Security

kok-o Skill

Redesign Skill & UI Audit

neekware Bundle

> **Note:** Bundled scripts ship as Markdown reference (`.md`) — copy the code out of the `.md` file to run it.

joshuashepherd Skill

Cross-platform audit of visual storytelling components — cards, grids, stats, comparisons, numbered steps, section rhythm, and narrative flow. Ensures every visual element tells the story with the best design possible. Use when auditing pages for narrative clarity, visual hierarchy, and design token compliance.

neekware Bundle

Senior Security Engineer

neekware Bundle

> **Note:** Bundled scripts ship as Markdown reference (`.md`) — copy the code out of the `.md` file to run it.

construct-ai-primary Skill

Internal audit coordination

anantha-236 Skill

Laravel security best practices for authn/authz, validation, CSRF, mass assignment, file uploads, secrets, rate limiting, and secure deployment.

anantha-236 Skill

Perl Security

construct-ai-primary Skill

QA audit planning and execution

anantha-236 Bundle

Security Review

eli-yu-first Bundle

Configures MQTT brokers with topic hierarchies, QoS levels, and security policies

eli-yu-first Bundle

Checks web applications against OWASP Top 10 vulnerabilities with remediation guidance

oimiragieo Skill

Use when creating or redesigning enterprise AI, automation, security, or operations product pages that explain system boundaries, approvals, auditability, exceptions, and rollback—dark cinematic heroes, hairline grids, metric pauses, expandable solution rows, case-study evidence, security proof, and qualified demo/waitlist handoffs.

construct-ai-primary Skill

Maintain comprehensive procurement records, ensure audit trails for all transactions, archive procurement documentation per retention policy

eli-yu-first Bundle

Audit incoming material quality with statistical sampling plans and acceptance criteria

oimiragieo Skill

Use when creating or redesigning enterprise AI, automation, security, or operations product pages that explain system boundaries, approvals, auditability, exceptions, and rollback—dark cinematic heroes, hairline grids, metric pauses, expandable solution rows, case-study evidence, security proof, and qualified demo/waitlist handoffs.

construct-ai-primary Skill

Plan and execute QA audits, develop audit checklists, document findings, compile audit reports

duc01226 Bundle

[Documentation] Use to author, audit, amend, or test-spec a business Feature Spec. The single spec skill — modes draft|init|update|audit|amend create/maintain the tech-free 8-section Feature Spec; draft authors a provisional spec from an idea/requirement (no code yet, Evidence: TBD); tests generates Section 8 TC-{FEATURE}-{NNN} test specifications; sync reconciles §8 TCs ↔ executing test code. Per-mode procedure lives in references/{author,tests,sync}.md.

duc01226 Bundle

[Documentation] Use when (re)generating the DERIVED technical spec view over code + tests, or reporting canonical §8 TC/test-code drift. A GENERATOR — it projects code + tests into a regenerable per-component view and NEVER authors business content. Modes generate|audit|sync. Per-mode procedure lives in references/{author,sync}.md.

duc01226 Skill

[Project Management] Use when you need to enforce quality gates, verify compliance with standards, track quality metrics, and generate audit trails.

duc01226 Skill

[Workflow] Use when activating the Architecture Audit workflow to review the whole project's architecture, run an architecture health check, or check production readiness/scalability in one pass — read-only, produces one consolidated Architecture Health Report.

duc01226 Bundle

[Architecture] Use when grading project architecture and scalability quality for greenfield init or brownfield audit: build/CI scalability, distributed-monolith risk, module isolation, dependency discipline, loose coupling, horizontal scaling, DRY, abstraction, clean architecture, observability, and delivery.

rjmurillo Bundle

Write a timestamped, secret-redacted snapshot of decisions, progress and next actions to the checkpoints directory, then link it from the active session log. Use when you say `checkpoint this`, `save a recovery point`, or `snapshot where we are` before a risky change or at the end of a working block. Do NOT use to commit or push (it never does either), and do NOT use to write a retrospective (use retro).

