Security

bouclem Skill

API security testing workflow for REST and GraphQL APIs covering authentication, authorization, rate limiting, input validation, and security best practices.

aibot88 Bundle

Analyze feature requirements, dependencies, and security considerations. Use when starting feature implementation from GitHub issues to understand scope, technical feasibility, and risks.

aibot88 Bundle

Audit legal aid and public defense case management systems -- client intake workflows, Federal Poverty Level eligibility screening accuracy, conflict-of-interest checking, document assembly and e-filing integration, court deadline calculation with rule-based calendaring, pro bono attorney matching and CLE tracking, LSC Case Statistical Report generation, and access-to-justice gap analysis. Use when reviewing legal services software, public defender platforms, or any codebase handling indigent client intake, legal case assignment, or funder compliance reporting.

aibot88 Bundle

Conduct a CTO-perspective technical strategy review of a codebase. Evaluates architecture decisions and build-vs-buy trade-offs, scaling readiness at 10x and 100x, engineering velocity and developer experience, technical debt ratio and blast radius, security posture at executive level, team scalability for hiring, and infrastructure cost efficiency. Produces a strategic risk matrix, architecture scorecard, and ranked investment priorities. Use when you need a technical strategy review, architecture assessment, scaling readiness check, tech debt audit, engineering velocity evaluation, Series A technical due diligence, or CTO-level briefing before a board meeting or fundraise.

aibot88 Bundle

Audit and harden encryption across the full stack. Checks data-at-rest encryption (database TDE, field-level AES-256-GCM, file storage SSE, backup encryption), data-in-transit security (TLS 1.2+, HSTS, certificate pinning, mTLS, WebSocket WSS), key management (KMS, envelope encryption, key rotation, key separation), password hashing (argon2id, bcrypt, scrypt, PBKDF2 work factors, salt uniqueness, migration plans), token security (JWT signing algorithms, CSPRNG, refresh token rotation), and API key management (hashed storage, scoping, revocation). Use when you need to audit crypto, fix weak hashing, implement envelope encryption, rotate keys, upgrade TLS, or harden token generation.

aibot88 Bundle

Analyze fleet safety programs including driver behavior scoring, accident trend analysis, CSA BASIC score monitoring, DOT audit readiness, Hours of Service compliance, and drug and alcohol testing programs. Covers telematics event review, dashcam AI classification, preventability determinations, roadside inspection management, and risk mitigation ROI per FMCSA regulations and CSA methodology.

aibot88 Bundle

Analyze in-game economy systems including soft and hard currency source-sink balance, inflation projection modeling, loot table drop rate fairness and pity system evaluation, gacha probability disclosure, player marketplace health and price manipulation risks, pay-to-win power gap detection, economy stress testing for hoarder-whale-grinder-casual player archetypes, and currency exploit detection.

aibot88 Bundle

Audit rural health network software for telehealth readiness, provider coverage mapping, patient transportation coordination, referral network optimization, Critical Access Hospital compliance, mobile clinic scheduling, and health equity metrics. Use when reviewing rural EHR systems, FQHC platforms, telehealth infrastructure, community health worker tools, HRSA-funded health systems, or remote care delivery networks.

aibot88 Bundle

Support SOX 404 compliance with control testing methodology, sample selection, and documentation standards. Use when generating testing workpapers, selecting audit samples, classifying control deficiencies, or preparing for internal or external audits.

aibot88 Bundle

Audit a tenant management system for eviction prevention and risk prediction. Evaluates payment pattern analysis and arrears tracking, early warning indicators (financial, behavioral, external), intervention trigger automation, pre-filing mediation workflows, emergency rental assistance integration (ERAP, LIHEAP), legal process tracking with jurisdiction-specific compliance (VAWA, SCRA), and outcome measurement. Use when building or reviewing property management platforms, affordable housing systems, or tenant services applications.

