Security

majiayu000 Bundle

Use when the user wants to check dependencies, find outdated packages, or audit for vulnerabilities.

majiayu000 Bundle

Hunt CORS Misconfiguration — wildcard with credentials, null origin, regex with subdomain trust, pre-flight bypass, postMessage origin checks. High when it leads to credentialed data theft. Use when testing API endpoints, SPAs, or any app with Access-Control headers.

majiayu000 Bundle

Hunt LDAP Injection and XPath Injection — authentication bypass, data exfiltration from Active Directory, directory traversal, AD user/group enumeration. Use when target uses LDAP/AD authentication, corporate SSO with directory backend, or XML-based data stores with XPath queries.

majiayu000 Bundle

Hunt SAML / SSO attacks. Patterns: XML Signature Wrapping (XSW1-XSW8) — modify Assertion while keeping Signature valid by relocating signed element, comment injection in NameID (admin@target.com<!--evil-->@attacker.com → some parsers see admin@target.com), signature stripping (remove Signature element entirely, server should reject but doesn't), key confusion (signed by attacker's IdP, accepted by SP), audience-restriction not validated, replay attack (same Assertion accepted twice within validity window). Tools: SAML Raider Burp extension, samlmagic, manual XML manipulation. Detection: any /saml endpoint, /Shibboleth.sso, /sso/saml/, Microsoft ADFS endpoints. Validate: account takeover via altered NameID, admin role injection via altered AttributeStatement. Real paid examples on Auth0, Okta, Microsoft, custom SAML implementations. Use when hunting SSO flows, when SAML AssertionConsumerService is reachable, when chaining IdP-trust to SP-impersonation.

majiayu000 Bundle

MANDATORY - Check dependency licenses before importing. Write original code, don't copy.

majiayu000 Bundle

Run OWASP ZAP dynamic application security testing

majiayu000 Bundle

Project health audit and health check — architecture, performance, tests, dependencies, code quality. Use when assessing overall project health, before releases, or after refactors.

majiayu000 Bundle

Prevent destructive operations using Claude Code hooks. Three modes — cautious (warn on dangerous commands), lockdown (restrict edits to one directory), and clear (remove restrictions). Uses PreToolUse matchers for Bash, Edit, and Write.

majiayu000 Bundle

Check for sensitive data in repository. Use when user asks to "check for sensitive data", "/safe-repo", or wants to verify no company/credential data is in the repository.

majiayu000 Bundle

Scans a Power Pages site project for security issues in source code and dependencies. Runs static analysis and dependency scanning, then surfaces findings by category (code patterns, vulnerable packages, secrets, license issues). Use when the user wants to review code for security problems, check for vulnerable packages, find hard-coded secrets, run a code scan, or asks "is my code safe?", "check my dependencies", "find security issues in my source" — even if they say "audit my code" without mentioning specific tools.

majiayu000 Bundle

Runs a security scan on a deployed Power Pages site, fetches the latest scan report, and produces a plain-language summary. Scans the live site's public surface for vulnerabilities and surfaces issues by severity. Use when the user wants to scan, check, test, audit, or assess a published site, find vulnerabilities on production, view the latest scan report, see previous scan results, run a security audit, or asks "how safe is my live site?", "is my site vulnerable?", "audit my production site" — even if they say "find issues" or "check for problems" without mentioning "scan" or "security".

majiayu000 Bundle

Run security review, then create a PR and watch CI checks

majiayu000 Bundle

OAuth 2.0 integration and configuration for TES (Takeback Event System). Use this skill when: (1) Configuring OAuth 2.0 for a new client application (2) Implementing authorization code flow with PKCE (3) Setting up client credentials authentication (4) Managing OAuth tokens and refresh flows (5) Configuring role-based permissions for API access (6) Integrating external auth providers (WorkOS) with TES (7) Debugging authentication issues in TES (8) Implementing password reset flows (9) Setting up multi-organization user authentication

majiayu000 Bundle

NIST vulnerability database lookup and CVE analysis

majiayu000 Bundle

The single config quality skill. Two modes: (1) Default — review/wire pending self-improvement proposals. (2) Audit — analyzes skills, rules, CLAUDE.md, project refs, hooks, and agents against the actual codebase to find inaccuracies, trigger overlaps, stale references, and weak rules, then fixes them. Trigger on 'self-evolve', 'evolve', 'config health check', 'audit config', 'check claude setup', 'apply this rule', 'reorganize rules', 'ok' (when proposals are pending). NOT for improving individual skills (use skill-creator), diagnosing code bugs (use diagnose), or fixing broken code (use fix).

