Security

nisar999 Skill

Designs test pyramids with unit, integration, E2E, performance, and security testing. Use when writing Vitest, Playwright, k6 tests, test strategy, or CI test pipelines.

nisar999 Skill

Programs microcontrollers, RTOS, sensors, edge computing, and firmware security in C/Rust. Use when writing firmware, ISR handlers, MQTT connectivity, OTA updates, or IoT protocols.

nisar999 Skill

Embeds AppSec via SAST, DAST, SCA, threat modeling, and secure SDLC practices. Use when reviewing code for vulnerabilities, configuring security scans, or compliance controls.

may215 Skill

Group skill: Sprint planning and architecture review — requirements, architecture, API design, database design, estimation, task breakdown, security, TDD, and documentation.

may215 Skill

Group skill: Comprehensive security audit — threat modeling, SAST, dependency check, auth review, API security, pen testing, secrets check, GDPR, hardening, and compliance report.

shizukoyamamura Bundle

Perform critical, constructive senior-engineer code reviews of C# / .NET (Unity) code, checking maintainability, performance, robustness/error handling, and security against standard best practices and coding conventions. Use when the user runs /code-review, shares C# code or files for review, or asks for a code review, レビュー, or feedback on code quality.

danube-messaging Skill

Control plane operations with danube-admin. Use for cluster management, broker operations, topic/namespace management, schema administration, and security.

danube-messaging Bundle

End-to-end security setup — TLS certificates, broker auth configuration, JWT token management, RBAC roles and bindings, and verification that unauthorized access is rejected with PermissionDenied.

majinabhinav-gif Bundle

Guide the design and maintenance of recordkeeping programs under SEC Rules 17a-3, 17a-4, and 204-2. Use when the user asks about document retention schedules, how long to keep trade records or customer complaints, WORM storage requirements, email or text message archiving, social media capture, BYOD compliance policies, or electronic storage audit trails. Also trigger when users mention 'we got an exam request for records', 'migrating to a new archiving vendor', 'blotter retention', 'order ticket requirements', 'off-channel communications', 'WhatsApp archiving', or ask how long specific records must be kept.

code-shock Bundle

Build and maintain a project's ubiquitous language — a CONTEXT.md glossary (plus ADRs and, for multi-repo projects, a context map). Interviews you to sharpen terminology, grounds terms in the code, and keeps the docs a living, drift-checked source of truth. Use to bootstrap or audit domain terminology, or when the user says "/terms".

majinabhinav-gif Skill

Design and manage reference data systems — security master, client master, account master, identifier mapping, pricing data sources, golden source designation, and governance. Use when building or evaluating a security master database, mapping identifiers across systems (CUSIP to ISIN, SEDOL to FIGI), designing client master models for onboarding or KYC, defining account master attributes across custodians, designating golden sources and MDM patterns across systems, establishing a pricing vendor hierarchy with fallback order, establishing reference data governance and stewardship, handling identifier changes from corporate actions, or troubleshooting issues traced to missing or changed identifiers. Trigger on: security master, CUSIP, ISIN, SEDOL, FIGI, client master, account master, pricing data, reference data, golden source, MDM, master data, identifier mapping, data governance, vendor hierarchy.

majinabhinav-gif Skill

Guide BSA/AML compliance program design, ongoing transaction monitoring, and FinCEN reporting for broker-dealers, banks, and investment advisers. Use when the user asks about suspicious activity reports, currency transaction reports, OFAC screening, structuring detection, ongoing risk-rating reviews and escalation, or FinCEN requirements. Also trigger when users mention 'large cash deposit', 'sanctions check', 'money laundering red flags', 'unusual transaction patterns', 'wire to a foreign country', 'SDN list', 'tipping off a client about a SAR', 'AML audit', 'correspondent account due diligence', or ask whether a transaction needs to be reported. (For onboarding identity verification, CIP/CDD, beneficial ownership, and initial customer risk rating, use know-your-customer.)

majinabhinav-gif Bundle

Prepare for and respond to SEC and FINRA regulatory examinations across the full exam lifecycle. Use when the user asks about exam notification letters, document request lists, deficiency letter responses, mock examination programs, annual compliance reviews under Rule 206(4)-7, or SEC/FINRA examination priorities. Also trigger when users mention 'we just got an exam letter', 'preparing for our first SEC exam', 'how to respond to a deficiency finding', 'staff interview preparation', 'what does OCIE look for', 'examination readiness checklist', 'sweep exam on off-channel comms', or ask what to expect during a regulatory audit.

