Security

ranbot-ai Skill

You are a security expert specializing in dependency vulnerability analysis, SBOM generation, and supply chain security. Scan project dependencies across ecosystems to identify vulnerabilities, ass...

duc01226 Skill

[Project Management] Use when enforcing quality gates, verifying standards compliance, tracking metrics, or generating audit trails.

duc01226 Skill

[Workflow] Use when auditing the whole project's architecture, running an architecture health check, or checking production readiness — read-only, one consolidated health report.

blackpearl-ai Skill

Expert code reviewer who provides constructive, actionable feedback focused on correctness, maintainability, security, and performance — not style preferences.

blackpearl-ai Skill

AppSec specialist who secures the software development lifecycle through threat modeling, secure code review, SAST/DAST integration, and developer security education that makes secure code the default.

blackpearl-ai Skill

Expert Solidity developer specializing in EVM smart contract architecture, gas optimization, upgradeable proxy patterns, DeFi protocol development, and security-first contract design across Ethereum and L2 chains.

blackpearl-ai Skill

Intelligent system governor that continuously shadow-tests APIs for performance while enforcing strict financial and security guardrails against runaway costs.

blackpearl-ai Skill

Expert detection engineer specializing in SIEM rule development, MITRE ATT&CK coverage mapping, threat hunting, alert tuning, and detection-as-code pipelines for security operations teams.

blackpearl-ai Skill

Expert smart contract security auditor specializing in vulnerability detection, formal verification, exploit analysis, and comprehensive audit report writing for DeFi protocols and blockchain applications.

blackpearl-ai Skill

Owns the full lifecycle of secrets and credentials — detection, prevention, vaulting, rotation, and leak response — so an application runs on short-lived, least-privilege credentials that are never in the code and are already rotated by the time a leak is found.

blackpearl-ai Skill

Cyber threat intelligence specialist who tracks adversary groups, maps attack campaigns to MITRE ATT&CK, produces actionable intelligence reports, and builds detection rules that catch real threats.

blackpearl-ai Skill

Expert bookkeeper and controller specializing in day-to-day accounting operations, financial reconciliations, month-end close processes, and internal controls. Ensures the accuracy, completeness, and timeliness of financial records while maintaining GAAP compliance and audit readiness at all times.

rudironsoni Skill

Security hardening and best practices for .NET applications. Navigation skill covering OWASP Top 10, authentication, authorization, cryptography, secrets management, and secure coding. For building secure applications. Keywords: security, owasp, authentication, authorization, cryptography, jwt, oauth, secrets, hardening

rudironsoni Skill

Secures ASP.NET Core APIs. Identity, OAuth/OIDC, JWT bearer, passkeys, CORS, rate limiting.

rudironsoni Skill

Hardens .NET apps per OWASP Top 10 -- injection, auth, XSS, deprecated security APIs.

atulpurohit Skill

Professional OWASP Guard Expert skill. Implement enterprise-grade web application security controls and encryption standards.

atulpurohit Skill

Harden APIs against OWASP API Top 10 vulnerabilities.

atulpurohit Skill

Professional Auth Flow UI Expert skill. Implement enterprise-grade web application security controls and encryption standards.

atulpurohit Skill

Professional JWT Security Expert skill. Implement enterprise-grade web application security controls and encryption standards.

atulpurohit Skill

Professional Auth Hardener Expert skill. Implement enterprise-grade web application security controls and encryption standards.

atulpurohit Skill

Professional Gdpr Enforcer Expert skill. Implement enterprise-grade web application security controls and encryption standards.

wyattjy Bundle

Perform language and framework specific security best-practice reviews and suggest improvements. Trigger only when the user explicitly requests security best practices guidance, a security review/report, or secure-by-default coding help. Trigger only for supported languages (python, javascript/typescript, go). Do not trigger for general code review, debugging, or non-security tasks.

atulpurohit Skill

Design complete OpenAPI 3.1 specifications for RESTful APIs. Covers schemas, security, examples, webhooks, and documentation generation.

atulpurohit Skill

Perform comprehensive security audits of applications and APIs. Produces CVSS-scored vulnerability reports with detailed remediation steps.

atulpurohit Skill

Conduct thorough, constructive code reviews that improve code quality, catch bugs, and teach best practices. Covers security, performance, readability, and design.

atulpurohit Skill

Develop professional WordPress sites, custom themes, and plugins. Covers WordPress best practices, hooks system, custom post types, WP REST API, and security.

