Security

majiayu000 Bundle

Upgrades Kirby and maintains dependencies safely using composer audit, plugin compatibility checks, and official docs. Use when updating Kirby versions or making maintenance changes that affect runtime.

majiayu000 Bundle

Test Isolation + Anti-Patterns audit worker (L3). Checks isolation (APIs/DB/FS/Time/Random/Network), determinism (flaky, order-dependent), and 6 anti-patterns.

majiayu000 Bundle

L3 Worker. Audits architectural layer boundaries, detects violations (code in wrong layers), checks pattern coverage. Invoked by ln-640 once per audit.

majiayu000 Bundle

Use this skill when facing complex problems requiring rigorous reasoning, systematic decomposition, or factual verification. Activation triggers: * "be thorough", "analyze carefully", "make sure this is right" * Complex multi-part questions * Architecture or security decisions * "verify", "double-check", "are you sure" * High-stakes technical decisions * Debugging complex issues

majiayu000 Bundle

Comprehensive security patterns for authentication, authorization, input validation, and common vulnerability prevention

majiayu000 Bundle

Respond to security vulnerability reports. Use when a researcher reports a security issue or asks about bug bounty policy.

majiayu000 Bundle

Identify storage buckets that are publicly accessible and may contain sensitive data.

majiayu000 Bundle

This skill should be used when the user requests to generate, create, or add Row-Level Security (RLS) policies for Supabase databases in multi-tenant or role-based applications. It generates comprehensive RLS policies using auth.uid(), auth.jwt() claims, and role-based access patterns. Trigger terms include RLS, row level security, supabase security, generate policies, auth policies, multi-tenant security, role-based access, database security policies, supabase permissions, tenant isolation.

majiayu000 Bundle

Validate PCI-DSS compliance for payment card data security. Use when auditing payment systems. Trigger with 'validate PCI-DSS', 'check payment security', or 'audit card data'.

majiayu000 Bundle

Electronデスクトップアプリケーションのセキュリティ強化専門知識。 XSS、コードインジェクション、プロセス隔離違反などの脅威から保護。 Anchors: • Electron Security / 適用: プロセス隔離・IPC保護 / 目的: 安全なデスクトップアプリ • OWASP / 適用: 脆弱性評価・脅威モデリング / 目的: 継続的なセキュリティ監査 • Content Security Policy / 適用: CSP実装 / 目的: XSS防御とリソース制限 Trigger: Use when implementing Electron security hardening, configuring CSP, designing secure IPC channels, conducting security audits, managing vulnerabilities, or implementing sandboxing. electron security, CSP, IPC protection, context isolation, sandbox, preload

majiayu000 Bundle

Use when you need to apply Java secure coding best practices — including validating untrusted inputs, defending against injection attacks with parameterized queries, minimizing attack surface via least privilege, applying strong cryptographic algorithms, handling exceptions securely without exposing sensitive data, managing secrets at runtime, avoiding unsafe deserialization, and encoding output to prevent XSS. This should trigger for requests such as Review Java code for secure coding. Part of cursor-rules-java project

majiayu000 Bundle

Secure REST APIs with authentication, rate limiting, CORS, input validation, and security middleware. Use when building or hardening API endpoints against common attacks.

majiayu000 Bundle

Validates architecture documentation completeness by checking for technology stack, API specifications, database schema, security architecture, and alignment with feature specification. Ensures plan.md is complete before implementation.

majiayu000 Bundle

Create, configure, and manage Claude Code hooks for workflow automation, validation, and security. Guides hook implementation, configuration patterns, and best practices.

majiayu000 Bundle

Comprehensive code review with security, performance, and quality analysis. Use when users ask to review code, analyze code quality, evaluate pull requests, or mention code review, security analysis, or performance optimization.

majiayu000 Bundle

Audit and update NuGet packages for C#/.NET projects. Detects outdated packages, security vulnerabilities, and breaking changes. Groups updates by risk level, runs verification after each batch, and pauses for user confirmation before any major version bump or .NET framework upgrade. Invoked via /dev-dependency (unified entry point) — not directly.