aibot88 Bundle

Audit a rehabilitation or physical therapy platform end-to-end -- evaluate recovery metrics tracking (ROM, strength, balance, gait), patient-reported outcomes (DASH, LEFS, NDI, ODI, PROMIS), home exercise program personalization and compliance tracking, setback prediction with risk stratification and plateau detection, therapist scheduling and caseload balancing, insurance authorization and 8-minute rule CPT billing, and outcome-based care measurement with MIPS quality reporting. Covers outpatient orthopedic, inpatient rehab, sports medicine, neuro rehab, and telerehab settings.

aibot88 Bundle

Generates audit trail infrastructure for entities. Implements IAuditable interface, EF Core SaveChanges interceptor, and automatic population of CreatedAt, UpdatedAt, CreatedBy, and UpdatedBy fields.

aibot88 Bundle

Deep codebase cleanup — kills dead code, fixes all lint/format warnings, removes orphaned files, cleans stale TODOs, strips security hazards, tightens TypeScript strict mode, and organizes imports. Triggers on: clean up, dead code, unused imports, lint, technical debt cleanup, spring cleaning, tidy up the codebase, remove dead code, code hygiene, declutter.

aibot88 Bundle

Review code for quality, security, and maintainability. Use after code changes are completed and ready for review.

aibot88 Bundle

Analyze compliance operations for regulatory change tracking, control mapping, policy management, audit readiness, and training compliance. Use when: 'audit compliance program', 'assess GRC platform', 'review regulatory change management', 'check control framework', 'evaluate policy lifecycle', 'audit readiness check', 'review SOX/HIPAA/GDPR controls', 'assess training compliance'.

aibot88 Bundle

Pre-launch compliance and security gate for fintech apps: audit PCI DSS payment card handling, review financial API integrations for idempotency and error handling, evaluate fraud detection coverage, validate credit risk models for fairness, then run preflight checks. Use before launching a payments app, neobank, lending platform, BNPL product, or any money-movement system.

aibot88 Bundle

Audit laboratory automation systems -- LIMS architecture, instrument connectivity (SiLA 2, OPC-UA, serial drivers), sample tracking and chain of custody, protocol workflow engines, data acquisition pipelines, and regulatory compliance (21 CFR Part 11 electronic records/signatures, GAMP 5 software categorization, ALCOA+ data integrity). Use when reviewing pharma, biotech, clinical, or research lab codebases with liquid handlers, plate readers, sequencers, or automated workcells.

aibot88 Bundle

Audit laboratory management systems -- chemical inventory (SDS, GHS, CAS tracking), equipment lifecycle and calibration scheduling, safety compliance (OSHA 29 CFR 1910.1450, Chemical Hygiene Plans, biosafety levels), hazardous waste management (EPA 40 CFR 260-270), training record enforcement, and SOP/protocol version control. Use when reviewing university, corporate, or government lab software handling reagent tracking, instrument reservations, EH&S inspections, or waste stream classification.

aibot88 Bundle

Audit corporate tax compliance systems across jurisdictions. Analyzes tax engine configuration (Avalara, Vertex, ONESOURCE), nexus determination and Wayfair economic nexus tracking, sales/use tax calculation accuracy, federal and state income tax compliance (book-to-tax adjustments, NOL, R&D credits, apportionment), ASC 740 tax provision automation (ETR, deferred tax, uncertain tax positions), transfer pricing documentation (OECD BEPS Pillar One/Two, GloBE rules, CbCR), and filing calendar management.

aibot88 Bundle

Review database schema design, query patterns, and data access layer for correctness and performance. Checks normalization balance, index coverage against actual queries, constraint completeness (NOT NULL, FK, unique, check, defaults), data type correctness (money as DECIMAL not FLOAT, timestamps with timezone), N+1 query detection, connection pooling configuration, transaction safety, and migration hygiene. Supports PostgreSQL, MySQL, SQLite, MongoDB, Firestore, DynamoDB, and all major ORMs. Use when you need to review a database schema, find missing indexes, detect N+1 queries, audit data types, check constraint coverage, optimize query patterns, or assess database scaling readiness.

