Security

majiayu000 Bundle

コード変更の影響範囲分析スキル。変更が引き起こし得る影響を影響面（code/interface/data/external/config/runtime/security/observability）ごとに整理し、「どこをレビューし、何をテストし、何を観測すべきか」を根拠つきで提示する。 トリガー条件: - 「影響範囲を分析して」「この変更の影響は？」「どこまで波及する？」 - PRレビュー依頼時、リファクタ/仕様変更時 - 障害対応で「原因箇所の周辺影響」を確認したい時 注意: 変更の是非の最終判断は行わない。実行時にしか分からない挙動は推定と不確実性を提示する。

majiayu000 Bundle

Comprehensive inclusion analysis of code, examining language, internationalization, assumptions, and who might be excluded. Thorough review for releases or major features.

majiayu000 Bundle

Audit SENTINEL game data integrity. Validates regions, jobs, vehicles, and favors against schema enums.

majiayu000 Bundle

Android and iOS application security testing

majiayu000 Bundle

NIST 800-53r5 control implementation, tagging, evidence collection, and compliance automation for security frameworks

majiayu000 Bundle

Scan codebase for Pragmatic Programmer anti-patterns. Reports findings. Triggers on "pragmatic audit" or "/pragmatic-audit".

majiayu000 Bundle

Internal quality audit skill with planning, execution, findings documentation, and corrective action tracking

majiayu000 Bundle

Orchestrates quality checks at key lifecycle points: before edits, after edits, and before completion. Coordinates sub-skills (test-augmentation, doc-sync, coding-standards, security-review) to ensure consistent code quality. Use when making significant code changes or before completing a task.

majiayu000 Bundle

Production-ready Go code review (QA + security + maintainability) for this project only.

majiayu000 Bundle

Audit notes for quality issues. Use when asked to "review notes", "check content quality", "audit my knowledge base", or "find broken links".

majiayu000 Bundle

Software Bill of Materials management including generation, formats, vulnerability tracking, and supply chain security

majiayu000 Bundle

Senior Security Engineer with 12+ years application security experience. Use when implementing authentication/authorization, configuring JWT/OAuth2, conducting security reviews, implementing rate limiting, ensuring GDPR compliance, or performing security scanning.

majiayu000 Bundle

Essential security checklist and patterns for web applications. Use when reviewing code for security issues, implementing authentication, or hardening an application. Covers OWASP top 10, input validation, and secure coding practices.

majiayu000 Bundle

Review Convex security audit patterns for authentication and authorization. Use for auditing query/mutation auth, row-level security, and validators. Use proactively when reviewing Convex apps (convex/ directory present). Examples: - user: "Audit these Convex mutations" → check for missing ctx.auth and input validators - user: "Check for IDOR in Convex queries" → verify ownership checks on document access - user: "Review Convex HTTP actions" → check for signature verification on webhooks - user: "Secure these Convex queries" → implement custom functions for enforced auth - user: "Check for data leaks in subscriptions" → verify filtered result sets

majiayu000 Bundle

セキュリティイベント・フック（Security Events & Hooks）機能の開発・修正を行う際に使用。イベント通知、Slack/Email/Webhook/SSF連携実装時に役立つ。

majiayu000 Bundle

MANDATORY for security-sensitive code changes - OWASP-based security review with dedicated checklist, required before PR for auth, input handling, API, database, or credential code

majiayu000 Bundle

Activate when conducting security analysis using STRIDE threat modeling, vulnerability assessment, and security architecture evaluation

majiayu000 Bundle

Analyze code with Semgrep for security vulnerabilities and code quality issues, then create a prioritized fix plan

majiayu000 Bundle

Audit Solana programs (Anchor or native Rust) for security vulnerabilities. Use when reviewing smart contract security, finding exploits, analyzing attack vectors, performing security assessments, or when explicitly asked to audit, review security, check for bugs, or find vulnerabilities in Solana programs.

majiayu000 Bundle

Generate STIX 2.1 objects and bundles for threat intelligence sharing. Create indicators, malware descriptions, attack patterns, threat actors, and complete bundles from various input formats including IOC lists, MITRE ATT&CK IDs, and threat reports.

majiayu000 Bundle

Validate STIX 2.1 JSON files and bundles against the STIX specification. Use when validating threat intelligence data, checking STIX bundle integrity before ingestion, verifying indicator/malware/attack-pattern objects have required fields, or bulk-validating directories of STIX files. Provides detailed error reports showing which objects failed and why.

majiayu000 Bundle

This skill should be used when auditing Storybook stories for display issues (cutoff modals, popups), store dependency errors (PouchDB/database conflicts), template validation problems, and rendering issues. Automatically scans story files, detects issues, asks clarifying questions, and updates itself when solutions are approved by the user.

majiayu000 Bundle

Generate a comprehensive Markdown security audit report with executive summary, findings, and remediation guidance.

majiayu000 Bundle

Structured security analysis using OWASP Four-Question Framework and STRIDE methodology. Generates threat matrices with risk ratings, mitigations, and prioritization. Use for attack surface analysis, security architecture review, or when asking what can go wrong.

majiayu000 Bundle

Manage Treido's Supabase database including schema design, migrations, Row Level Security (RLS) policies, storage buckets, and auth configuration. Use when working on database tables, columns, indexes, RLS policies, storage rules, or auth providers. Triggers include schema changes, security policy updates, migration creation, or Supabase-related debugging.

majiayu000 Bundle

Security practices for Triatu. Use when adding data access, Server Actions, logging, or Supabase policies, and when reviewing security risks.

majiayu000 Bundle

Supabase data access and security rules for Triatu. Use when editing DB-related code, policies, or adding new tables/queries.

majiayu000 Bundle

Check version compatibility, breaking changes, and security vulnerabilities for dependencies

majiayu000 Bundle

Extract and manage writing rules (style, structure, persona, publisher, custom) (project)

majiayu000 Bundle

Set up pre-commit hooks and GitHub Actions workflows for testing, linting, security scanning, releases, and deployments. Supports Python, Node.js, Go, Rust, and multi-language projects.

majiayu000 Bundle

Manage Swift Package Manager dependencies with security checks and update verification.

majiayu000 Bundle

Startup runbook for MERN projects. Establishes stack decisions, scaffolds the project, configures GitHub security, and confirms governing constraints.

majiayu000 Bundle

Solidity smart contract development with Foundry. Covers writing, testing, security, deployment, and upgrades. Triggers on .sol files, contract, pragma solidity, forge.

majiayu000 Bundle

Full cluster state audit. Use when asked for cluster status, health check, or infrastructure audit. Produces comprehensive report of all nodes, pods, services, PVCs, GPUs, and issues.

majiayu000 Bundle

Production deployment patterns for the World of Darkness Django application. Use when deploying to staging/production, configuring security settings, setting up Redis cache, planning database migrations, or preparing rollback procedures. Triggers on deployment tasks, production configuration, security hardening, or environment-specific settings.

majiayu000 Bundle

Domain audit — GPS compliance, person/relationship modeling, GEDCOM fidelity