Security

j4flmao Skill

Automated auditing, reentrancy guards, and flashloan attack prevention.

j4flmao Skill

AI Defense Mechanisms & Guardrails

j4flmao Skill

eBPF Threat Detection, Tetragon, Falco, and Kernel Syscall Interception

j4flmao Skill

Malware Analysis Internals

j4flmao Bundle

Use this skill when implementing logging frameworks, log formats, or distributed tracing correlation. This skill enforces: JSON lines format, strict log schema with correlation IDs, PII redaction, log level discipline, and stdout-only output. Applies to any backend stack with Winston/Pino/Serilog/Log4j/logrus/zerolog. Do NOT use for: metrics collection, audit trail systems, or application performance monitoring.

j4flmao Skill

Post-Quantum Cryptography (PQC) Integration

j4flmao Skill

Advanced Binary Exploitation

j4flmao Skill

Exploit Development Concepts

itsual Skill

Navigate enterprise deal complexity — multi-threading, security reviews, legal, procurement, and long cycles — to reach durable closes. Use when selling to large organizations with formal buying processes and many stakeholders.

itsual Skill

Prepare for external audit with organized support, clean reconciliations, and responsive PBC (prepared by client) management. Use when approaching year-end audit, first-time audits, or improving audit cycle efficiency.

joshuashepherd Skill

Audit and fix chat-based AI UI (chatbots, agents, floating chat) against production best practices from Claude, ChatGPT, and modern conversational AI interfaces. Use when building, reviewing, or improving any chat UI.

joshuashepherd Skill

Audit and update the type safety documentation in _docs/type/ to match the actual codebase state. Ensures docs are the single source of truth without errors or gaps.

joshuashepherd Skill

Tell a named movement leader's actual story of informational and relational fragmentation. Inventories every place their content currently lives — books, PDFs, articles, blogs, websites, social media, their own head, notes/laptop, apps, podcasts, YouTube, sermons, talks — with specific titles and locations pulled from prior research. Use when asked to map fragmentation for a leader, audit where their content is scattered, or produce a "where does it all live" report. Reads from `docs/movement_leader_research/{slug}/` and writes `fragmentation-story.md` into that leader's folder.

joshuashepherd Skill

Audit where images are needed across the project (heroes, covers, cards, OG images) vs what's available in public/images/. Reports matches, mismatches, missing assets, and broken references. Connects to asset generation skills for creating missing images.

concertonotes Skill

Repo Audit Skill

testdouble Bundle

Write code through a disciplined, BDD-framed Test-Driven Development loop: build a behavior test list, then drive each behavior through red-green-refactor with an enforced observed-failure gate. Use when the user wants to implement, build, or write code test-first, "do TDD", follow "red-green-refactor", drive code from tests, choose the next test by the Transformation Priority Premise (TPP) or ZOMBIES ordering, or grow a feature behavior-by-behavior with tests leading. This skill writes and changes code; it does not produce a test plan document (use automated-test-planning, or manual-test-planning for a plan a person runs by hand), review or audit existing code (use code-review), restructure existing code outside a TDD loop (use refactor, or plan-a-change to plan a multi-module restructure), specify what a feature should do (use plan-a-feature), or find the root cause of a bug (use investigate). Runs its loop to completion without pausing for review; to review each behavior as it lands, use pairing.

testdouble Bundle

Run a comprehensive code review on local source files. Use this skill when the user asks to review, audit, inspect, evaluate, or check code, even if they never use the word "review." Does not post comments to GitHub pull requests — use post-code-review-to-pr for that. Does not analyze architectural structure or module boundaries — use architectural-analysis for that. Does not explain code or a PR to build understanding before reviewing — use code-overview for a written overview, or code-walkthrough to be paced through it one step at a time. Does not map bounded contexts or domain boundaries — use ddd-analysis for that. Does not capture feedback on Han's own skills — use han-feedback for that.

testdouble Bundle

Produce a standalone test plan by analyzing code for test coverage gaps and edge cases. Use when you need to create, generate, or draft a test plan for a branch, need to analyze test coverage, or need to identify what tests to write for specific files or directories. Does not produce a plain-language plan for a person to run tests by hand — use manual-test-planning for that. Does not write test code — use tdd to implement behavior test-first. Does not refine existing plans — use iterative-plan-review. Does not review code quality, security, or style — use code-review for full code review. Does not evaluate architectural testability or structural coupling — use architectural-analysis for architectural assessment.

