Security

majiayu000 Bundle

Code review for quality, security, and best practices. Use when: - User asks to "review", "check", "look at" code - Before merging, committing, or shipping - User mentions PR, pull request, changes, diff - User wants feedback on implementation - After implementing a feature (self-review)

majiayu000 Bundle

Review code quality, security, and maintainability before committing. Use when reviewing code changes, checking code quality, performing security review, or validating changes before commit.

majiayu000 Bundle

Use this skill to perform a security audit, scan for vulnerabilities, check OWASP Top 10 issues, or review code for security problems. Triggered by "security audit", "check security", "find vulnerabilities".

majiayu000 Bundle

Security vulnerability patterns and prevention. Use when writing code that handles user input, authentication, API endpoints, or sensitive data.

majiayu000 Bundle

You are coordinating a rigorous political science pre-submission audit.

majiayu000 Bundle

Nginx reverse proxy configuration and optimization. Set up SSL termination, load balancing, caching, rate limiting, and security headers. Use when configuring Nginx as a reverse proxy, API gateway, or web server for production deployments.

majiayu000 Bundle

Final quality pass fixing alignment, spacing, consistency, interaction states, and micro-details before shipping. Executes changes (unlike design-audit and design-critique which are report-only). Triggers on polish, finishing touches, final pass, something looks off, pre-launch, good to great.

majiayu000 Bundle

AI-assisted pair programming with multiple modes (driver/navigator/switch), real-time verification, quality monitoring, and comprehensive testing. Supports TDD, debugging, refactoring, and learning sessions. Features automatic role switching, continuous code review, security scanning, and performance optimization with truth-score verification.

majiayu000 Bundle

Security review checklist for code and infrastructure

majiayu000 Bundle

Thorough, adversarial security review of API endpoints, UI flows that call those endpoints, and any database-interacting code. Use when the user asks for a security review, permission/authorization audit, red-team style assessment, or vulnerability analysis. Assume access to source code and a running system; perform threat modeling and check current vulnerabilities relevant to the stack.

majiayu000 Bundle

Automated code review for security, performance, and maintainability. Use when asked for code review, security audit, quality check, PR review, or to find issues in code.

majiayu000 Bundle

Review uncommitted code changes for bugs, security issues, and style violations.

majiayu000 Bundle

認証と決済機能を実装。Clerk、Supabase Auth、Stripeに対応。Use when user mentions login, authentication, payments, subscriptions, or Stripe. Do NOT load for: general UI work, database design, or non-auth features.

majiayu000 Bundle

Security audit with Sentinel. Checks for vulnerabilities, secrets, dependencies, and security best practices. Use before shipping or when working on auth/crypto/sensitive areas.

majiayu000 Bundle

Use when scanning for security vulnerabilities: SAST, dependency audit, secret detection, and SBOM generation with OWASP mapping and CWE references.

majiayu000 Bundle

Expert in application security, vulnerability analysis, secure coding practices, and security auditing. Use for security reviews, threat modeling, authentication/authorization design, and fixing security vulnerabilities.

majiayu000 Bundle

Spring Security 6+ standards, Lambda DSL, and Hardening

majiayu000 Bundle

Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive security checklist and patterns.

majiayu000 Bundle

Use when asking "overkill?", "elegant?", "audit", or "taste-test this", or setting a taste register. Not for tasks that require source or remote-system changes.

majiayu000 Bundle

Audit skill files against quality standards. Use ONLY within Manager Pattern workflow via TaskList. Receives taskId, reads draftPath from task metadata, validates against skill-development rules, writes auditResult to task metadata. Not for manual use.

majiayu000 Bundle

Audit the test suite for useless tests, consolidation opportunities, over-mocking, weak assertions, and other test quality issues. Use when user says "audit tests", "audit test suite", "review tests", or "test quality check". Generates an improvement plan in temp/ with explanations for each proposed change.

majiayu000 Bundle

Comprehensive verification system covering build, types, lint, tests, security, and diff review before a PR.

