Security

majiayu000 Bundle

Git workflow rules for git-review: branch naming, commit format, merge policy, review gate enforcement, and security rules. Use when creating branches, committing, or preparing merges.

majiayu000 Bundle

Use when reviewing code. Triggers: 'review my code', 'check my work', 'look over this', 'review PR #X', 'PR comments to address', 'reviewer said', 'address feedback', 'self-review before PR', 'audit this code'. Modes: --self (pre-PR self-review), --feedback (process received review comments), --give (review someone else's code/PR), --audit (deep single-pass analysis). For heavyweight multi-phase analysis, use advanced-code-review instead.

majiayu000 Bundle

Reviews code for quality, best practices, and potential issues. Use when asked to review, audit, or check code for problems.

majiayu000 Bundle

Review code for bugs, security vulnerabilities, API misuse, consistency issues, simplicity problems, or test coverage gaps by running internal reviews and a peer review in parallel and returning combined findings. Single-concern with a type argument, or full review with no argument. Use when the user asks to "review my code", "full code review", "review my changes", "check for bugs", "scan for bugs", "review correctness", "security audit", "find vulnerabilities", "review security", "check API usage", "verify against docs", "check for cross-file duplication", "review consistency", "check for code reuse", "review simplicity", "find untested code", or "review test coverage".

majiayu000 Bundle

<!-- Copyright (c) 2026 defconxt. All rights reserved. -->

majiayu000 Bundle

Managing Supply Chain Security, SBOM generation, and vulnerability patching (SCA).

majiayu000 Bundle

Define RPO/RTO, implement PITR/Snapshots, and test restores.

majiayu000 Bundle

Deep security audit of the codebase (Janet Moore's workflow)

majiayu000 Bundle

Decrypt and edit SOPS-encrypted secrets in this repo

majiayu000 Bundle

Use this template for domain-specific security testing (cryptographic testing, web security methodologies, etc.).

majiayu000 Bundle

Use when the user asks to improve, compare, audit, or identify gaps in an existing skill.

majiayu000 Bundle

Automated test generation, review, and execution for pytest-based projects. Auto-activates on keywords test, coverage, pytest, unittest, integration test, e2e, performance, benchmark, security testing. Routes to specialized testing workflows based on user intent.

majiayu000 Bundle

Administer MySQL/MariaDB databases. Configure replication and optimize performance. Use when managing MySQL deployments.

majiayu000 Bundle

AI-assisted pair programming with multiple modes (driver$navigator$switch), real-time verification, quality monitoring, and comprehensive testing. Supports TDD, debugging, refactoring, and learning sessions. Features automatic role switching, continuous code review, security scanning, and performance optimization with truth-score verification.

majiayu000 Bundle

Guides Quarkus development across REST APIs, CDI dependency injection, Hibernate ORM, Panache, configuration, OpenAPI, templates, messaging, security, observability, packaging, and tooling. Use when building Quarkus applications, adding endpoints or clients, configuring datasources or OIDC, debugging build or runtime issues, or choosing extensions.

majiayu000 Bundle

Review code for bugs, security vulnerabilities, API misuse, consistency issues, simplicity problems, or test coverage gaps by running internal reviews and a peer review in parallel and returning combined findings. Single-concern with a type argument, or full review with no argument. Use when the user asks to "review my code", "full code review", "review my changes", "check for bugs", "scan for bugs", "review correctness", "security audit", "find vulnerabilities", "review security", "check API usage", "verify against docs", "check for cross-file duplication", "review consistency", "check for code reuse", "review simplicity", "find untested code", or "review test coverage".

majiayu000 Bundle

Use when reviewing a pull request, merge request, or local diff for correctness, security, and code quality.

majiayu000 Bundle

Web performance audit - Core Web Vitals, bundle analysis, Lighthouse patterns.

majiayu000 Bundle

Audit codebase for adherence to architectural standards, practices, and rules. Use when user says "audit arch", "audit architecture", "check architecture", or "architectural review". Spawns parallel subagents to examine multiple architectural aspects and generates a structured report.

majiayu000 Bundle

Periodic project health check - cross-check docs, prune conventions, find drift. Use when project documentation feels stale, before milestones, or when CLAUDE.md is getting long.

majiayu000 Bundle

Comprehensive code review assistant that analyzes code quality, security, and best practices

majiayu000 Bundle

Secure 1Password CLI (op) access patterns. Use when any task requires reading secrets, tokens, API keys, passwords, or credentials from 1Password. Also use when another skill or workflow needs to retrieve a secret from a vault. Provides secure read patterns and strict rules to prevent secret leakage into conversation context, terminal output, or environment variables visible to Claude. NEVER bypass these patterns by running op commands directly without following the security rules below.

majiayu000 Bundle

Set up and use 1Password CLI (op). Use when installing the CLI, enabling desktop app integration, signing in (single or multi-account), or reading/injecting/running secrets via op.

majiayu000 Bundle

Expert patterns for Clerk auth implementation, middleware, organizations, webhooks, and user sync Use when: adding authentication, clerk auth, user authentication, sign in, sign up.

majiayu000 Bundle

Investigate-then-decide root-cause analysis for a defect whose cause is unknown (distinct from /fix, which assumes a known bug). Five gated phases: capture, hypothesize, gather, decide, hand off. Investigation only, no code changes; exits to /fix, /adr, or a no-action close.

majiayu000 Bundle

Investigate-then-decide root-cause analysis for a defect whose cause is unknown (distinct from /fix, which assumes a known bug). Five gated phases: capture, hypothesize, gather, decide, hand off. Investigation only, no code changes; exits to /fix, /adr, or a no-action close.

majiayu000 Bundle

Use to assess regulatory applicability for products that may fall under AI regulation (EU AI Act, Article 50 transparency).

majiayu000 Bundle

Parsing structured logs, finding patterns in noise, and ELK/Splunk querying.

majiayu000 Bundle

OWASP secure design review for code and architecture. Checks input validation, authentication, authorization, data protection.

majiayu000 Bundle

Security scan workflow — dependency audit, OWASP checklist, secrets scan, vulnerability report. Applies software-engineer role with security focus. Use standalone or as part of code review.

majiayu000 Bundle

Test-Driven Development loop for audit refactor tasks. Automatically picks next task, enforces test-first, runs validation. Based on Ralph Wiggum AI Loop Technique.

majiayu000 Bundle

Ensure every critical action is logged (vital for UAG/Trust Room).

majiayu000 Bundle

Guide for creating Claude Code hooks with proper configuration, shell commands, event handling, and security practices. Use when the user wants to create hooks, automate workflows, add event handlers, format code automatically, protect files, log actions, or mentions creating/configuring/building hooks.

majiayu000 Bundle

Conducts comprehensive code reviews identifying poor practices, inefficiencies, potential bugs, security vulnerabilities, and provides recommendations for making code DRYer and more maintainable. Use when reviewing files, PRs, or code quality.

majiayu000 Bundle

Review code changes between commits for security, logic, performance, and style issues

majiayu000 Bundle

Authentication and session management with Better Auth in LivestockAI