xjli360 Bundle

Audit whether the price-related fields on a listing offer are populated correctly — the advertised-price floor, the everyday selling price, automated-pricing bounds, a time-boxed promotional price, and a reference/list price — and configure the pricing-automation, discount, business-price, and subscription-discount tools that read from them. Flags the specific downside of leaving any one field wrong or unset ahead of a promotional event. Use for 定价字段填错了会怎样、自动定价要不要开、企业购价格怎么设、订购省折扣设多少、大促前定价字段要检查什么. Do not use to set a discount or reference price without first confirming the current official reference-price and promotion-day rules for the target marketplace.

xjli360 Bundle

Audit an Amazon main image and image set against the current marketplace image requirements, then design differentiation across usage scene, size reference, material cues, feature highlights and packaging, producing a revision brief with a single-variable CTR verification plan instead of asserting that images move organic rank. Use for 主图怎么做、主图点击率低、主图规范核对、副图放什么、主图差异化、图片被盗用怎么开 case. Do not use to claim image changes directly move organic ranking, or to upload or replace live images without approval.

xjli360 Bundle

Audit Amazon Sponsored Products bidding-strategy settings for a silently pre-enabled schedule-based bid increase during a seasonal demand drop, and pair the correction with clearance and next-cycle product planning. Use for 旺季销量骤降但ACOS走高的排查、广告后台默认竞价规则核查、季节性滞销品清仓与选品转向决策. Do not use to raise or lower live bids without first checking current organic rank and conversion for the same keywords.

xjli360 Bundle

Audit the account's actual EU-marketplace footprint against the current official text for each relevant regulatory category (customs/low-value-parcel duty, VAT/OSS-IOSS registration, packaging EPR, product-safety disclosure, and platform data-reporting rules), confirming scope, effective date, and which of the account's own entities, products, and stock locations are affected before treating any rule as settled. Also runs an internal consistency check across order, payment, goods-movement, and invoice records plus entity-name matching across VAT, business, and packaging registrations. Use for 欧洲市场合规体系核对、VAT/EPR/关务法规适用性核对、多单证主体一致性审计、进入欧洲新站点前合规排查. Do not use to assert a specific tariff threshold, VAT rate, or regulation effective date as current fact without checking the official source; do not use as a substitute for a qualified customs, tax, or legal advisor's sign-off.

xjli360 Bundle

Run a pre-launch self-audit across policy compliance, price-floor economics, competitive saturation, and inventory commitment before funding a new Amazon product, using account and category evidence rather than fixed thresholds copied from any single source. Use for 新品上架前自检、定价是否太低、竞争是否太激烈、囤货风险评估、要不要放弃这个品. Do not use as a substitute for reading Amazon's current Seller Policies and Code of Conduct directly.

xjli360 Bundle

Turn mandatory AI-generated-content disclosure into a repeatable audit: verify the current labeling requirement and enforcement stance in Seller Central first, then check that AI-produced images retain generation metadata, add a disclosure flag where a platform declaration field exists, and sweep all listing assets (images, A+, description, video) for undisclosed AI content. Treats the exact detection method and enforcement severity as unverified until confirmed against current policy pages. Use for AI生成图片下架排查、AI内容标注合规、A+页面AI审核、上新前AI素材自查、存量Listing AI内容补标. Do not use to strip or fake metadata to evade detection, and do not assume a listing is safe just because it rendered normally in preview.

xjli360 Bundle

Audit List Price validity and rolling promotion-day exposure against the currently published reference-price and regular-price rules rather than a specific rule version, then produce a cleanup list for unsupported reference prices and a monitoring cadence that keeps the promotion-to-regular-price day ratio inside whatever threshold is officially in effect. Reference-price display eligibility is treated as opaque and re-checked, not guaranteed by any single corrective action. Use for 划线价资格核对、List Price清理、促销天数占比监控、参考价消失排查、常规价被促销价拉低预警. Do not use to set a List Price without current supporting evidence, and do not assume any single fix restores reference-price display without re-verification.

blackpearl-ai Skill

Defensive application security specialist who scans every code submission for secrets and sensitive data exposure before anything else, then implements or audits security controls following the organization's security standard — covering authentication, authorization, tokens, cookies, HTTP headers, CORS, rate limiting, CSP, secrets management, input validation, and secure logging.

blackpearl-ai Skill

Defensive application security specialist who scans every code submission for secrets and sensitive data exposure before anything else, then implements or audits security controls following the organization's security standard — covering authentication, authorization, tokens, cookies, HTTP headers, CORS, rate limiting, CSP, secrets management, input validation, and secure logging.

blackpearl-ai Skill

AppSec specialist who secures the software development lifecycle through threat modeling, secure code review, SAST/DAST integration, and developer security education that makes secure code the default.