majiayu000 Bundle

Get a second opinion from Gemini on code, architecture, debugging, or security. Uses direct Gemini API calls — no CLI dependencies. Trigger with 'ask gemini', 'gemini review', 'second opinion', 'peer review', or 'consult gemini'.

majiayu000 Bundle

Create Claude Code hooks with proper schemas, RBAC integration, and performance requirements. Use when implementing PreToolUse, PostToolUse, SessionStart, or any of the 10 hook event types for automation, validation, or security enforcement.

majiayu000 Bundle

Use when committing changes: governed commit workflow with staging, lint, secret scan, conventional commit message, and push.

majiayu000 Bundle

Senior Laravel Engineer role for production-grade, maintainable, and idiomatic Laravel solutions. Focuses on clean architecture, security, performance, and modern standards (Laravel 10/11+).

majiayu000 Bundle

Skill d'identification et de priorisation de la dette technique dans un projet. Scanne les patterns de dette (TODO/FIXME, code duplique, fichiers trop longs, dependances outdated, types manquants, etc.), classifie par categorie et severite, et genere un rapport avec matrice de priorisation. Compatible avec /refactor-planner pour la remediation. Ce skill devrait etre utilise periodiquement ou avant un audit qualite.

majiayu000 Bundle

Administer PostgreSQL databases. Configure replication, backups, and performance tuning. Use when managing PostgreSQL deployments.

majiayu000 Bundle

Systematic documentation audit and maintenance. This skill should be used when documentation may be stale, missing, or misorganized — after feature work, refactors, dependency upgrades, or as a periodic health check. It prescribes folder structure for docs/ and manual/, dispatches haiku subagents for codebase/doc scanning, and routes doc creation to specialized agents (reference-builder, technical-writer, learning-guide) with docs-architect as quality gate.

majiayu000 Bundle

Full audit and update of BioETL project documentation for v5.22+. Use when asked to review docs for staleness, reconcile docs with code, sync RULES.md and REQUIREMENTS.md, update architecture/provider/contract docs, reflect ADR-010/ADR-014/ADR-017, or identify dead documentation.

majiayu000 Bundle

Audit an area of the codebase and propose the smallest structural moves that improve it - untangle boundaries, kill duplication, fix seams, break cycles. Produces a prioritized plan and decision records, not a rewrite. Use when a codebase feels tangled, hard to change, or is becoming a ball of mud, or when asked to improve or refactor architecture.

majiayu000 Bundle

Post-implementation review orchestrator. Launches 5 parallel background sub-agents: Oracle (goal/constraint verification), Oracle (code quality), Oracle (security), unspecified-high (hands-on QA execution), unspecified-high (context mining from GitHub/git/Slack/Notion). All must pass for review to pass. MUST USE after completing any significant implementation work. Triggers: 'review work', 'review my work', 'review changes', 'QA my work', 'verify implementation', 'check my work', 'validate changes', 'post-implementation review'.

majiayu000 Bundle

Scaffold authentication with Auth.js (NextAuth v5), including providers, session handling, middleware protection, and role-based access. Use when asked to set up auth, add login, protect routes, or implement authentication.

majiayu000 Bundle

Perform a security code review on pending changes or specified files

majiayu000 Bundle

Regulatory compliance auditing across GDPR, HIPAA, PCI DSS, SOC 2, and ISO frameworks with automated evidence collection and gap analysis. Use when conducting compliance assessments, preparing for certifications, or implementing regulatory controls.

majiayu000 Bundle

Implement comprehensive validation on both server and client sides with specific error messages, input sanitization, and consistent validation across all entry points. Use this skill when validating user input, form data, API requests, or any data entering the system. When implementing validation rules, sanitizing input, or preventing injection attacks. When creating validation schemas, form validation, or business rule validation. This skill applies to all code files that handle user input, data validation, or security checks in any programming language including `.js`, `.ts`, `.py`, `.rb`, `.java`, `.go`, `.php`, and others.