about setting up smart home devices, choosing a smart home platform, connecting devices together, home automation planning, or smart home privacy and security. Do NOT use for specific device configuration or troubleshooting, home network infrastructure design (routers, switches, cabling), or commercial building automation systems.