Security

tungnh-expand Skill

Audits Dart/Flutter code changes against the team's coding conventions (naming, dead code, meaningful identifiers, abbreviations, public API docs) and returns a prioritized report. Trigger when the user asks to review, check, audit, or validate code changes — "check this PR", "review my code", "convention check", "lint this change". Auto-fetches the git diff; the user does not need to paste anything.

zhu1090093659 Bundle

Findings-first code review workflow for AI coding agents. Use when the user asks to review uncommitted changes, commits in a date range, or a branch compared to the main branch / PR-style diff. Focuses on bugs, regressions, correctness risks, missing tests, security/data-safety issues, and other behavior-changing defects.

tatat Skill

Review code for quality, security vulnerabilities, and best practices compliance

transilienceai Bundle

Social engineering testing - phishing, pretexting, vishing, and physical security assessment techniques.

unityappsuite Bundle

Review Frappe/ERPNext code changes for framework idioms, security, permission correctness, and performance. Use when the user says "review", "review my changes", "review this PR", "code review", "check this PR", or pastes a github.com/*/pull/* URL — even with no other context. Also when reviewing a specific file, controller, API, DocType JSON, client script, or ERPNext customization.

luw2007 Bundle

Skill 自迭代能力评审与改进工具。 评估任意 SKILL.md 是否具备自迭代闭环能力，输出结构化评分报告与改进建议。 可作为 skill 质量门禁集成到 CI 或编排器的 post-execution 阶段。 触发词：skill 评审、自迭代检查、skill audit、skill improve、技能改进。

ddunnock Bundle

Transform documentation from any starting point into professional, comprehensive documentation packages using the Diátaxis framework. 7 commands: init (create structure), inventory (catalog sources), plan (create WBS), generate (create docs), sync (update from code reality), analyze (quality audit), readme (manage README/CHANGELOG). Integrates with speckit-generator for implementation-to-docs workflow. Supports specs, ADRs, RFCs as input with code walkthrough for syncing docs to reality.

kevinslin-skills Bundle

Audit configured operational checks. Use when directly invoked.

nodejsmith Skill

Use when the user says: "audit the codebase", "find tech debt", or "health check". Systematic codebase health audit — surfaces aging code, brittle designs, missing tests, and accumulated debt, ranked by impact.

rooseveltadvisors-claude-agent-stack Bundle

OSINT and people-finding — structured investigations, company intel, due diligence, and ethical people search across public records and social media. USE WHEN OSINT, due diligence, company intel, background check, find person, locate, people search, reconnect, public records, reverse lookup, social media search, verify identity, domain lookup, entity lookup, organization lookup, company lookup, threat intel.

jefflyt Skill

Collect natural-language environment context and generate evidence collection guidance for Mandate 2.2.3 Secure Training and Fine-Tuning. Use when code is insufficient and operational proof is required for final compliance evaluation.

satnamrsm Skill

This skill should be used when the user asks to "escalate privileges on Linux", "find privesc vectors on Linux systems", "exploit sudo misconfigurations", "abuse SUID binaries", "ex...

0nate4 Skill

SDD preset for Cursor: spec lock with user Q&A before the loop, Composer 2.5 (not fast) implementers, Grok 4.6 xhigh spec reviewers plus an extra no-plan outside-voice Grok pass, always git worktree in .worktrees/, local typecheck+tests as CI, Bugbot plus path-scoped security, auto ship via sdd-ship. Use with subagent-driven-development when executing plans, /sdd, or whenever the user wants the SDD workflow.

aryanrogye Skill

Audit iOS or macOS UI, layout, animation, transition, and visual polish issues. Use when the user asks to audit a design, fix a janky animation, inspect a transition, remove visual glitches, verify UI polish, or prove a UI fix works. Do not use for ordinary refactors or non-visual bugs.

cloudcrane-software Bundle

Capability: restate-audit-export

eminence212 Bundle

Développement backend Rawbank : GO-PASS stockgopass (Spring Boot 3.4, JWT, RBAC IAM, Oracle Flyway V1-V29, périmètre ECONOMA→GUICHET) et Digibranch digibranch (Spring Boot 3.3, kiosk /kiosk/v1, session cookie, Corbanking, périmètre device/branch, OTP, documents PDF). Use when: API, services, repositories, migrations, sécurité, tests, audit, ventes, stocks, approvisionnements, auth OTP kiosk, relevés RIB, ou erreurs backend dans stockgopass/gopass/backend ou digibranch/backend.

hzyuer Bundle

Run a conservative read-only Windows C drive cleanup audit that reports large deletable, migratable, stale software, and stale code repository candidates without deleting anything.

ben-manes Skill

JSR-107 (JCache) spec-conformance audit

lossyrob Skill

Analyzes system-wide impact of PR changes including integration effects, breaking changes, performance, and security implications.

