Security

a5c-ai Bundle

Expert integration with Slither static analyzer for smart contract vulnerability detection, code quality analysis, and security reporting. Supports all Slither detectors and custom analysis configurations.

a5c-ai Bundle

Implementation and secure usage of cryptographic primitives including ECDSA, BLS, Schnorr signatures, key derivation, secret sharing, and constant-time operations. Provides guidance for secure cryptographic implementations in blockchain applications.

a5c-ai Bundle

Git diff forensics for surfacing and classifying code changes for trojan detection

a5c-ai Bundle

Ethereum and blockchain smart contract security analysis

a5c-ai Skill

5S workplace organization audit skill with scoring, photo documentation, and sustainability tracking

a5c-ai Bundle

Automated OWASP Top 10 vulnerability detection and assessment. Run OWASP ZAP automated scans, detect injection vulnerabilities, identify broken authentication patterns, check for sensitive data exposure, analyze security misconfigurations, and generate OWASP-compliant reports.

a5c-ai Skill

Internal quality audit skill with planning, execution, findings documentation, and corrective action tracking

a5c-ai Bundle

GDPR compliance assessment and automation for data mapping, consent management, DSAR handling, and privacy impact assessments

a5c-ai Bundle

SOC 2 Trust Services Criteria compliance automation for evidence collection, control mapping, and audit preparation

a5c-ai Bundle

HIPAA security and privacy compliance automation for ePHI protection, safeguards assessment, and audit preparation

a5c-ai Bundle

Analyze Electron IPC implementations for security vulnerabilities including contextIsolation, nodeIntegration, preload scripts, and channel validation

a5c-ai Bundle

Cryptographic key lifecycle management orchestration including generation, rotation, and destruction across key management systems

a5c-ai Bundle

Audit and recommend minimal sandbox entitlements for secure desktop applications

a5c-ai Bundle

PCI DSS compliance assessment and reporting for cardholder data protection, SAQ automation, and ASV scan orchestration

a5c-ai Bundle

Developer security training and assessment for secure coding practices and vulnerability prevention

a5c-ai Bundle

Validate compliance during migration with rule checking, audit trails, and security control validation

a5c-ai Bundle

Automated vendor security assessment through questionnaire generation, response parsing, and risk scoring

a5c-ai Bundle

Security vulnerability scanning for dependencies and code, with CVE database checking and risk assessment

a5c-ai Skill

Automated freight bill validation skill with discrepancy detection and payment processing automation

a5c-ai Bundle

Generate secure main process and preload script boilerplate with proper context isolation, IPC patterns, and security best practices for Electron applications

a5c-ai Skill

Automated technical architecture review, security assessment, scalability analysis

a5c-ai Skill

Process energy audit skill for consumption analysis, benchmarking, and efficiency improvement identification

a5c-ai Skill

Audit immutable mathematical artifacts through isolated evidence-focused review lenses

a5c-ai Skill

Verifies financial data against source documents, bank statements, contracts

a5c-ai Skill

HIPAA compliance validation skill for genomic data handling and audit

a5c-ai Skill

Statistical and non-statistical audit sampling skill with sample size determination and evaluation

a5c-ai Skill

Automated audit workpaper preparation skill with PBC list management

a5c-ai Skill

Review clinical documentation and assigned codes for accuracy, compliance, and optimization, identifying documentation improvement opportunities and coding errors

a5c-ai Skill

Develop comprehensive risk management plans for collections and cultural venues including disaster preparedness, security protocols, and insurance coordination

a5c-ai Skill

Evaluate organizational compliance with healthcare regulations including HIPAA, CMS Conditions of Participation, and accreditation standards through gap analysis and audit procedures

curiositech Skill

Runtime enforcement of file system boundaries and tool access restrictions. Blocks unauthorized operations and logs violations. Activate on 'enforce scope', 'access control', 'boundary enforcement', 'tool restrictions', 'runtime security'. NOT for validation (use dag-permission-validator) or isolation management (use dag-isolation-manager).

curiositech Skill

Generates comprehensive, context-aware code review checklists tailored to the specific codebase, programming language, and team standards. Analyzes PR diffs and suggests what reviewers should focus on.

curiositech Bundle

Managing third-party dependencies — version pinning, security auditing, license compliance, update workflows, lockfile management, supply chain security. Activate on "npm audit", "dependabot", "renovate", "pin versions", "dependency update", "supply chain", "license compliance", "lockfile", "security advisory", "typosquatting", "SBOM". NOT for internal monorepo package management (use monorepo-management) or publishing your own packages to npm/PyPI.

curiositech Skill

Validates permission inheritance between parent and child agents. Ensures child permissions are equal to or more restrictive than parent. Activate on 'validate permissions', 'permission check', 'inheritance validation', 'permission matrix', 'security validation'. NOT for runtime enforcement (use dag-scope-enforcer) or isolation management (use dag-isolation-manager).

curiositech Skill

OpenTelemetry, distributed tracing, Grafana, and Datadog for full-stack observability. Activate on: observability, tracing, OpenTelemetry, Grafana, Datadog, metrics, logging, APM, SLO, alerting. NOT for: application error handling (use relevant language skill), security monitoring (use relevant security skill).

jeremylongshore Bundle

"Diagnostic-only test suite auditor. Classifies repo type, maps against\ \ 7-layer testing taxonomy (git hooks \u2192 static \u2192 unit \u2192 integration\ \ \u2192 system \u2192 E2E \u2192 acceptance), runs deterministic quality gates\ \ (coverage, mutation, CRAP, architecture, escape-scan), builds RTM / personas /\ \ journeys traceability, produces TEST_AUDIT.md, updates tests/TESTING.md, and mandatorily\ \ hands off to implement-tests when gaps are found. Use when auditing test quality,\ \ finding test gaps, or running the full 7-layer sweep. Trigger with \"audit tests\"\ , \"find gaps\", \"test audit\", \"check test quality\", \"full sweep\", \"7-layer\ \ audit\", \"rtm check\"."