majiayu000 Bundle

Scan a repository to bootstrap new skills or audit and update existing ones

majiayu000 Bundle

Production smoke test — navigate key pages, check console errors, network failures, and report findings

majiayu000 Bundle

코드/콘솔/UX/E2E/보안 통합 검수 - 4개 에이전트 협업 (150점 만점)

majiayu000 Bundle

Use when testing code, skills, commands, or configs through mental execution — trace logic line-by-line with concrete values to find bugs, logic errors, edge cases, contract violations, and AI hallucinations. Use when user says "paper test", "trace this", "find bugs", "check for edge cases", "audit this code", "verify AI code", "test this skill", "validate this implementation", "review this logic", "check dependencies", "check this config". MUST verify external calls — never assume methods exist. Use proactively before deploying changes or after AI generates code.

majiayu000 Bundle

Audit or critique a plan for feasibility, risks, missing steps, and test coverage. Use when the user asks to review, audit, or critique a plan or process.

majiayu000 Bundle

Unit testing, performance optimization, security implementation, Play Store deployment.

majiayu000 Bundle

Zero-assumption test suite audit. Measures real confidence, not coverage percentage. Finds tests that test nothing, tests that test mocks, tests that give false confidence, and the critical paths with no tests at all. Coverage is a number. This skill tells you if that number means anything.

majiayu000 Bundle

Comprehensive application verification specialist. Runs static analysis (typecheck, lint, prettier), build verification, code quality review, and security checks. Produces structured pass/fail report with recommendations.

majiayu000 Bundle

Analyze historical bug patterns by mining Claude Code project logs for /autoskillit:investigate skill invocations since a specified date. Identifies recurring root causes, architectural gaps, and proactive detection strategies. Use when user says "audit bugs", "bug patterns", "analyze investigations", or "bug audit".

majiayu000 Bundle

Audit all Farmwork systems and update FARMHOUSE.md metrics. Use when user says "open the farm", "audit systems", "check farm status", "update farmhouse", "project health", or asks about the current state of the project.

majiayu000 Bundle

Maintainer-only. Use when triaging inbound GitHub issues and pull requests on skyf0xx/hedgehog — "triage the issues", "check the PRs", "review inbound", "what's in the queue". Reads each item read-only, judges it for security and for whether it is real, then fixes and closes or comments and closes. Not part of the Hedgehog discipline a consuming project copies; this only applies to the Hedgehog repo itself.

majiayu000 Bundle

Multi-language code quality standards for TypeScript, Python, Go, and Rust. Enforces type safety, security, performance, and maintainability with progressive enforcement. Use when writing, reviewing, or refactoring code across any of these languages.

majiayu000 Bundle

Identify and clean up stale git branches locally and on remotes with safe, reversible steps. Use when asked to prune, list, or delete merged/old branches or audit branch hygiene.

majiayu000 Bundle

Multi-provider payment audit. Runs check-stripe, check-bitcoin, check-lightning. Outputs consolidated findings. Use log-*-issues to create GitHub issues. Invoke for: comprehensive payment review, multi-provider audit.

majiayu000 Bundle

Auditoria e análise de bancos de dados para identificar anomalias, inconsistências, registros órfãos, duplicatas, índices faltantes, e problemas de integridade referencial. Usar para diagnosticar problemas de dados, preparar migrações, gerar relatórios de qualidade de dados, identificar foreign keys quebradas, e otimizar estrutura de tabelas.

majiayu000 Bundle

Use this skill for creating, reviewing, optimizing, or testing Drizzle ORM database code including schemas, migrations, relations, queries, transactions, and Vitest tests with PgLite. Includes designing table schemas, reviewing code for security and performance, writing migrations, and writing isolated database tests.

majiayu000 Bundle

Implement event sourcing and CQRS patterns using event stores, aggregates, and projections. Use when building audit trails, temporal queries, or systems requiring full history.

majiayu000 Bundle

Analyze mock data and examples for cultural assumptions, understanding what they communicate about who the product is for. Use when reviewing test data, documentation, or seed data.

majiayu000 Bundle

Orchestrate spec-to-PR workflow with session tracking, worktree isolation, and audit trail

majiayu000 Bundle

macOSアプリのセキュリティレビュー。Notarization、Hardened Runtime、Sandbox、コード署名をチェック。Use when: macOS、公証、Notarization、Sandbox、署名 を依頼された時。

majiayu000 Bundle

Systematic malware triage and initial assessment workflow for professional malware analysis. Use when the user needs to perform initial malware assessment, classify samples, determine analysis priority, identify quick indicators, or decide on next analysis steps. Also use for rapid malware identification and threat classification.