Security

majiayu000 Bundle

Navigate privacy regulations (GDPR, CCPA), review DPAs, and handle data subject requests. Use when reviewing data processing agreements, responding to data subject access or deletion requests, assessing cross-border data transfer requirements, or evaluating privacy compliance.

majiayu000 Bundle

Audit project dependencies for known vulnerabilities using ecosystem-specific tools (npm audit, composer audit, pip-audit, cargo audit, etc).

majiayu000 Bundle

<!-- Copyright (c) 2026 defconxt. All rights reserved. -->

majiayu000 Bundle

Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive security checklist and patterns.

majiayu000 Bundle

Audit memory safety and security in unsafe code blocks, buffer handling, and security-sensitive operations

majiayu000 Bundle

Weave authentication webs with patient precision. Spin the threads, connect the strands, secure the knots, and bind the system. Use when integrating auth, setting up OAuth, or securing routes.

majiayu000 Bundle

Guides creation and improvement of Claude Code skills using Anthropic's official methodology. Use when user wants to "create a skill", "build a skill", "make a new skill", "write a new skill", "improve an existing skill", "audit my skill", "refine my skill", "test a skill", "package a skill for distribution", or needs guidance on skill structure, progressive disclosure, description quality, testing, or distribution.

majiayu000 Bundle

Research-backed skill creation workflow with automated firecrawl research gathering, multi-tier validation, and comprehensive auditing. Use when "create skills with research automation", "build research-backed skills", "validate skills end-to-end", "automate skill research and creation", needs 9-phase workflow from research through final audit, wants firecrawl-powered research combined with validation, or requires quality-assured skill creation following Anthropic specifications for Claude Code.

majiayu000 Bundle

Audit the test suite for useless tests, consolidation opportunities, over-mocking, weak assertions, and other test quality issues. Use when user says "audit tests", "audit test suite", "review tests", or "test quality check". Generates an improvement plan in temp/ with explanations for each proposed change.

majiayu000 Bundle

SQLite operations using better-sqlite3 with prepared statements. Use when implementing CRUD operations, timestamps, and user-scoped queries with row-level security.

majiayu000 Bundle

Administer MongoDB databases. Configure replica sets, sharding, and backups. Use when managing MongoDB deployments.

majiayu000 Bundle

Review pull requests for spec compliance, security, performance, and code quality. Use when analyzing PRs. Not for writing new code or initial development.

majiayu000 Bundle

Checklist for security-sensitive coding, ensuring MaiHouses guards and policies are respected.

majiayu000 Bundle

Build and optimize SOQL queries including relationship queries, aggregate functions, polymorphic TYPEOF, and selective filters. Use when asked to write queries, debug slow queries, optimize existing SOQL, or enforce query security. Activate on mentions of "SOQL", "query", "SELECT", "WHERE", "aggregate", "relationship query", or "query optimization".

majiayu000 Bundle

Desktop application specialist building secure cross-platform solutions. Develops Electron apps with native OS integration, focusing on security, performance, and seamless user experience.

majiayu000 Bundle

Configure Redis for caching and data storage. Set up clustering, persistence, and Sentinel. Use when implementing Redis caching or queues.

majiayu000 Bundle

Audit, create, or rewrite repository README.md files to enterprise-grade quality using a deterministic evidence workflow across purpose, architecture, setup, operations, security, governance, and quality gates. Use when users ask to update/standardize/harden README docs, fix inaccurate onboarding instructions, prepare production-ready repository documentation, or generate executive/ownership-ready README content.

majiayu000 Bundle

Query and manage Google NotebookLM notebooks with persistent profile auth, source sync, batch/multi queries, and structured exports. Use when user asks to query NotebookLM, 'ask my notebook', shares NotebookLM notebook URLs, wants to list/create notebooks, manage sources, do bulk folder sync, dedupe, or audit exports.

majiayu000 Bundle

Use when a user commits to a direction and asks to plan, brief, research, or operationalize it. Classifies type and tier, researches read-only, and writes to plans/ after acknowledgment. Not for scoring — use planning; not for codebase audit — use plan-review.

majiayu000 Bundle

Systematic code review with security, performance, and architecture analysis. Provides actionable fix suggestions and GitHub PR integration. Use when reviewing PRs, validating code changes, or checking code quality.

majiayu000 Bundle

Use when asked to review a PR, MR, branch, or diff, audit changed files, or check code quality.

majiayu000 Bundle

Comprehensive code review skill for TypeScript, JavaScript, Python, Swift, Kotlin, Go. Includes automated code analysis, best practice checking, security scanning, and review checklist generation. Use when reviewing pull requests, providing code feedback, identifying issues, or ensuring code quality standards.

majiayu000 Bundle

Audit claude-skills repository documentation with systematic 9-phase review: standards compliance, official docs verification via Context7/WebFetch, code examples accuracy, cross-file consistency, and version drift detection. Auto-fixes unambiguous issues with severity classification. Use when: investigating skill issues, major package updates detected (e.g., v1.x → v2.x), skill not verified >90 days, before marketplace submission, or troubleshooting outdated API patterns, contradictory examples, broken links, version drift.

majiayu000 Bundle

Senior Architect skill for rigorous implementation plan audit. Enforces the "No Magic" rule and ensures every phase has automated verification and architectural soundness.

majiayu000 Bundle

View all tracked vulnerabilities and their current status

majiayu000 Bundle

Use when auditing supply chain security. Covers dependency scanning tools, CVE triage workflows, SBOM generation, license compliance, and Dependabot/Renovate configuration.

majiayu000 Bundle

Run comprehensive security audits including SAST, dependency scanning, and secret detection

majiayu000 Bundle

Identifies what could go wrong in a system before it is built or changed — the assets worth attacking, the entry points, the trust boundaries, and the controls that actually address the realistic threats. Use this when designing a feature or system, when a change touches authentication, data handling, payments, or external input, before a security review, or when deciding which security work is worth doing at all.

majiayu000 Bundle

Audit infrastructure for cost, security, and compliance - analyze current spending patterns, identify cost optimization opportunities, scan for security vulnerabilities, check compliance with best practices, generate audit reports with prioritized recommendations, track audit history.

majiayu000 Bundle

This skill should be used when the user asks to 'create a workflow', 'design a workflow', 'edit a workflow', 'audit workflow', 'improve workflow', 'break down a task into phases', or needs to substantially create or edit any multi-phase workflow.

majiayu000 Bundle

Research technical solutions, analyze architectures, gather requirements thoroughly. Use for technology evaluation, best practices research, solution design, scalability/security/maintainability analysis.

majiayu000 Bundle

PostgreSQL database patterns for query optimization, schema design, indexing, and security. Based on Supabase best practices.

majiayu000 Bundle

Perform automated code reviews checking for security vulnerabilities, performance issues, and code quality. Use before creating PRs or when reviewing complex changes.

majiayu000 Bundle

Automates intelligent Git commits by analyzing unstaged/staged changes, grouping files by logical development concern, and committing sequentially with descriptive Conventional Commit messages. Includes pre-commit security audit protecting against credential leaks and large binary commits. Use when the user says "commit", "smart commit", "save changes", "push", "git commit", or similar.

majiayu000 Bundle

Review the current PR's changes for code quality, security, and Rails best practices. Ideal for triggering a thorough review from GitHub Mobile.

majiayu000 Bundle

Automated diff-scoped PR code review using parallel audit subagents. Posts inline GitHub review comments and submits a summary verdict. Use after a PR is opened to gate CI on review approval.