Security

charlieviettq Bundle

Conduct heuristic evaluation of user interfaces using Nielsen's 10 usability principles. Use this skill when the user needs to audit a website, app, or interface for usability issues, prioritize UX improvements, or conduct a quick expert review without user testing — even if they say 'review this UI', 'find usability problems', or 'why do users struggle with our app'.

charlieviettq Bundle

Use when the user wants to write a political news piece — election coverage, legislative reporting, policy analysis, official-statement coverage, poll interpretation, or political profile — from supplied material (transcripts, press releases, poll data, vote records, leaked documents, interviews). Activates political-beat-specific workflow on top of the general news-reporter workflow: stance tagging, poll-reading discipline, defamation/election-law red lines, and frame-neutrality audit. Also triggers on phrases like 'write up this 質詢', 'turn into an election report', 'analyze this poll', '幫我寫成政策追蹤報導', '寫一篇選戰分析', '把這份立委發言整理成新聞', 'cover this candidate's policy platform'. Defers general news craft to med-news-reporter; do NOT use for press releases (use pr-press-release) or government PR (use pr-*).

charlieviettq Bundle

Apply the Resource-Based View (Barney, 1991) and VRIO framework to evaluate whether a firm's resources and capabilities confer sustained competitive advantage. Use this skill when the user needs to assess internal resources for strategic value, determine if a competitive edge is sustainable, audit resource portfolios for VRIO criteria, or when they ask 'what makes our advantage sustainable', 'which resources matter most', or 'can competitors replicate this'.

charlieviettq Bundle

Apply Benford's Law to detect anomalies in numerical datasets by analyzing first-digit frequency distributions. Use this skill when the user needs to audit financial data for fraud indicators, validate data integrity, or detect fabricated numbers — even if they say 'data manipulation detection', 'first digit test', or 'accounting fraud screening'.

charlieviettq Bundle

Apply brand equity frameworks (Aaker, 1991; Keller, 1993) to assess and build customer-based brand value. Use this skill when the user needs to audit brand strength, diagnose brand equity components, design brand-building strategies, or when they ask 'how strong is our brand', 'what drives brand value', or 'how do we build brand equity'.

charlieviettq Bundle

Apply dual-process theory to diagnose whether judgments arise from fast intuitive (System 1) or slow analytical (System 2) processing and identify resulting cognitive biases. Use this skill when the user needs to explain why quick decisions go wrong, design choice architectures that account for cognitive defaults, audit decision processes for heuristic errors, or when they ask 'why do people misjudge probability', 'how to reduce snap-judgment errors', or 'when does intuition fail'.

charlieviettq Skill

Support SOX 404 compliance with control testing methodology, sample selection, and documentation standards. Use when generating testing workpapers, selecting audit samples, classifying control deficiencies, or preparing for internal or external audits.

charlieviettq Skill

Prepare journal entries with proper debits, credits, and supporting detail. Use when booking month-end accruals (AP, payroll, prepaid), recording depreciation or amortization, posting revenue recognition or deferred revenue adjustments, or documenting an entry for audit review.

charlieviettq Skill

Review code changes for security, performance, and correctness. Trigger with a PR URL or diff, "review this before I merge", "is this code safe?", or when checking a change for N+1 queries, injection risks, missing edge cases, or error handling gaps.

clowlove Bundle

Comprehensive security scanning for code, dependencies, and infrastructure. Detects vulnerabilities, misconfigurations, and security risks.

clowlove Bundle

AI-powered code review with security scanning, performance analysis, and best practices checking. Supports multiple languages and frameworks.

clowlove Bundle

Audit and bulk-correct repository self-references across multi-file, multi-language codebases. Covers repo name typos, clone URLs, placeholder tokens, and cross-reference consistency after renames or refactors.

dingxingdi Bundle

Use this skill to audit written work, provide expert 'red-pen' feedback, and perform multi-granular pedagogical assessments. Trigger it for requests like 'check my thesis,' 'is this essay logically sound?,' 'grade my report based on a rubric,' or 'audit the rigor and originality of this draft.' It is essential for providing structured, dimension-specific critiques across facets like Structure, Logic, Originality, Writing, Proficiency, and Rigor (SLOWPR) to help users improve their academic or professional reasoning.

dingxingdi Bundle

Skill: reference-based-correctness-audit

dingxingdi Bundle

Skill: code-vulnerability-and-security-adjudication

williamcorrea23 Skill

SAP API Management policy design and governance — security, traffic, mediation, lifecycle

williamcorrea23 Bundle

Keep a SAP NetWeaver / S/4HANA system's logs, traces, spool, job logs, ABAP dumps, audit logs and work directory from filling the filesystem — via the SAP standard reorganization jobs (RSBTCDEL2, RSPO1041, RSSNAPDL, RSBDCREO …) and safe OS-level cleanup, on Linux/Windows/AIX. Use for "clean up logs/traces", "/usr/sap is full", "reorg spool/jobs/dumps", "housekeeping jobs", "delete old work-dir files", "audit log cleanup". Hands DB log/trace cleanup to sap-db-command-reference. Cited to SAP Note 16083 + help.sap.com.

williamcorrea23 Skill

SAP BTP Audit Log Service — audit trail capture, configuration, compliance (SOC 2, GDPR), audit log viewer, retention policies, OAuth audit integration. Use when implementing audit logging on BTP, configuring compliance audit trails, or capturing security-relevant events.

williamcorrea23 Bundle

Develop and review SAP ABAP, CDS, HANA SQLScript/AMDP, RAP, OData/Fiori, integrations, enhancements, testing, and security with Clean Core guidance. Use when a request needs a broad SAP development workflow or its local Vaibe reference patterns.

