Security

aibot88 Bundle

中文优先：用于DeFiAMM安全相关任务，帮助识别、设计、实现或验证对应工作流。English keywords: Security checklist for Solidity AMM contracts, liquidity pools, and swap flows. Covers reentrancy, CEI ordering, donation or inflation attacks, oracle manipulation, slippage, admin controls, and integer math.

aibot88 Bundle

Audit a manufacturing energy management system for monitoring quality, cost optimization, and compliance. Evaluates power metering infrastructure, energy baseline and EnPI calculations, peak demand management and load shifting, renewable energy and battery storage integration, GHG Protocol carbon footprint tracking (Scope 1/2/3), energy cost optimization, and ISO 50001 compliance. Use when building or reviewing industrial energy platforms, building management systems, or sustainability reporting tools.

aibot88 Bundle

Audit commercial building energy performance including HVAC optimization, ENERGY STAR scoring, utility cost analysis, demand response readiness, and sustainability compliance. Covers BMS/BAS systems, EUI benchmarking against CBECS and ASHRAE 90.1, lighting and plug load efficiency, on-site renewables, and local building performance standards like NYC LL97, Boston BERDO, and DC BEPS.

aibot88 Bundle

Audit content licensing and rights management systems for territory and window tracking, royalty calculation accuracy, rights clearance workflows, and contract compliance across music, film, television, and digital media. Use when reviewing media distribution platforms, royalty engines, music publishing systems, sync licensing tools, or content catalog management using DDEX standards and ASCAP/BMI/SESAC frameworks.

aibot88 Bundle

Audit workplace safety compliance systems for OSHA regulatory gap analysis, inspection readiness assessment, permit-to-work management, lockout/tagout program compliance, confined space entry procedures, and electrical safety evaluation. Use when reviewing EHS platforms, safety management software, permit systems, industrial hygiene tools, or compliance tracking against OSHA 29 CFR 1910/1926, NFPA 70E, and ANSI standards.

aibot88 Bundle

This skill assists with SOC2 audit preparation by automating tasks related to evidence gathering and documentation. It leverages the soc2-audit-helper plugin to generate reports, identify potential compliance gaps, and suggest remediation steps. Use this skill when the user requests help with "SOC2 audit", "compliance check", "security controls", "audit preparation", or "evidence gathering" related to SOC2. It streamlines the initial stages of SOC2 compliance, focusing on automated data collection and preliminary analysis.

aibot88 Bundle

Audit a media production studio or post-production facility. Analyzes facility scheduling and utilization, equipment lifecycle tracking, editorial and VFX pipelines, color grading and finishing workflows, digital asset management (MAM/DAM), IMF/MXF format compliance, SMPTE standards adherence, content security posture (TPN readiness), and talent/crew coordination systems.

aibot88 Bundle

Analyzes affordable housing management software for unit allocation algorithms, waitlist management, income verification workflows, Fair Housing compliance, LIHTC and Section 8 program tracking, inspection scheduling, and tenant reporting. USE THIS SKILL WHEN: - You are reviewing housing management software or tenant management systems - Someone asks about Section 8, LIHTC, or public housing program compliance - You need to audit unit allocation algorithms for fairness or bias - A project involves waitlist management, income verification, or rent calculations - You are evaluating HUD compliance (50058, EIV, PIC submissions) - Someone mentions Fair Housing, reasonable accommodation, or protected class handling - You need to review HQS/NSPIRE inspection tracking or abatement workflows - A codebase handles tenant eligibility, subsidy calculations, or housing vouchers TRIGGER PHRASES: "affordable housing", "Section 8", "LIHTC", "public housing", "waitlist management", "income verification", "Fair Housing", "HUD c

aibot88 Bundle

Analyzes mobile app binary size -- asset audit for unused images and font subsetting, code stripping with ProGuard and tree-shaking, on-demand resources, dynamic feature modules, and app thinning strategies. USE THIS SKILL WHEN: - Your app's download size is too large or growing unexpectedly - Someone asks "why is our app so big?" or "how do we reduce app size?" - You need to audit assets (images, fonts, videos) for waste or optimization - App store reviewers flag your app for exceeding cellular download limits (200MB) - You want to check if ProGuard/R8, tree-shaking, or resource shrinking is properly configured - Someone mentions ABI splits, dynamic feature modules, or on-demand resources - You are preparing for a release and want to minimize download size - Users are complaining about storage space or download times - You need to audit dependencies for size bloat or lighter alternatives TRIGGER PHRASES: "app size", "binary size", "reduce app size", "APK size", "IPA size", "unused assets", "font subsetting",

aibot88 Bundle

Audit healthcare and caregiving software for provider burnout risk factors. Analyzes workload distribution fairness, scheduling equity, documentation burden, alert fatigue indicators, break and rest compliance, overtime patterns, and systemic contributors to staff burnout. Produces a burnout risk scorecard with actionable recommendations tied to patient safety outcomes. Use when you need to audit healthcare worker burnout, review caregiver scheduling fairness, assess clinical documentation burden, detect alert fatigue, check nurse staffing ratios, evaluate EHR workflow efficiency, or review care facility labor compliance.

