Security

majiayu000 Bundle

Automated documentation auditing - ensures CLAUDE.md coverage, updates stale docs, recommends structural improvements

majiayu000 Bundle

Enforces confirmation workflow for EXTERNAL system writes (Jira, Confluence, BitBucket, Slack) ONLY. NEVER activates for Linear operations (Linear is internal tracking). Auto-activates when detecting potential writes to external PM systems (status updates, page creation, PR posts, notifications). Blocks execution and displays exact content that will be written. Requires explicit "yes" confirmation (rejects "ok", "sure", ambiguous responses). All Linear operations execute automatically without confirmation. Works alongside ccpm-code-review to ensure quality before external broadcasts. Provides audit trail of all confirmed operations. Allows batch operations with granular per-item confirmation when needed.

majiayu000 Bundle

Use when user-facing features change. Ensures features documentation is updated. Pauses work if documentation has drifted, triggering documentation-audit skill.

majiayu000 Bundle

Expert in data forensics, anomaly detection, audit trail analysis, fraud detection, and breach investigation

majiayu000 Bundle

Create and execute incident response procedures for security breaches, data leaks, and cyber attacks. Use when handling security incidents, creating response playbooks, or conducting forensic analysis.

majiayu000 Bundle

Use this skill when new users want to get started with LimaCharlie, set up their first organization, or begin collecting security data. Guides beginners through org creation and helps identify what to onboard, then hands off to specialized skills.

majiayu000 Bundle

Enterprise artifact management with governance, lifecycle, SBOM, and supply chain security for November 2025 standards

majiayu000 Bundle

Enterprise comprehensive code review automation with AI-powered quality analysis, TRUST 5 enforcement, multi-language support, Context7 integration, security scanning, performance analysis, test coverage validation, and automated review feedback generation

majiayu000 Bundle

Enterprise Skill for advanced development

majiayu000 Bundle

Optimizes Nginx configurations for performance, security, caching, and load balancing with modern best practices. Use when users request "Nginx setup", "reverse proxy", "load balancer", "web server config", or "Nginx optimization".

majiayu000 Bundle

Analyze Nixtla usage and optimize cost-effective forecast routing strategies. Use when auditing API usage or reducing costs. Trigger with 'optimize nixtla costs' or 'audit API usage'.

majiayu000 Bundle

Audit existing OpenCode skills to identify modularization opportunities and eliminate redundancy

majiayu000 Bundle

Analyze Prisma queries for performance issues and suggest optimizations. Use when asked to optimize, analyze, audit, or review Prisma queries, or when investigating slow database operations in a Prisma-based project.

majiayu000 Bundle

Expert in audit ground truth extraction, Critical Audit Matters (CAMs), ICFR validation, PCAOB independence compliance, and SEC filing analysis for PWC audit staff

majiayu000 Bundle

Security auditing, vulnerability scanning, and compliance validation for OWASP, SOC2, GDPR, and other standards.

majiayu000 Bundle

Enforces minimum quality thresholds in CI including code coverage, linting, type checking, and security scanning. Provides required checks, PR rules, and automated enforcement. Use for "quality gates", "CI checks", "code quality", or "PR requirements".

majiayu000 Bundle

Systematic audit of safety patterns to identify gaps, regressions, and improvement opportunities

majiayu000 Bundle

Implement comprehensive security audit logging for compliance, forensics, and SIEM integration. Use when building audit trails, compliance logging, or security monitoring systems.

majiayu000 Bundle

Create security policies, guidelines, compliance documentation, and security best practices. Use when documenting security policies, compliance requirements, or security guidelines.

majiayu000 Bundle

Inline orchestration workflow for security vulnerability detection and remediation. Provides step-by-step phases for security-scanner detection, priority-based fixing with vulnerability-fixer, and verification cycles.

majiayu000 Bundle

Plan security testing strategies including OWASP testing, penetration test scoping, SAST/DAST integration, and threat-based test case design.

