Security

majiayu000 Bundle

Django 5+ framework guardrails, patterns, and best practices for AI-assisted development. Use when working with Django projects, or when the user mentions Django. Provides ORM patterns, views, templates, DRF, admin, and security guidelines.

majiayu000 Bundle

Review diffs for risk, find mocks, scan for bugs, audit codebases. Fold target for bug-hunt, codebase-audit, and ubs. Triggers: "review", "review diffs for risk find", "review skill".

majiayu000 Bundle

Extracts system architecture and creates data flow documentation (Stages 1, 2, 6). Focuses on source traceability and accurate information extraction. Does NOT perform security analysis or quality validation.

majiayu000 Bundle

结对编程搭档。当用户要求"边写边审"、"结对编程"、"写完自己 review 一遍"、"高可靠地实现"，或明确希望代码交付时附带自我审查意见时使用。交付代码的同时输出结构化审查（正确性/安全/性能/可读性/健壮性五维度），重点捕捉 AI 生成代码的特有缺陷。不用于：对已有 PR 的正式评审（用 code review 流程）、安全专项扫描（用 security-audit）、10 行以内的简单片段。

majiayu000 Bundle

Automated code review for pull requests using specialized review patterns. Analyzes code for quality, security, performance, and best practices. Use when reviewing code changes, PRs, or doing code audits.

majiayu000 Bundle

Code review with confidence-based filtering. Use to review code for bugs, security issues, and quality problems. Only reports issues with high confidence to reduce noise.

majiayu000 Bundle

Configure Cognito User Pools with custom attributes and auth triggers. Use when setting up authentication flows, managing user groups, or applying CDK escape hatches for GainInsight Standard projects.

majiayu000 Bundle

Security-focused code review for PRs, commits, and diffs.

majiayu000 Bundle

Security audit, vulnerability scanning, and secure coding practices. Use when reviewing code for OWASP vulnerabilities, implementing auth, securing APIs, or handling sensitive data.

majiayu000 Bundle

Security best practices for secure coding, authentication, authorization, and data protection. Use when developing features that handle sensitive data, user authentication, or require security review.

majiayu000 Bundle

Quality assurance verification. Checks test coverage against thresholds, validates test quality, identifies E2E/integration gaps, runs security dependency audit, performs static analysis, and generates QA report with quality score.

majiayu000 Bundle

Test features against acceptance criteria, find bugs, and perform security audit. Use after implementation is done.

majiayu000 Bundle

Mid-epic drift audit: code is ground truth; README/PRODUCT/plan are the measuring stick. Use when a wave boundary lands and bead counts look healthy but value feels absent.

majiayu000 Bundle

Structured code review covering style, readability, and security concerns with actionable feedback. Use when reviewing pull requests or merge requests to identify issues and suggest improvements.

majiayu000 Bundle

Multi-dimensional code review with structured reports. Analyzes correctness, readability, performance, security, testing, and architecture. Triggers on "review code", "code review", "审查代码", "代码审查".

majiayu000 Bundle

Top username lists for enumeration: common usernames, default credentials, names. Curated essentials for authorized testing.

majiayu000 Bundle

Research technical solutions, analyze architectures, gather requirements thoroughly. Use for technology evaluation, best practices research, solution design, scalability/security/maintainability analysis.

majiayu000 Bundle

Remove dead code, unused imports, stale files, and fix code quality issues found by /audit

majiayu000 Bundle

GitHub Actionsワークフロー実行時のデバッグとトラブルシューティング。 Anchors: • Continuous Delivery (Jez Humble) / 適用: パイプライン失敗の診断 / 目的: フィードバックループ短縮 • Site Reliability Engineering (Google) / 適用: ログベース障害分析 / 目的: 体系的エラー診断 Trigger: Use when debugging failed GitHub Actions workflows, analyzing workflow logs, enabling debug logging, troubleshooting permission/secret/cache/timeout issues, or diagnosing runner environment problems. Keywords: github actions, workflow error, failed job, ACTIONS_STEP_DEBUG, ACTIONS_RUNNER_DEBUG, permission denied, cache miss, timeout, runner diagnostics

majiayu000 Bundle

Use when the user asks to "audit our launch plan", "are we ready to launch", or run a T-1 launch-eve go/no-go before a committed date; runs RAMP LQS scoring with R1/A1/M1/P1 veto checks and a SHIP/FIX/BLOCK gate, and emits a gated audit artifact. Not for recording launch dates or stages — use launch-registry; not for running launch day itself — use launch-day-conductor. 发布就绪审计/LQS评分/发布前放行

majiayu000 Bundle

Review a GitHub PR. Use when PRs are open, at integration checkpoints, or before deploying contracts to mainnet. Checks protocol/client boundary, schema consistency, and contract security.

majiayu000 Bundle

Webhook management with HMAC signing and rate limiting

majiayu000 Bundle

Review code changes with security, performance, and style checks

majiayu000 Bundle

Perform thorough code reviews covering correctness, security, performance, and readability with severity ratings.

majiayu000 Bundle

Power-user audit of Origin's pending surfaces. Most users want `/brief` for revisions. That handles the daily flow. Use `/review` only for explicit deep-walk audits after bulk imports, or when you want to walk the full queue rather than the top 3 shown in /brief. Invoked as `/review captures` or `/review revisions`.

majiayu000 Bundle

Set up and use 1Password CLI (op). Use when installing the CLI, enabling desktop app integration, signing in (single or multi-account), or reading/injecting/running secrets via op.

majiayu000 Bundle

Secure credential management for trading platforms

majiayu000 Bundle

Investigate-then-decide root-cause analysis for a defect whose cause is unknown (distinct from /fix, which assumes a known bug). Five gated phases: capture, hypothesize, gather, decide, hand off. Investigation only, no code changes; exits to /fix, /adr, or a no-action close.

majiayu000 Bundle

解决方案架构师助手。当用户要设计新系统架构、评审现有架构、做技术选型决策、诊断性能/可扩展性/可用性问题、规划架构演进或重构时使用。覆盖微服务、事件驱动、云原生等架构模式，技术趋势通过实时搜索获取而非依赖内置知识。不用于：具体功能的代码实现、安全漏洞审计（用security-audit）、产品需求分析（用product-manager）、只需一句话回答的技术常识问题。

majiayu000 Bundle

Command approvals, tool policies, and exec security

majiayu000 Bundle

This skill should be used when the user asks to "plan a red team engagement", "scope a penetration test", "design a security assessment methodology", "create rules of engagement", or "plan an adversary simulation".

majiayu000 Bundle

Security assessment workflow. Use when reviewing code for vulnerabilities, performing OWASP checks, auditing authentication/authorization logic, or validating security controls before deployment.

majiayu000 Bundle

OWASP secure design review for code and architecture. Checks input validation, authentication, authorization, data protection.

majiayu000 Bundle

Web application testing principles. E2E, Playwright, deep audit strategies.

majiayu000 Bundle

Manage Claude Code lifecycle hooks for automation (secrets scan, auto-format, audit log, session context).

majiayu000 Bundle

Research technical solutions, analyze architectures, gather requirements thoroughly. Use for technology evaluation, best practices research, solution design, scalability/security/maintainability analysis.