Security

majiayu000 Bundle

Validate SOPS encryption on secret files before committing. Use when staging secrets, committing encrypted files, or checking if secrets are properly encrypted. Prevents committing unencrypted secrets.

majiayu000 Bundle

Implement secure webhook handling with signature verification, replay protection, and idempotency. Use when receiving webhooks from third-party services like Stripe, GitHub, Twilio, or building your own webhook system.

majiayu000 Bundle

Use at the start of WordPress tasks to classify the repo type (plugin, theme, block theme, WP core, full site) and route to the correct workflow/skill (blocks, theme.json, REST API, WP-CLI, performance, security, testing).

majiayu000 Bundle

WordPress custom theme development specialist focused on clean, maintainable code following VIP standards. Includes modular theme structure, dart-sass via Homebrew, proper script/style enqueueing, template parts organization, text domain management, and comprehensive security practices (escaping, sanitization, file paths).

majiayu000 Bundle

承認ゲートの設計・評価・運用を体系化し、変更管理とリリース判断を安全に進めるスキル。 リスク評価に基づくゲート条件、手動承認と自動検証の分離、監査可能な記録設計を支援します。 Anchors: • The Pragmatic Programmer / 適用: 品質ゲートの段階化 / 目的: 変更の安全性を段階的に高める • リスク評価フレームワーク / 適用: 影響度と発生確率の分類 / 目的: ゲート条件の科学的根拠を整える • ITIL Change Enablement / 適用: 変更承認フロー / 目的: 監査可能な意思決定を実現する Trigger: Use when designing approval gates, change control checkpoints, release readiness criteria, or governance workflows that require risk-based approvals and audit trails.

majiayu000 Bundle

Mandatory best practices and gold standards for Kailash SDK development including absolute imports, parameter passing, error handling, testing policies (NO MOCKING in Tiers 2-3), workflow design, custom node development, security, documentation, and test creation. Use when asking about 'best practices', 'standards', 'gold standards', 'mandatory rules', 'required patterns', 'absolute imports', 'NO MOCKING', 'testing policy', 'error handling standards', 'security best practices', 'documentation standards', or 'workflow design standards'.

majiayu000 Bundle

Shared Bun audit/remediation router. Use when auditing a repo for Bun-first correctness, explaining Bun audit findings, listing Bun audit rules, planning safe Bun fixes, applying low-risk remediations, or validating Bun-related changes. This skill delegates to the shared engine in bun-dev/scripts.

majiayu000 Bundle

Check and update dependencies safely with security audits and test verification.

majiayu000 Bundle

Check and update dependencies safely with security audits and test verification.

majiayu000 Bundle

Review AI-authored code for its characteristic failure modes — plausible-but-wrong logic, hallucinated APIs, over-engineering, dead scaffolding, and silent security shortcuts. Use when reviewing an AI-generated or heavily AI-assisted PR, when AI-written code keeps shipping subtle bugs, or when setting review standards for a team using coding agents. Produces a focused review with AI-specific findings, verification steps per risk class, and a team checklist for AI-authored changes. For general PR review use code-review-checklist — this skill covers what that one assumes a human wouldn't do.

majiayu000 Bundle

Monitor system health, detect errors, implement recovery procedures, restart failed processes, maintain audit logs. Use for system health checks, error recovery, process monitoring, or when user mentions "system status", "errors", "logs".

majiayu000 Bundle

Systematically verify claims in code comments, documentation, commit messages, and naming conventions. Extracts assertions, validates with evidence (code analysis, web search, documentation, execution), generates report with bibliography. Use when: reviewing code changes, auditing documentation accuracy, validating technical claims before merge, or user says "verify claims", "factcheck", "audit documentation", "validate comments", "are these claims accurate".

majiayu000 Bundle

Generation et maintenance de documentation technique a partir du code, avec modes full, update et audit

majiayu000 Bundle

Documentation management skill for audit, creation, and maintenance. Enforces documentation standards, checks for staleness and broken references, auto-fixes issues, and ensures docs are created in correct locations. Use when user says "check docs", "audit docs", "fix docs", "create doc", "archive docs", or when scattered .md files are detected.

majiayu000 Bundle

Create Sectors (Digital Web locations) for Mage: The Ascension 20th Anniversary Edition. Designs virtual locations with appropriate class, access levels, security, IC hazards, and Digital Web-specific features. Uses mage-rules-reference for Reality Zone/Practice lookups. Triggers: create a sector, design a digital web location, M20 sector, virtual adept base, digital realm.

majiayu000 Bundle

Identifies, assesses, and tracks organizational risk — building and maintaining a risk register, scoring exposure, assigning owners and treatments, and preparing for audit. Use this to stand up a risk program, assess the risk in a decision or initiative, prepare for a certification or audit, decide whether a risk should be accepted, mitigated, transferred, or avoided, or report risk posture to leadership.