majiayu000 Bundle

Configure Sentry security settings and data protection. Use when setting up data scrubbing, managing sensitive data, or configuring security policies. Trigger with phrases like "sentry security", "sentry PII", "sentry data scrubbing", "secure sentry".

majiayu000 Bundle

Security & Authentication Specialist - Expert in JWT, cookie-based auth, MFA, and generic security patterns

majiayu000 Bundle

Identify which standards are covered vs. missing, analyze depth of coverage for each standard, prioritize uncovered standards, and recommend content to fill gaps. Use when auditing curriculum coverage. Activates on "gap analysis", "standards gaps", or "coverage audit".

majiayu000 Bundle

Router for documentation tasks - routes to ADRs, APIs, runbooks, security docs, or governance docs

majiayu000 Bundle

Specialized CVE and vulnerability management for morphir-dotnet. Use when user asks to scan for vulnerabilities, fix CVEs, suppress false positives, review security reports, or manage dependency-check. Triggers include "CVE", "vulnerability", "security scan", "dependency-check", "suppress", "false positive", "CVSS", "security fix".

majiayu000 Bundle

Automated vulnerability detection using OWASP tools, CVE databases, and security scanners. Use when performing security audits, compliance checks, or continuous security monitoring.

majiayu000 Bundle

Bypass attempt. Use for security testing.

majiayu000 Bundle

ElectronデスクトップアプリケーションのUI実装パターンと設計知識。 BrowserWindow管理、ネイティブUI要素、フレームレスウィンドウを提供。 Anchors: • Electron API / 適用: BrowserWindow・Menu・Tray / 目的: ネイティブUI実装 • Don't Make Me Think / 適用: ウィンドウレイアウト / 目的: ユーザビリティ向上 • Electron Security / 適用: preload・contextIsolation / 目的: セキュアなUI実装 Trigger: Use when configuring BrowserWindow, implementing custom titlebars, designing native menus, developing system tray apps, or building frameless windows. BrowserWindow, Menu, Tray, frameless window, custom titlebar, native UI

majiayu000 Bundle

This skill should be used when the user asks to "use Metasploit for penetration testing", "exploit vulnerabilities with msfconsole", "create payloads with msfvenom", "perform post-exploitation", "use auxiliary modules for scanning", or "develop custom exploits". It provides comprehensive guidance for leveraging the Metasploit Framework in security assessments.

majiayu000 Bundle

Use when tech-lead is about to record an architecture decision (new tech stack member, deviation from baseline, deployment / observability / auth scheme choice). Provides ADR structure, version-audit appendix format, and "what NOT to ADR" guidance. Replaces ad-hoc copy from ADR-000.

majiayu000 Bundle

Fix a single audit issue in a git worktree. Creates a feature branch, follows fix-bug procedure, and creates a PR. Designed for parallel execution by spawned agents.

majiayu000 Bundle

Add a signed GitLawb mirror next to the existing GitHub remote. Use when the user wants to publish, backup, prove authorship, put work on GitLawb, or attach a verifiable certificate to a commit or pull request. Do NOT use for replacing GitHub, deleting origin, or pushing private/secret files.

majiayu000 Bundle

Expert knowledge for Security Layer modeling in Documentation Robotics

majiayu000 Bundle

Drafts jurisdictionally compliant U.S. residential lease agreements with required disclosures, security deposit compliance, and Fair Housing Act conformance. Conducts state-specific landlord-tenant law research and produces execution-ready leases. Use when drafting residential leases, rental agreements, landlord-tenant contracts, or tenancy agreements.

majiayu000 Bundle

Postein- und Postausgangsbuch fuehren. Posteingang erfasst Empfangstag (relevant fuer Fristbeginn nach BRAO Berufsregeln und § 188 ZPO § 122 AO § 37 SGB X) Absender Inhalt Akte Aktion (zur Akte / Antwort durch / Frist ans Fristenbuch). Postausgang erfasst Versandtag Empfaenger Inhalt Versandweg (Post beA EGVP E-Mail) Versandnummer Quittung. Beide Buecher mit Audit-Trail und Verbindung zur jeweiligen Mandatsakte.