majiayu000 Bundle

Claude Code hooks expert. Create, debug, and optimize hooks for PreToolUse, PostToolUse, Stop, UserPromptSubmit, SessionStart, and other lifecycle events. Includes templates, patterns, and security best practices.

majiayu000 Bundle

Repository governance covers policies, standards, and controls for managing GitHub repositories effectively. This skill includes repository settings, access controls, branch protection, security policies, and best practices for maintaining healthy and secure repositories.

majiayu000 Bundle

Audits cross-cutting code health across security, delivery, maintainability, dependencies, diagnosability, concurrency, and lifecycle. Use when no specialist audit is primary.

majiayu000 Bundle

Performs comprehensive reviews of git diffs, commits, branches, and pull requests. Use when the user asks to review code, a commit hash, a branch, or a PR, especially for security, best practices, performance issues, or dependency vulnerabilities.

majiayu000 Bundle

Use when analyzing, designing, or fixing how services communicate — especially when communication is unstable, one-directional, fire-and-forget, lacks backpressure, or has no recovery path. Covers inter-service sync, connection lifecycle, tick rate analysis, failure mode mapping, and protocol design for self-healing systems. Use when user mentions instability between services, sync issues, reconnection problems, or asks to review how two systems talk to each other.

majiayu000 Bundle

Review GitHub pull requests using the gh CLI. Fetches PR diff and details, optional Jira or GitHub issue context from branch, analyzes for code quality, security, tests, and style, then posts inline comments. Use when the user asks to review a PR, check a pull request, or mentions a PR URL or number.

majiayu000 Bundle

Use when the user asks to "personalize the email", "add merge tags / dynamic content", "set up conditional blocks per segment", or "make first-name and product-recommendation fields fall back safely"; produces a merge-tag map with per-tag fallbacks, conditional-block rules with per-segment variations, a fallback-safety audit, and a PII guard on what may render, informing the SEND E (Engagement/personalization) dimension. Not for building the segments — use list-segment-builder; not for writing the base copy — use email-creative-builder; not for scoring EQS or running vetoes — use email-quality-auditor. 邮件个性化/合并标签/条件内容块/兜底默认值

majiayu000 Bundle

Use when finding mocks, stubs, fake paths, or placeholders leaking into production code. Triggers:

majiayu000 Bundle

Run doc, link, skill matrix, and version/facts checks before release. Single entrypoint script; output to user-specified path only; no in-repo default. Use when user says 'run audit', 'run framework audit', or before release.

majiayu000 Bundle

Audit function visibility boundaries and rename misclassified public/private functions

majiayu000 Bundle

Open Audit for memory leaks, handle leaks, GDI leaks, and CPU churn

majiayu000 Bundle

<!-- Copyright (c) 2026 defconxt. All rights reserved. -->

majiayu000 Bundle

<!-- Copyright (c) 2026 defconxt. All rights reserved. -->

majiayu000 Bundle

<!-- Copyright (c) 2026 defconxt. All rights reserved. -->

majiayu000 Bundle

Configure OpenTelemetry Collector with OAuth2 authentication for trace export

majiayu000 Bundle

Use when asking about 'FileProtectionType', 'file encryption iOS', 'NSFileProtection', 'data protection', 'secure file storage', 'encrypt files at rest', 'complete protection', 'file security' - comprehensive reference for iOS file encryption and data protection APIs

majiayu000 Bundle

对前端代码进行安全审计，检测 XSS、CSRF 等漏洞。当用户请求代码审查或询问代码安全性时使用。

majiayu000 Bundle

Apply layered security routing for network, infrastructure, application security, compliance, and DevSecOps concerns. Use to select focused security reference files with strict context boundaries before implementation, audit, or review.

majiayu000 Bundle

<!-- Copyright (c) 2026 defconxt. All rights reserved. -->

majiayu000 Bundle

<!-- Copyright (c) 2026 defconxt. All rights reserved. -->