aibot88 Bundle

Audit a 911 dispatch or emergency response system for operational reliability and compliance. Evaluates call routing and intake (E911/NG911), unit recommendation algorithms, AVL and response time tracking, mutual aid coordination, GIS integration, ICS/NIMS compliance, and mass casualty incident capabilities. Use when building or reviewing CAD systems, PSAP software, dispatch platforms, or emergency operations center tools.

aibot88 Bundle

Audit multiplayer netcode, online game networking, and real-time synchronization. Reviews client-server authority, lag compensation, client-side prediction, server reconciliation, entity interpolation, server rewind hit detection, tick rate tuning, delta compression, bandwidth budgets, matchmaking (ELO, Glicko-2, TrueSkill), lobby systems, reconnection flows, host migration, anti-cheat architecture, and input validation. Supports Unity Mirror/NGO/Photon/FishNet, Unreal replication, Godot ENet, WebSocket/WebRTC, Colyseus, Nakama, and custom UDP/TCP stacks.

aibot88 Bundle

Runs Semgrep security scans on the current project to detect vulnerabilities, secrets leakage, and OWASP Top 10 issues. Use when the user asks for security scanning, vulnerability detection, code auditing, secrets checking, or says things like 安全扫描, 代码扫描, 扫漏洞, 安全检查, 漏洞检测, 扫一下安全.

aibot88 Bundle

Expert at quality-focused code review with security emphasis. Use when reviewing code changes, performing security audits, identifying bugs, ensuring code quality and maintainability, or analyzing pull requests for issues.

aibot88 Bundle

Quantify cyber risk using FAIR methodology with Monte Carlo simulation, assess control effectiveness against NIST CSF/CIS/ISO 27001 frameworks, evaluate risk appetite alignment, and analyze cyber insurance coverage adequacy. Covers threat landscape mapping, asset valuation, loss event frequency and magnitude estimation, annualized loss expectancy calculation, control gap analysis with ROI ranking, residual risk assessment, and insurance policy gap modeling at 90th/95th/99th percentile loss scenarios. Use when building risk registers, preparing board-level risk dashboards, evaluating security investment priorities, assessing cyber insurance coverage, or auditing any organization's risk quantification maturity per NIST RMF, ISO 27005, or FAIR standards.

aibot88 Bundle

Analyze disability services software — IEP and ISP management, person-centered planning workflows, HCBS Settings Rule compliance, accommodation tracking, assistive technology integration, EVV (Electronic Visit Verification), caregiver and DSP scheduling, and outcome measurement. Audit platforms serving individuals with intellectual, developmental, physical, and psychiatric disabilities for regulatory compliance and person-centered quality.

aibot88 Bundle

Audit mobile app revenue implementation -- in-app purchases, subscriptions, ad SDKs, paywall design, trial conversion funnels, and store billing compliance. Covers StoreKit 2, Google Play Billing, RevenueCat, AdMob, Unity Ads, receipt validation, entitlement sync, and pricing localization. Use when reviewing IAP flows, optimizing subscription conversion, checking ad mediation setup, or preparing for App Store / Play Store review.

aibot88 Bundle

Analyze defense supply chain systems — DFARS compliance assessment, CMMC cybersecurity readiness, sole-source and DMSMS risk identification, counterfeit parts prevention per SAE AS6171, ITAR export control verification, and supplier tier mapping. Audit procurement software, supplier databases, and compliance tracking tools per DLA and NIST SP 800-161 requirements.

aibot88 Bundle

Audit fintech and financial services code for KYC/AML (CIP, CDD, EDD, sanctions screening, transaction monitoring), BSA (SAR/CTR filing, FinCEN reporting, Travel Rule), Reg E (EFT error resolution, unauthorized transfer liability, provisional credit), SOX (audit trails, segregation of duties, financial controls), GLBA (privacy notices, Safeguards Rule, data sharing), and state money transmitter licensing. Use when reviewing banking, payments, lending, crypto, neobank, BNPL, or embedded finance codebases.