aibot88 Bundle

Scan project dependencies for known vulnerabilities (CVEs), auto-fix safe patches, and generate SBOM. Auto-detects all package managers in monorepos — npm (npm audit), yarn (yarn audit), pnpm (pnpm audit), pip/poetry (pip-audit), Cargo (cargo audit), Go modules (govulncheck), Maven (dependency-check), Gradle, Bundler (bundle audit), and Composer. Categorizes findings by severity (Critical/High/Medium/Low), dependency type (direct vs transitive), and fix availability. Applies safe patch-level fixes automatically, adds npm overrides or yarn resolutions for transitive vulnerabilities, flags major version bumps for manual review, and generates CycloneDX SBOM with license compliance checks (GPL, AGPL, LGPL flagging). Verifies fixes by re-scanning and running tests before committing.

aibot88 Bundle

Audit a dynamic pricing engine for revenue optimization and fairness. Evaluates price elasticity models, competitive intelligence feeds, promotional ROI, markdown optimization, price image management, and legal compliance including Robinson-Patman and price gouging regulations. Use when building or reviewing retail pricing systems, e-commerce price optimization, or revenue management platforms.

aibot88 Bundle

Audit academic peer review operations -- reviewer matching algorithms, conflict of interest detection, turnaround time optimization, review quality scoring, and editorial workflow management. Covers COPE guidelines compliance, COI screening (co-authorship, affiliation, funding), blinding enforcement, reviewer pool health metrics, ORCID/CrossRef integration, and plagiarism detection workflows. Supports ScholarOne, Editorial Manager, OJS, and custom editorial platforms. Use when optimizing reviewer assignment, reducing manuscript turnaround, auditing COI detection, or evaluating COPE compliance.

aibot88 Bundle

Audit risk simulation and decision support systems for Monte Carlo modeling quality, wargaming analysis, threat assessment, mission planning support, and course-of-action decision analysis. Use when reviewing probabilistic risk models, defense planning tools, cost-schedule risk engines, scenario simulators, or decision matrices built on DoD risk management and operational planning frameworks.

aibot88 Bundle

Audit OSHA training compliance, certification expirations, competency tracking, and LMS integration. Use when you need to evaluate safety training programs, check ANSI Z490.1 compliance, analyze training effectiveness with Kirkpatrick levels, identify expired certifications, assess training needs gaps, review contractor training verification, or optimize training ROI. Covers forklift, confined space, LOTO, fall protection, respirator, hazmat, and all OSHA-mandated programs.

aibot88 Bundle

Analyze manufacturing defect detection and quality control systems — computer vision inspection pipelines, SPC control charts, Six Sigma process capability (Cp/Cpk), defect classification taxonomies, root cause analysis tooling, and measurement system analysis. Audit QC codebases for detection accuracy, false reject rates, statistical rigor, and traceability compliance.

aibot88 Bundle

Audit a supply chain compliance system for ethical sourcing and labor rights. Evaluates supplier audit programs (SMETA, BSCI), forced labor due diligence (UFLPA, Modern Slavery Act), environmental impact tracking (ZDHC, GHG Protocol), certification management (WRAP, SA8000, OEKO-TEX, GOTS, GRS, Higg Index), corrective action workflows, and multi-tier supply chain transparency. Use when building or reviewing supply chain compliance platforms, ESG reporting systems, or textile/garment sourcing tools.

aibot88 Bundle

Analyze grant management and sponsored research operations including proposal lifecycle tracking, pre-award routing and budget development, post-award expenditure monitoring and burn rate analysis, 2 CFR 200 Uniform Guidance cost allowability enforcement, effort certification and salary cap compliance, F&A indirect cost rate application and MTDC exclusions, sub-award financial monitoring, SF-425 federal financial reporting, Single Audit SEFA preparation, and NSF PAPPG and NIH GPS sponsor-specific terms.

