Security

kensaurus Bundle

Read-only audit and decision advisor for backend architecture, topology-gated by stack. Use when "audit backend architecture", "which pattern should I use", "am I over-engineering", "sync vs event-driven". Mechanical boundary rules → enhance-arch-boundaries.

kensaurus Skill

Audit dependencies for hallucinated or slopsquatted packages, supply-chain risk, and licensing gaps, then a remediation plan. Use when "check my dependencies", "is this package real", "slopsquatting", "SBOM", or "did the AI hallucinate a package".

kensaurus Bundle

Browser-session guardrail for Playwright CLI: use headed, named, isolated sessions; prevent parallel collisions and recover stalls without scripted shortcuts. Read before browser work or when automation freezes. Product QA behavior remains with the calling test/audit skill.

nous-hermeshub Skill

Configure and test common network services (HTTP, HTTPS, SNMP, SMB) for penetration testing lab environments. Enable hands-on practice with service enumeration, log analysis, and security testing against properly configured target systems.

nous-hermeshub Skill

Audit and rewrite content to remove 21 categories of AI writing patterns with a 43-entry replacement table

nous-hermeshub Skill

ISO 13485 internal audit expertise for medical device QMS. Covers audit planning, execution, nonconformity classification, and CAPA verification. Use when planning internal audits, executing audits, classifying findings, preparing for external aud...

nous-hermeshub Skill

Technology stack evaluation and comparison with TCO analysis, security assessment, and ecosystem health scoring. Use when comparing frameworks, evaluating technology stacks, calculating total cost of ownership, assessing migration paths, or analyz...

nous-hermeshub Skill

Skill Security Auditor

nous-hermeshub Skill

Provide comprehensive techniques for escalating privileges from a low-privileged user to root/administrator access on compromised Linux and Windows systems. Essential for penetration testing post-exploitation phase and red team operations.

terminalskills Bundle

You are an expert in Hapi.js, the configuration-centric enterprise framework for Node.js. You help developers build production APIs with built-in input validation (Joi), authentication strategies, plugin architecture, caching, rate limiting, and comprehensive request lifecycle hooks — designed for teams that need structure, security, and testability without third-party middleware sprawl.

bytesagain Bundle

Review code files for bugs, security issues, and style problems. Use when auditing Python, JavaScript, Go, or Bash code, checking for injection risks, measuring complexity, or generating review checklists.

jantoniofc Skill

Use when the user asks to review pull requests, analyze code changes, check for security issues in PRs, or assess code quality of diffs.

jantoniofc Skill

Expert in secure backend coding practices specializing in input validation, authentication, and API security. Use PROACTIVELY for backend security implementations or security code reviews.

jantoniofc Bundle

ISO 27001 ISMS implementation and cybersecurity governance for HealthTech and MedTech companies. Use for ISMS design, security risk assessment, control implementation, ISO 27001 certification, security audits, incident response, and compliance verification. Covers ISO 27001, ISO 27002, healthcare...

a5c-ai Bundle

AI perception skill for sight, hearing, and threat detection systems.

michaelschecht Bundle

Perform language and framework specific security best-practice reviews and suggest improvements. Trigger only when the user explicitly requests security best practices guidance, a security review/report, or secure-by-default coding help. Trigger only for supported languages (python, javascript/typescript, go). Do not trigger for general code review, debugging, or non-security tasks.

curiositech Bundle

Security vulnerability scanner and OWASP compliance auditor for codebases. Dependency scanning (npm audit, pip-audit), secret detection (high-entropy strings, API keys), SAST for injection/XSS vulnerabilities, and security posture reports. Activate on 'security audit', 'vulnerability scan', 'OWASP', 'secret detection', 'dependency check', 'CVE', 'security review', 'penetration testing prep'. NOT for runtime WAF configuration (use infrastructure tools), network security/firewalls, or compliance certifications like SOC2/HIPAA (legal/organizational).

terminalskills Bundle

Find and remove unused files, dependencies, and exports in JavaScript/TypeScript projects with Knip. Use when someone asks to "find unused code", "clean up dependencies", "remove dead code", "find unused exports", "Knip", "reduce bundle size by removing unused files", or "audit npm dependencies". Covers unused files, dependencies, exports, types, and CI integration.

gonzalezpazmonica Bundle

Skill: Mutation Audit

gonzalezpazmonica Bundle

Performance Audit Intelligence

gonzalezpazmonica Bundle

Dynamic Web Security Tester — SE-245

gonzalezpazmonica Bundle

Git Secret Scanner Skill

gonzalezpazmonica Bundle

Subagent Scope Guard

gonzalezpazmonica Bundle

Subagent Scope Guard

gonzalezpazmonica Bundle

TLS Security Checker

gonzalezpazmonica Bundle

Mobile Security Scanner

pingqlin Skill

Dataverse SDK for Python — Authentication & Security Patterns

curiositech Bundle

Expert in implementing OAuth 2.0 and OpenID Connect (OIDC) authentication flows. Specializes in secure token handling, social login integration, API authorization, and identity provider configuration. Handles both client-side and server-side flows with security best practices.

boisenoise Bundle

Sets up security scanning for secrets and dependency vulnerabilities. Use when adding security infrastructure to a project.

boisenoise Bundle

Scans codebase for hardcoded secrets with severity classification and remediation guidance. Use when auditing a project for leaked credentials.

boisenoise Skill

Auto-fixes low-risk tech debt (unused imports, dead code, commented-out code) with >=90% confidence. Use when audit findings need safe automated cleanup.

ariffazil Skill

📜 WISDOM-reader — Witness-First Audit Doctrine

ariffazil Bundle

Archived constitutional warga placeholder retained only for audit provenance. Do not use for active work; use the live arifOS governance

ariffazil Bundle

Archived skill artifacts and quarantine records. Retained for audit trace and civilizational memory.

sboghossian-mini-claude-for-legal Skill

Use when drafting an intellectual property licensing agreement that grants rights to use a patent, trademark, copyright, trade secret, or software. Covers exclusive, sole, and non-exclusive licenses across any territory and field of use, with full attention to royalty structures, audit rights, improvement ownership, and MENA-specific enforceability traps (commercial agency law, gharar, SAIP registration). Triggers on phrases like "ip license", "licensing agreement", "royalty deal", or "technology transfer".

pingqlin Skill

Secure Coding and OWASP Guidelines