majiayu000 Bundle

Hunt JWT cryptographic failures — alg:none signature-stripping and RS256→HS256 key-confusion that let an attacker forge a token for any identity (e.g. an admin) without knowing a secret. Use when the app authenticates with a JSON Web Token (an `eyJ...` Bearer token in the Authorization header, a cookie, or a login response). This skill OWNS JWT signature/crypto forgery (alg:none, key confusion, kid/jku header injection); hunt-ato covers JWT as one ATO path, hunt-auth-bypass covers SSO/SAML token trust, hunt-api-misconfig covers non-crypto JWT handling. Critical when a forged token grants access to another user's data or an admin-only endpoint.

majiayu000 Bundle

Recommend safe Bash permissions for Elixir mix commands in settings.json. Use when permission prompts slow workflow, "fix permissions", "reduce prompts", "auto-allow mix".

majiayu000 Bundle

Use when a skill is brittle, drifting, repeatedly failing, or needs a Reliable Skill Contract. Trigger for phrases like skill lifeguard, reliable skill, self-maintaining skill, negative examples, verification checkpoints, drift signals, replay hooks, or failure log to skill patch. Audits or patches skills so high-value workflows include explicit forbidden behaviors, checkpoints, machine-checkable done conditions, replay or smoke hooks, and drift detection.

majiayu000 Bundle

Audit whether the theories/methodologies a project claims to implement are faithfully operationalized — or name-dropped, partially built, distorted, or over-claimed. Source-grounds the load-bearing theories; tags the rest provisional. Run periodically alongside /framework-health.

majiayu000 Bundle

Use this skill when the user asks about "Elnora account", "API keys", "audit log", "feature flags", "health check", "terms of service", "platform status", "feedback", "invitation", or any Elnora platform administration task.

majiayu000 Bundle

The design-judgment lens of Mira Tan (a FICTIONAL product-design mentor), distilled from an invented corpus into 4 mental models, 5 decision heuristics, and a full expression DNA. Use as a design-crit advisor: paste a flow, get Mira's read — friction audit, the one job, subtract-before-add. Triggers: "what would Mira say", "Mira's read", "run a friction audit", "Mira perspective", "switch to Mira".

majiayu000 Bundle

Comprehensive content quality and maintenance assessment. Evaluates documentation quality, relevance, maintenance needs, and provides actionable recommendations.

majiayu000 Bundle

Evaluates ambient context artifacts (CLAUDE.md, memory, local skills, settings hooks) for compatibility with swarm governance. Returns a classified report so users can address interference before launching a team.

majiayu000 Bundle

Audits the Claude Code configuration of a project against the dotforge template. Generates a report with score and gaps.

majiayu000 Bundle

Investigate a bug pattern audit report and design architectural guards (tests, contracts, structural changes) that provide immunity to each identified pattern. Use when user says "design guards", "design defenses", or wants architectural solutions for bug patterns.

majiayu000 Bundle

Run a codebase hygiene audit. Scans for misplaced files, dead code, temp files, security issues, structural problems, dependency slop, and git slop. Outputs a prioritized report with P0-P4 findings. Use periodically or before releases. Triggers on: 'audit the codebase', 'find slop', 'hygiene check', 'clean up', or /dk-slop-audit.

majiayu000 Bundle

Detect documentation drift, stale references, and cross-document inconsistencies in any project. Scans for code-doc drift (API/function changes not reflected in docs), cross-doc drift (conflicting information across documents), and stale references (broken links, deleted files, outdated versions). Use when checking "doc freshness", "stale docs", "documentation drift", "broken links", "outdated documentation", "doc accuracy", "docs out of date", "doc audit", "doc health", or "verify documentation".

majiayu000 Bundle

Audit spending to find leaks — recurring subscriptions, creep, and cuttable costs — ranked by impact. Use when asked to cut expenses, review subscriptions, find where money is going, or free up cash. Produces a categorized spend breakdown, a ranked list of cuts with dollar amounts, and the annualized savings. Educational, not regulated financial advice.

majiayu000 Bundle

Assist QC Specialists with quality gates, compliance verification, audit trail generation, and quality metrics tracking. Use when running quality gates, verifying compliance standards, creating review checklists, or auditing artifacts. Triggers on keywords like "quality gate", "compliance", "audit", "quality metrics", "QC review", "checklist", "standards verification".

majiayu000 Bundle

Use when proposing or implementing any UI, rendering, shader, UX, motion, or DSP change in TRENCH — forces doctrine audit before code, kills generic output, requires structured review with dominant-read analysis and acceptance test

majiayu000 Bundle

Audit CLAUDE.md and .claude/rules/ for stale references, outdated architecture claims, and rules now redundant with static analysis checks

majiayu000 Bundle

Audit SKILL.md files against the AgentOps template and readiness checks. Use for quality reviews or template compliance.

majiayu000 Bundle

White-box security audit. Blue-teamer evaluates defensive posture, then red-teamers attack informed by defensive gaps. Iterates when exploit chains are discovered. Heavy and thorough by design.

majiayu000 Bundle

Build and maintain Stripe → Clerk authentication flows for pricing CTA buttons. Use when implementing new subscription tiers, fixing auto-enrollment issues, or adding payment-to-access flows.

majiayu000 Bundle

网页登录态管理。定期检查各平台 Playwright 登录状态，过期自动告警。支持动态添加/删除平台。