majinabhinav-gif Bundle

Guide the design and implementation of order lifecycle management in trading systems. Owns FIX application-layer message flows (NewOrderSingle, ExecutionReport, cancel/replace) and order state. Use when building an order state machine for an OMS or EMS, handling cancel/replace race conditions, defining pre-submission validation rules (buying power, position limits, restricted lists), selecting order types and time-in-force instructions, designing multi-leg or OCO or bracket orders, building CAT-compliant audit trails, troubleshooting order rejections or unexpected state transitions, hardening an OMS against edge cases, or implementing order persistence and recovery for failover. Also covers execution-report handling, ClOrdID chaining, and partial fill aggregation. For FIX session management (logon, sequence gaps, disconnects) see exchange-connectivity.

migmcc Skill

Use when auditing a public repository for open-source readiness before publishing it.

majinabhinav-gif Skill

Execute a complete tax-loss harvesting workflow from candidate identification through post-harvest monitoring. Use when the user asks about finding TLH candidates, gain/loss budgeting, replacement security selection, wash-sale compliance, or harvest execution planning. Also trigger when users mention 'unrealized losses in my portfolio', 'swap ETFs for tax purposes', 'harvest losses before year-end', 'substantially identical security', 'wash-sale window', 'NIIT offset', 'loss carryforward', or ask how much tax they can save by harvesting.

majinabhinav-gif Bundle

Guide the design and implementation of automated pre-trade compliance systems that validate orders before execution. Use when building a compliance rule engine for an RIA or broker-dealer, configuring hard blocks and soft blocks, maintaining restricted and watch lists including MNPI-driven restrictions, setting concentration limits at security/sector/issuer level, implementing position limits or short selling controls, enforcing wash sale detection or free-riding prevention or pattern day trader identification, applying client-specific ESG screens or legal constraints, designing compliance override workflows with authorization and documentation, backtesting compliance rules, or evaluating compliance check latency impact on execution quality.

xuanjgcarryyou Bundle

Dedicated Cross-Site Request Forgery (CSRF) vulnerability scanner that audits state-mutating endpoints, session cookie configuration, middleware setup, and SPA token-handling patterns. Invoke this skill when code defines POST, PUT, PATCH, or DELETE endpoints; when configuring session cookies or CORS; when adding or modifying auth middleware; or when the user says "check for CSRF", "CSRF token", "SameSite", "state mutation", "form submission security", "cookie security", or "is my API CSRF-safe". CSRF lets an attacker forge authenticated requests from a victim's browser to your API — it is especially dangerous in applications that use cookie-based sessions, and is frequently missed in SPAs that assume JSON-only traffic is automatically protected.

xuanjgcarryyou Bundle

Deep nine-axis pre-release security audit for high-risk features. Invoke this skill when the user says "security review", "security audit", "review for security", "is this secure", or "before we ship" — especially when code touches authentication, authorization, PII handling, payment flows, or file uploads. SCOPE: Injection, Authentication, Authorization, Sensitive Data Exposure, Misconfiguration, Secrets Leakage, Input Validation, and Dependency CVEs. NOTE: SSRF findings — delegate to ssrf-review skill for deeper analysis. NOTE: CSRF findings — delegate to csrf-review skill for deeper analysis. Do NOT use this skill for routine post-generation review — that is auto-code-review's job. Use this skill only for explicit pre-release audits of security-critical features.

xuanjgcarryyou Bundle

Performs a seven-point health audit on any external package before it enters the codebase, preventing hallucinated packages and dependency bloat. Invoke this skill when a user says "install", "npm install", "add dependency", "import", "new package", or "pip install". It checks existence, redundancy against current dependencies, maintenance activity, popularity, license compatibility, bundle size, and known CVEs, then delivers a PASS, WARN, or BLOCK verdict with a replacement recommendation when blocked.

zap-coding-agent Skill

Use when proactively hunting for threats in Splunk that existing alerts didn't catch — forming a hypothesis, exploring data for anomalies, looking for lateral movement, beaconing, living-off-the-land, persistence, or suspicious patterns, and turning findings into detections. Distinct from incident investigation (no known alert) and from writing detections (hunting discovers what to detect).

zap-coding-agent Bundle

Use when building, tuning, or reviewing Splunk security detections — correlation searches, scheduled alerts, Enterprise Security notable events, risk-based alerting (RBA), or mapping detections to MITRE ATT&CK. Also when a detection is too noisy, misses true positives, or you need to reduce false positives. Covers detection logic, thresholds, throttling, and the detection lifecycle.