williamcorrea23 Skill

Review production commands, inputs, and catalogs for Automation Pilot. Validates file structure, naming conventions, security requirements, mandatory patterns, and best practices. Use when reviewing .command.json, .input.json, or .catalog.json files.

williamcorrea23 Bundle

Test-only skill for SAP CAP Node.js projects. Its sole purpose is to scaffold and run automated tests using `cds test` (Node.js test runner wrapper) and, when (and only when) explicitly requested by the user, produce coverage with `c8`. The skill writes test files under `test/` (or the project's existing test folder), executes them, and emits two possible report files at the project root: - `CAP-TEST-REPORT.md` — successful run summary (always) - `CAP-TEST-FAILURE.md` — failure report (only if a test fails) Use when the user asks to: - "cria testes", "gera teste para X", "scaffold tests" - "roda os testes", "executa cds test", "run tests" - "testa o serviço X", "cobertura c8" (coverage mode — must be explicit) Strict negatives — this skill NEVER: - edits production code (`srv/**`, `db/**`, `app/**`, `package.json`, `.cdsrc.json`, `mta.yaml`, `xs-security.json`) — it only writes inside the test folder - implements features, refactors, fixes bugs, changes business logic - runs `git add`, `git commit`, `git push

dingxingdi Bundle

Skill: integrity-aware visualization and design best-practice audit

williamcorrea23 Skill

审计配合主流程 — 整合资料收集 + 调整审核 + 函证管理的全流程审计配合。 适用情形：年度审计配合报告时执行，整合 audit-evidence-collection、 audit-adjustment-review 和 confirmation-management，输出完整的审计配合报告。 核心：资料完整 → 调整合规 → 函证充分 → 报告出具。

williamcorrea23 Skill

舞弊调查 — 接收舞弊举报或发现异常线索后，启动独立调查， 搜集证据、评估影响并报告。 适用情形：审计委员会/管理层收到举报、审计中发现舞弊迹象、 外部监管要求调查时执行。

williamcorrea23 Skill

年度审计计划制定 — 风险导向审计方法，识别高风险领域， 合理分配审计资源，制定本年度内部审计计划。 适用情形：审计总监/经理在每年 Q4 制定下一年度审计计划时执行， 或年中根据风险变化调整计划时执行。

williamcorrea23 Skill

内部审计管理主流程 — 整合年度审计计划/专项审计/审计发现整改全流程。 适用情形：审计总监/审计经理制定年度审计计划、启动专项审计、 管理审计发现整改时执行，整合 annual-audit-planning、 process-compliance-audit、audit-finding-tracking 和 fraud-investigation， 输出完整的内部审计管理报告。 核心：风险导向 → 发现问题 → 整改跟踪 → 持续改进。

williamcorrea23 Skill

审计调整审核 — 核查 [ERP] 审计调整分录，评估调整合理性，处理调整分歧。 适用情形：审计过程中执行，从审计调整台账获取调整数据， 核查调整分录准确性，评估对报表影响，输出调整审核报告。 核心：调整识别 + 影响评估 + 分歧处理 + 最终确认。

williamcorrea23 Skill

函证管理 — 协调 [ERP]/[BANK] 银行函证和往来函证，跟踪回函状态，处理异常。 适用情形：审计函证程序时执行，跟踪银行和往来函证发函/回函状态， 核查回函差异，输出函证管理报告。 核心：发函跟踪 + 回函核对 + 差异处理 + 替代程序。

williamcorrea23 Skill

审计发现整改跟踪 — 对所有未关闭的审计发现进行跟踪管理， 验证整改效果，对超期未整改项执行升级流程。 适用情形：审计经理/总监每月审查整改状态、 验证已完成整改、或对超期整改执行升级时执行。

williamcorrea23 Skill

董事会汇报主流程 — 整合 Board Deck 编制、审计委员会支持、董事会议程管理与重大事项汇报。 适用情形：年度/季度董事会与审计委员会会议前执行，整合 board-deck-preparation、 audit-committee-support、board-meeting-management 和 board-material-distribution， 输出完整的董事会汇报材料包。 核心：会议准备 → 材料编制 → 委员会协同 → 重大事项汇报。

williamcorrea23 Skill

审计资料收集 — 按审计要求收集 [ERP]/[DOC] 资料，完成资料清单编制与核对。 适用情形：审计进场准备时执行，从 [ERP]/[DOC] 获取资料， 按审计资料清单整理，核查完整性，输出资料收集报告。 核心：清单核对 + 缺失识别 + 替代方案 + 按时交付。

williamcorrea23 Skill

审计委员会支持 — 为审计委员会提供专业支持，包括审计计划审阅、 审计发现跟踪、审计报告审阅和委员会议程管理。 适用情形：审计委员会会议前 [X] 天，或用户要求"准备 AC 材料"时执行。 核心：审计发现汇总 + 整改追踪 + 委员会议程设计。

williamcorrea23 Skill

流程合规性审计 — 对具体业务循环（采购/销售/资金/税务等） 执行穿行测试和控制测试，识别控制缺陷和合规问题。 适用情形：审计人员执行现场审计、编写审计工作底稿时执行。

clowlove Bundle

专注智能合约漏洞检测、形式化验证、漏洞利用分析和审计报告编写的安全审计专家，服务于 DeFi 协议和区块链应用。

clowlove Bundle

专业应用安全工程师，专注于威胁建模、漏洞评估、安全代码审查、安全架构设计和事件响应，服务于现代 Web、API 和云原生应用。

clowlove Bundle

专精于 SIEM 规则开发、MITRE ATT&CK 覆盖度映射、威胁狩猎、告警调优和检测即代码流水线的安全运营检测工程专家。