Security

bestagentkits Bundle

Fda Qsr Audit Prep

bestagentkits Bundle

Use when Codex should act as the Solidity Smart Contract Engineer specialist from Agency Agents. Expert Solidity developer specializing in EVM smart contract architecture, gas optimization, upgradeable proxy patterns, DeFi protocol development, and security-first contract design across Ethereum and L2 chains.

bestagentkits Bundle

Use when Codex should act as the Infrastructure Maintainer specialist from Agency Agents. Expert infrastructure specialist focused on system reliability, performance optimization, and technical operations management. Maintains robust, scalable infrastructure supporting business operations with security, performance, and cost efficiency.

bestagentkits Bundle

ISO 13485 Quality Management System implementation and maintenance for medical device organizations. Provides QMS design, documentation control, internal auditing, CAPA management, and certification support. Use when working with medical device quality systems, preparing for ISO 13485 audits, managing regulatory compliance documentation, setting up corrective actions, or building audit preparation programs. Useful for quality management, audit preparation, regulatory compliance, medical device documentation, and corrective action workflows.

bestagentkits Bundle

Use when Codex should act as the Autonomous Optimization Architect specialist from Agency Agents. Intelligent system governor that continuously shadow-tests APIs for performance while enforcing strict financial and security guardrails against runaway costs.

carofi-auto Skill

Self-review your changes before raising a PR. Runs on your local branch/diff, scans every changed line for real bugs, security holes, missing tests, and design problems, filters false positives, and reports severity-tagged findings plus a ready-to-raise verdict. Triggers on "review my changes", "review my diff before I push", "is this ready to raise a PR", "self-review this branch".

bestagentkits Bundle

Use when Codex should act as the Threat Detection Engineer specialist from Agency Agents. Expert detection engineer specializing in SIEM rule development, MITRE ATT&CK coverage mapping, threat hunting, alert tuning, and detection-as-code pipelines for security operations teams.

l1ttlebad Bundle

Cursor-native Academic Research Skills (ARS) suite for deep research, academic paper writing, manuscript review, full research-to-paper pipelines, and experiment planning. Use when the user asks for deep research, literature review, systematic review, meta-analysis, research question refinement, academic paper drafting, paper outline or abstract, paper revision, citation or integrity checks, reviewer simulation, peer review, editorial decision letters, research-to-paper workflows, experiment planning, statistical interpretation, or study protocol support. Also handles ARS command aliases such as /ars-plan, ars-plan, /ars-outline, /ars-abstract, /ars-lit-review, /ars-citation-check, /ars-disclosure, /ars-format-convert, /ars-3w, /ars-revision-coach, /ars-revision, /ars-rebuttal-audit, /ars-reviewer, /ars-mark-read, /ars-unmark-read, /ars-cache-invalidate, and /ars-full. Vendors ARS role prompts, references, templates, and shared schemas under ars/.

bestagentkits Bundle

Use when Codex should act as the Blockchain Security Auditor specialist from Agency Agents. Expert smart contract security auditor specializing in vulnerability detection, formal verification, exploit analysis, and comprehensive audit report writing for DeFi protocols and blockchain applications.

bestagentkits Bundle

Use when Codex should act as the Threat Intelligence Analyst specialist from Agency Agents. Cyber threat intelligence specialist who tracks adversary groups, maps attack campaigns to MITRE ATT&CK, produces actionable intelligence reports, and builds detection rules that catch real threats.

bestagentkits Bundle

ISO 27001 ISMS implementation and cybersecurity governance for HealthTech and MedTech companies. Use when designing an ISMS, running security risk assessments, implementing controls, pursuing ISO 27001 certification, preparing security audits, responding to security incidents, or verifying compliance. Covers ISO 27001, ISO 27002, healthcare security, and medical device cybersecurity.

uitbreidenos Skill

Structured code review: correctness, security, performance, maintainability — with severity and actionable feedback per finding

uitbreidenos Skill

ISO 27001 Information Security Management System: gap analysis, risk assessment, control implementation (Annex A), ISMS documentation, certification readiness, and surveillance audit preparation

uitbreidenos Skill

SOC 2 compliance: Trust Service Criteria mapping, control matrix, gap analysis, evidence collection, Type I vs Type II readiness, and audit preparation for SaaS companies

uitbreidenos Skill

Webhook security: HMAC-SHA256 signature verification, replay attack prevention, idempotency, Stripe + Svix + generic patterns

uitbreidenos Skill

UX audit against heuristics: identify usability issues, prioritise by impact, recommend fixes

uitbreidenos Skill

Supabase: Row Level Security policies, auth integration, realtime subscriptions, Storage, Edge Functions, pgvector

uitbreidenos Skill

Structured pull request review: blast radius analysis, security scan, breaking change detection, test coverage delta, and prioritised findings — for GitHub PRs and GitLab MRs

uitbreidenos Skill

Deep code review using Claude Code's thorough analysis mode — security, performance, correctness, and maintainability

uitbreidenos Skill

Security audit for code: OWASP Top 10, injection, auth flaws, secrets, dependency vulnerabilities — with severity and fix for each finding

uitbreidenos Skill

Environment variable and secrets hygiene: audit .env files for committed secrets, validate .env.example completeness, detect secret leaks in git history, and harden local dev security

uitbreidenos Skill

Security reviews, code quality audits, or when the user mentions CodeQL, Semgrep, or finding vulnerability patterns across a codebase.

uitbreidenos Skill

Audit business expenses: find subscription creep, duplicate vendors, unused tools, misclassified costs — turn QuickBooks or bank exports into actionable savings

uitbreidenos Skill

Guidelines and instructions for XSS sanitize filter hooks

uitbreidenos Skill

Audits brand presence across web; checks tone consistency, message alignment, visual identity adherence, and brand voice. Returns audit report with pass/fail on each dimension and specific recommendations.

uitbreidenos Skill

Security Scanning

uitbreidenos Skill

Audit database security — user privileges, encryption, access patterns, and compliance posture

uitbreidenos Skill

Security Reviewer

uitbreidenos Skill

Threat Modeler

uitbreidenos Skill

Security audit for Solidity smart contracts — reentrancy, access control, integer overflow, and EVM-specific vulnerabilities

uitbreidenos Skill

Writes and optimizes job descriptions for clarity, keyword optimization, candidate filtering, and bias reduction. Outputs jd-{role}-{date}.md with compliance audit.

uitbreidenos Skill

Security Scanner

uitbreidenos Skill

Runs culture health assessment, measures eNPS and engagement, identifies belonging gaps, flags flight risks. Outputs culture-audit-{date}.md with recommendations.

uitbreidenos Skill

Audit and optimize meeting calendars — eliminate waste, create templates, and enforce meeting hygiene

uitbreidenos Skill

Reviews flagged posts for policy violations. Generates moderation response (educate/warn/remove). Escalates harassment and hate speech. Logs all decisions with rationale for audit trail.

uitbreidenos Skill

Reviews a system design document for completeness, correctness, and feasibility. Checks against scalability, security, compliance, and operational best practices. Outputs structured review with critical findings, warnings, and recommendations.