cuimuxuan Bundle

Discover, verify, and audit academic literature for papers, theses, dissertations, and review articles. Use when the user needs literature search, DOI verification, title-DOI matching, citation authenticity checks, bibliography cleanup, evidence register maintenance, LIT_GAP or 待补证据 resolution, writing-ready source handoffs, or prevention of fabricated references. Chinese triggers: 文献检索, DOI核验, 引用真实性检查, 参考文献核对, 证据表, 文献可信度, 待补证据, 文献缺口, LIT_GAP.

sanjai52 Skill

Verify Supabase authentication implementation, session management, OAuth, protected routes, environment security, and auth page compliance.

thomaszhou22 Bundle

Use when the user asks to create, improve, fix, or audit a README.md file, score their README, document an open source project, or set up new project docs. Provides 8-dimension 0-100 quality scoring, 5-type template matrix (Library, CLI, App, Skill, Data), and pre-publish checklist. Do NOT use for API docs, wikis, inline code comments, or general technical writing.

sanjai52 Skill

Security review for every task without exception. OWASP Top 10, Supabase RLS, Zod boundary enforcement, JWT validation, PII handling, multi-tenant isolation, audit logging for B2B/B2G compliance.

voraviz Skill

Find scecific CVE related to Red Hat Enterprise Linux (RHEL) from official Red Hat website via REST API and search for related Red Hat Security Advisory (RHSA) if available

avizmarlon Skill

Collect sensitive values from users via secure local prompts, never in chat. Use when asking for API keys, tokens, passwords, or any secret that should remain hidden from logs.

kidskills Bundle

Audit architectural renderings against CAD drawings for strict drawing fidelity. Use when the user asks whether an effect image/rendering matches DWG/PDF construction drawings, wants renderings revised until they meet drawing requirements, or needs a discrepancy list for facade, roof, windows, balconies, materials, proportions, and style consistency.

jambot24 Skill

Structured, severity-tagged code review of a diff or set of changes, tuned for an MSP / professional-services environment (client data, secrets, least privilege). Use this whenever the user asks to "review", "check", "audit", or "look over" code, before a merge or PR, or after a batch of edits. Layers a DP3-specific security and reliability checklist on top of Claude Code's native /review and /security-review. Do not rubber-stamp. Invokable as /cursor-review.

jambot24 Bundle

Set up or audit the safety/steering layer for Claude Code in a repo: a CLAUDE.md baseline, a permissions allowlist, and PreToolUse hooks that hard- block dangerous shell commands and writes to sensitive paths. Use this whenever the user wants to "lock down", "secure", "set guardrails", "set safe defaults", or configure permissions/hooks/auto-run safety for Claude Code, especially in an MSP or client-data environment. Invokable as /cursor-guardrails.

wade-devcode Skill

审查代码安全性时使用。覆盖注入、认证、越权、敏感数据等常见风险。

frankatvan Skill

Use after legacy-system-archaeology has produced a pure implemented-system baseline, when auditing already implemented code and runtime evidence for compliance with "就源输入、多次应用、环环相扣、相互稽核" without considering new requirements, PRDs, roadmaps, or future designs.

rloisell Skill

Network security controls including ACLs (standard/extended/named/object-group), NAT/PAT, IPsec VPN (IKEv1/IKEv2, site-to-site, remote access), zone-based firewall, VLAN security hardening (DHCP snooping, DAI, 802.1X, port security), and common attack vectors (ARP spoofing, VLAN hopping, rogue DHCP, DDoS mitigation). Use when designing or auditing firewall policy, ACL rules, VPN configurations, or switch security hardening.

yapie0 Skill

Security Shield monitors all tool calls for dangerous commands and secret leaks. It automatically blocks destructive operations (rm -rf, reverse shells, crypto mining) and redacts API keys/tokens from tool output before they reach the conversation. All tool activity is logged to ~/.openclaw/security-audit.jsonl for audit review.

velimirmueller Bundle

Use when reviewing a content page, article, guide, or landing page for quality before publishing or republishing — scores the page against a rubric (the project's .claude/rubrics/content-quality.md if present, else the bundled default covering intent match, direct answers, E-E-A-T trust signals, schema, internal linking, freshness) and fixes only the failed criteria. Audit-first and idempotent; supports knockout criteria.