aibot88 Bundle

Retroactively verify threat mitigations for a completed phase

aibot88 Bundle

Comprehensive healthcare system compliance and security audit: review HIPAA Privacy and Security Rule adherence, check HITECH and 21st Century Cures Act obligations, validate clinical data integrity for HL7 FHIR and patient safety, then audit infrastructure security with PHI-specific focus. Use when building or auditing an EHR, patient portal, telehealth platform, clinical decision support system, or any application handling protected health information.

aibot88 Bundle

Audit a rehabilitation scheduling system -- evaluate therapist productivity and utilization rates, PTA/COTA supervision compliance, patient flow and no-show management, equipment and treatment room allocation, insurance authorization tracking with expiration alerts, CMS therapy cap monitoring (KX modifier thresholds), payer-specific visit limits, session frequency optimization, and multi-discipline coordination for PT, OT, and SLP. Covers WebPT, Clinicient, TheraOffice, Net Health, and custom EMR scheduling engines.

aibot88 Bundle

Audit workforce scheduling systems for labor optimization and compliance. Use when you need to evaluate labor demand forecasting accuracy, shift generation and optimization algorithms, skill-based staff routing, FLSA overtime compliance, predictive scheduling law compliance (OR, NYC, Chicago, Seattle), union CBA shift bidding rules, real-time schedule adjustments (call-outs, flex staffing, VTO), cross-training ROI, or labor cost as percentage of revenue. Covers UKG/Kronos, ADP, Workday, Deputy, HotSchedules, and custom WFM platforms across hospitality, healthcare, retail, and service industries.

aibot88 Bundle

Pre-submission audit for Apple App Store and Google Play Store compliance. Checks App Store Review Guidelines (safety, performance, business, design, legal sections) and Google Play Developer Policies (user data, permissions, deceptive behavior, monetization, store listing, content). Reviews In-App Purchase and Play Billing requirements, privacy policy and data collection disclosure, App Tracking Transparency and PrivacyInfo.xcprivacy privacy manifests, iOS App Privacy nutrition labels, Android Data Safety section accuracy, COPPA and GDPR-K children's data protections, permission justification (camera, location, microphone, contacts, background location), iOS background modes and entitlement validation, foreground service types, content rating IARC verification, UGC moderation requirements, account deletion mandate, third-party SDK data collection disclosure, and metadata accuracy (screenshots, description, category).

aibot88 Bundle

Detect project tech stack and configure Claude Code hooks for mechanical enforcement of linting and security rules. Use this skill when a user wants to set up hooks, configure auto-linting, add security guards, or move from advisory CLAUDE.md rules to mechanical enforcement.

aibot88 Bundle

Analyze carbon accounting and emissions tracking software for Scope 1/2/3 calculation accuracy, GHG Protocol compliance, offset verification, supply chain emissions, reporting standards (CDP, TCFD, GRI, SASB, SEC), reduction target tracking, and audit trail integrity. USE THIS SKILL WHEN: user mentions carbon accounting, emissions tracking, GHG Protocol, Scope 1/2/3 emissions, carbon offsets, CDP reporting, TCFD, sustainability reporting, carbon footprint calculation, science-based targets, or ESG emissions data. Trigger phrases: "analyze carbon accounting", "emissions calculation review", "GHG Protocol compliance check", "Scope 3 analysis", "offset verification audit", "CDP reporting readiness", "TCFD alignment review", "carbon reduction target tracking", "emissions audit trail", "sustainability reporting gap analysis".

aibot88 Bundle

Analyze commodity pricing and trading systems including forward curves, option models, position management, risk metrics, and regulatory reporting. Use when: 'review pricing models', 'audit trading system', 'evaluate VaR implementation', 'check commodity risk management', 'assess ETRM system', 'review derivatives valuation', 'analyze energy trading platform', 'evaluate hedge accounting'.