lucasilverentand Skill

Assigns issue points using Luca's complexity metadata rules. Use when the user asks to grade, estimate, score, point, size, triage, compare, normalize, or audit issues by complexity, especially when they mention points, estimates, acceptance criteria, issue sizing, uncertainty, or oversized work.

pluginagentmarketplace Bundle

Linux networking fundamentals - configuration, troubleshooting, security

mikker Bundle

Audit and enable security-oriented Xcode build settings. Progressively enables compiler warnings, static analyzer checkers, and Enhanced Security features. Use when: user wants to secure their Xcode project, audit security settings, enable hardening, review security posture of build configuration, set up security-focused static analysis, enable static analysis, improve warning coverage, harden diagnostics, or catch more bugs at compile time in C/C++/Objective-C/Swift. SKIP: network security (TLS/ATS), code signing, privacy APIs.

swellshinider Skill

Documentation audit and cleanup for README, community files, and links without changing code behavior.

dotnet Skill

Review code changes in dotnet/sdk for problems — either a GitHub pull request or local changes in your branch before a PR exists. Use when asked to review a PR, review local or uncommitted changes, do a code review, check a PR or branch for issues, or review pull request changes. Focuses only on identifying problems — not style nits or praise.

blogic-cz Bundle

This skill should be used when running a code review or pre-PR review in template-ts repositories. It provides a severity-based checklist for architecture, security, performance, and testing quality gates.

nguyenhuy158 Skill

Perform a security code review based on OWASP Top 10. Use when user asks for security audit, vulnerability review, or mentions OWASP. Triggers on "security review", "audit code", "check for vulnerabilities", "OWASP", "kiểm tra bảo mật".

szewowsky Bundle

Audytuje higienę autorskich plików SKILL.md: długość opisu, cross-referencje, boilerplate, osobę, frontmatter oraz sync kopii między scope'ami i sibling repo. Use when authoring or editing a skill and you want its description checked before it degrades routing — triggers: "/skill-audit", "audyt skilli", "sprawdź opisy skilli", "higiena skilli".

tomatofiretomato Bundle

Repair Japanese SRT subtitles generated by Whisper or other ASR systems while preserving the source timeline exactly. Use for Japanese-only transcription correction, hallucination cleanup, proper-name verification, spoken-Japanese naturalness review, audio-backed correction, and delivery of a corrected Japanese SRT with unchanged block count, order, and timecodes. This skill does not translate subtitles, produce bilingual output, or retime subtitles. Use the bundled Node.js script for subtitle reading, risk analysis, template export, audit, writing, comparison, and validation.

brightstack Bundle

Independently review an exact code candidate, including UI markup and styles, for reachable defects, regressions, security, engineering standards, and test quality. Use when the user asks for a standalone code review, PR review, branch review, commit review, diff inspection, or code-only critique. Do not use for implementation, repair, full Forge lifecycle Review, acceptance testing, pure visual design artifact review, or knowledge-work review.

chungyileong Bundle

Coordinate a single-controller Executor-Advisor workflow in Codex. Keep the root task as the sole executor and consult at most one read-only `advisor` custom subagent per logical task at high-value planning, recovery, and final-review checkpoints. Use for long-horizon or high-risk coding, research, architecture, debugging, concurrency, security, performance, and review tasks where a second opinion can materially improve the result; skip routine or directly verifiable work.

consensys-incorporated Skill

Review Zesu documentation for editorial compliance (voice, terminology, formatting, content type, frontmatter, workflow). Use before submitting a PR or when asked to audit existing pages.

frankxai Skill

Map which content mentions paying AI tools but lacks affiliate links, and which programs to join first. Use when monetizing AI-tool comparison content, choosing affiliate programs, or auditing a passive-income site's link coverage.

geoffrey-xiao Bundle

Audit JavaScript and TypeScript repository dependencies for security, supply-chain, maintenance, version, lockfile, and cleanup risks. Use for npm, pnpm, Yarn, or Bun package reviews; do not use for automatic dependency upgrades unless the user explicitly requests changes.

geoffrey-xiao Bundle

Safely validate, dry-run, publish, and verify ClawHub skills and OpenClaw plugins. Use for versioning, changelogs, secret scans, fingerprint checks, authentication, and post-release verification; do not use to design a package.

graphistry Skill

Review a pull request, branch, or proposed fix for specification conformance, correctness, tests, security, maintainability, and repository conventions. Use before making a fix or when preparing evidence-backed PR findings; discover applicable specification and policy files first.

itallstartedwithaidea Skill

Systematic security auditing for web applications and APIs. Activate when the user asks to "check for security issues", "audit security", "find vulnerabilities", "scan for secrets", or review code for security concerns.