agentskillexchange Skill

Security Audit Skill

kanevry Skill

Use when creating, modifying, or debugging Claude Code hooks — PreToolUse, PostToolUse, Stop, SubagentStop, SessionStart, SessionEnd, UserPromptSubmit, PreCompact, Notification. Covers the plugin `hooks/hooks.json` wrapper format vs. the user `settings.json` direct format, matchers, security patterns, `$CLAUDE_PLUGIN_ROOT` portability, lifecycle limitations, and debugging. Trigger on "add a hook", "validate tool use", "block dangerous commands", "enforce completion", "hook-based automation".

rulebase-co Skill

Use to assemble a pack of support evidence for a regulator, auditor or supervisory request, at the standard of reproducibility those audiences apply. Trigger for "the regulator has asked for", "prepare an audit pack", "evidence request from compliance", supervisory information request, s166-style review support, or assembling complaint and QA evidence for an external body.

rulebase-co Skill

Use to design peer or self-review QA programmes that complement — not replace — audit QA, with clear purpose, bias controls, and separate reporting. Trigger for "peer review programme", "agents reviewing each other", "self-QA", "peer QA vs central QA team", when peer review helps culture vs when it substitutes for audit, or bias risks in peer scoring.

rulebase-co Skill

Use to design, rebuild, or audit a support contact taxonomy — the categories that record why customers contact. Trigger for "build a contact reason taxonomy", "our ticket categories are useless", "too many tickets are tagged Other", contact driver analysis, ticket categorisation or tagging schema, reducing contact volume, or deciding what to fix from support data.

rulebase-co Skill

Use when a QA team says the scorecard is too harsh or produces too many false positives, to find which criteria are actually misfiring and fix those rather than lowering the bar everywhere. Trigger for "our evaluation scores keep tanking", "there are too many false positives", "how can we be more lenient", "what exceptions do I need to add to the scorecard", agents disputing evaluations, or a scorecard nobody trusts any more.

agentskillexchange Skill

Falco Runtime Security

tinh2 Skill

Run a full game QA audit on Unity, Unreal, Godot, or web game projects. Triggers: you need to QA test a game, audit game code quality, find game bugs, check game certification compliance.

tinh2 Skill

Audit game user experience across HUD clarity, menu navigation, tutorial effectiveness, control responsiveness, camera systems, feedback loops, loading screens, and settings completeness..

tinh2 Skill

Audit your project's documentation health and identify gaps. Scans for README, changelog, API docs, ADRs, runbooks, onboarding guides, and diagrams. Triggers: you need a documentation audit, want to check doc coverage, find missing documentation, or assess documentation quality.

tinh2 Skill

SOC 2 Type II readiness assessment against all five Trust Service Criteria. Triggers: preparing for a SOC 2 audit, evaluating enterprise readiness, or building compliance controls into your application.

tinh2 Skill

Deep HIPAA Security Rule technical audit mapping code-level findings to 45 CFR sections. Triggers: building or auditing healthcare apps, EHR integrations, FHIR APIs, telehealth platforms.

tinh2 Skill

Systematic audit against the OWASP 2021 Top 10 web application security risks with severity-rated, file-level findings.

tinh2 Skill

One-command PR gate that runs four passes over exactly the changed surface — code review (correctness then simplification), security (injection, authz, secrets, dependency diff), tests (run the suite and flag untested changed lines).

tinh2 Skill

PCI DSS v4.0 compliance audit for payment-handling codebases. Scans for PAN patterns (Visa, Mastercard, Amex, Discover), CVV storage violations, and track data retention. Triggers: building or auditing payment flows, Stripe/Braintree/Adyen integrations.

tinh2 Skill

Static-analysis penetration test that hunts for exploitable vulnerabilities with proof-of-concept payloads and fix code.

rajanthar Skill

Verification loop for Laravel projects: env checks, linting, static analysis, tests with coverage, security scans, and deployment readiness.

rajanthar Skill

Verification loop for Spring Boot projects: build, static analysis, tests with coverage, security scans, and diff review before release or PR.