rjmurillo Skill

Scan a local diff for vulnerabilities, secret exposure, and OWASP Top 10 anti-patterns, and return a PASS/WARN/CRITICAL_FAIL verdict. Use when you say `security review my changes`, `run the security gate`, or `check this diff for vulnerabilities`. Do NOT use to run all six axes (use pr-quality-all), and do NOT use for a full pre-merge review (use review).

asiaostrich Skill

引導自動化安全掃描、相依套件稽核與機密偵測。 Use when: 相依套件稽核、CVE 掃描、機密偵測、授權條款合規。 Not for: 人工的威脅建模與安全設計審查——請用 /security；一般的程式碼整潔度——請用 /sweep。 Keywords: scan, audit, CVE, dependency, secret, SBOM, vulnerability, 掃描, 稽核, 相依套件, 機密偵測.

thebeardedbearsas Skill

Seguridad Flutter. Use when reviewing security, implementing auth, or hardening code.

thebeardedbearsas Skill

Segurança Flutter. Use when reviewing security, implementing auth, or hardening code.

asiaostrich Skill

[UDS] 診斷 UDS 安裝的健康狀態，並向上游提交結構化回饋。 Use when: .standards/ 看起來壞掉或不同步、驗證 manifest 完整性、回報既有 UDS 標準用起來的摩擦點。 Not for: 稽核你自己應用程式的程式碼品質——請用 /metrics 或 /code-review；相依套件與機密掃描——請用 /scan。 Keywords: UDS audit, health check, manifest integrity, standards feedback, friction, 安裝健康, 標準稽核, 回饋, 完整性檢查.

asiaostrich Skill

引導安全審查與弱點評估，遵循 OWASP 標準。 Use when: 安全稽核、弱點檢查、安全程式碼審查、威脅建模。 Not for: 自動化的相依套件、CVE 與機密掃描——請用 /scan；處理正在發生的資安事件——請用 /incident。 Keywords: security, OWASP, vulnerability, authentication, authorization, 資訊安全, 弱點, 認證, 授權, 威脅建模.

rjmurillo Skill

Prove a change works across six gates covering functional, non-functional, security, DevOps, developer experience, and observability quality. Use when you say `prove this works`, `run the test gates`, or `validate this change`, and run it after build. Do NOT use to write the implementation or its first tests (use build), and do NOT use to run pre-flight and open a PR (use ship).

elsolal Skill

Audit de sécurité du code. Analyse OWASP Top 10, dépendances vulnérables, secrets exposés, et configurations. Utiliser après l'implémentation ou avant une release.

elsolal Skill

Audit de sécurité complet pour les projets Supabase. Lance un pentest automatisé qui vérifie RLS, buckets, auth, keys exposées, et génère un rapport avec remediation. Utiliser quand l'utilisateur dit "audit supabase", "sécurité supabase", "vérifier mon supabase", ou veut s'assurer que son backend Supabase est sécurisé.

elsolal Skill

Audit de performance du code et de l'application. Analyse Lighthouse, bundle size, Core Web Vitals, et optimisations. Utiliser après l'implémentation, avant une release, ou quand l'utilisateur dit "performance", "slow", "optimize", "bundle size".

intent-solutions-io Bundle

This skill enables Claude to encrypt and decrypt data using various algorithms provided by the encryption-tool plugin. It should be used when the user requests to "encrypt data", "decrypt a file", "generate an encrypted file", or needs to secure sensitive information. This skill supports various encryption methods and ensures data confidentiality. It is triggered by requests related to data encryption, decryption, or general data security needs.

intent-solutions-io Bundle

This skill allows Claude to check infrastructure compliance against industry standards such as SOC2, HIPAA, and PCI-DSS. It analyzes existing infrastructure configurations and reports on potential compliance violations. Use this skill when the user asks to assess compliance, identify security risks related to compliance, or generate reports on compliance status for SOC2, HIPAA, or PCI-DSS. Trigger terms include: "compliance check", "SOC2 compliance", "HIPAA compliance", "PCI-DSS compliance", "compliance report", "infrastructure compliance", "security audit", "assess compliance".

intent-solutions-io Skill

Automatically audits Claude Code plugins for security vulnerabilities, best practices, CLAUDE.md compliance, and quality standards when user mentions audit plugin, security review, or best practices check. Specific to claude-code-plugins repository standards.