aibot88 Bundle

Comprehensive Microsoft 365 tenant administration skill for setup, configuration, user management, security policies, and organizational structure optimization for Global Administrators

aibot88 Bundle

Audit film, television, and digital content production budgets for above-the-line (ATL) and below-the-line (BTL) cost accuracy, SAG-AFTRA/DGA/WGA/IATSE union rate compliance, fringe and payroll tax calculations, VFX bid variance analysis, post-production cost validation, completion bond readiness, EFC (Estimated Final Cost) projections, tax incentive qualification tracking, and financing waterfall alignment using Movie Magic Budgeting, Hot Budget, or EP formats.

aibot88 Bundle

Comprehensive technology stack evaluation and comparison tool with TCO analysis, security assessment, and intelligent recommendations for engineering teams

aibot88 Bundle

Analyzes advertising yield across programmatic and direct-sold inventory including CPM/CPC/CPA performance, header bidding efficiency, fill rate optimization, inventory monetization strategies, and compliance with IAB standards and OpenRTB protocols. USE THIS SKILL WHEN: - You need to audit ad revenue performance or diagnose yield drops - Someone asks about header bidding configuration or Prebid.js optimization - You are analyzing fill rates, eCPM trends, or ad unit performance - A project involves programmatic advertising, SSP integration, or ad serving - You need to verify ads.txt, sellers.json, or supply chain compliance - Someone mentions CPM floors, bid density, or auction dynamics - You are evaluating ad quality controls, viewability, or ad-related UX impact - A codebase integrates Google Ad Manager, AdMob, Prebid, or any SSP TRIGGER PHRASES: "ad yield", "eCPM", "fill rate", "header bidding", "Prebid", "programmatic ads", "ad monetization", "CPM optimization", "ad revenue", "ads.txt", "ad serving", "SSP

aibot88 Bundle

Implement security best practices for Gamma integration. Use when securing API keys, implementing access controls, or auditing Gamma security configuration. Trigger with phrases like "gamma security", "gamma API key security", "gamma secure", "gamma credentials", "gamma access control".

aibot88 Bundle

Audit a healthcare software codebase for HIPAA Privacy and Security Rule compliance, HITECH breach notification readiness, 21st Century Cures Act interoperability requirements, and state-level regulatory gaps. Produces severity-rated findings with remediation priorities. Use when building EHR/EMR systems, patient portals, telehealth platforms, clinical decision support, or any software that handles PHI.

aibot88 Bundle

Audit codebases for cross-industry regulatory compliance across SOX, GDPR, HIPAA, PCI-DSS, CCPA/CPRA, FedRAMP, FISMA, COPPA, and FERPA. Reviews audit trail completeness (who/what/when/where/why with tamper-evident storage), data retention policies and right-to-erasure workflows, RBAC/ABAC access control with least-privilege enforcement, privileged access management and JIT elevation, change management controls (branch protection, deployment gates, emergency change process), DSAR and ROPA reporting, breach detection and 72-hour notification pipelines, incident response procedures, and whistleblower anonymous reporting with anti-retaliation safeguards. Produces a compliance matrix with per-regulation scores.

aibot88 Bundle

Use when you need to apply Java secure coding best practices — including validating untrusted inputs, defending against injection attacks with parameterized queries, minimizing attack surface via least privilege, applying strong cryptographic algorithms, handling exceptions securely without exposing sensitive data, managing secrets at runtime, avoiding unsafe deserialization, and encoding output to prevent XSS. This should trigger for requests such as Review Java code for secure coding. Part of cursor-rules-java project

aibot88 Bundle

Analyze caregiver coordination platforms for scheduling optimization, task assignment, handoff communication, family/professional caregiver integration, care plan compliance, burnout prevention, and documentation workflows. USE THIS SKILL WHEN: user mentions caregiver scheduling, home care coordination, care team management, shift handoffs, caregiver burnout, EVV (Electronic Visit Verification), home health task tracking, family caregiver support, or care plan compliance monitoring. Trigger phrases: "analyze caregiver platform", "scheduling optimization for caregivers", "handoff communication review", "caregiver burnout detection", "care plan compliance audit", "task assignment efficiency", "home care coordination analysis", "EVV integration review", "caregiver workload balancing", "shift coverage gap analysis".

aibot88 Bundle

Benchmark franchise locations by comparing top and bottom quartile performance across revenue, profitability, and operational scores. Covers same-store sales decomposition into traffic vs. ticket, KPI standardization across peer groups, operational audit correlation with financial results, NPS and online review analysis, mystery shop scoring, and brand standards compliance gaps.

aibot88 Bundle

Audit pharmaceutical QC laboratory operations -- OOS/OOT investigations, stability program trending, analytical method validation status, release testing optimization, and specification compliance. Covers ICH Q1A-Q1E stability guidelines, ICH Q2(R2) method validation, USP compendial verification, ALCOA+ data integrity, Croston shelf life estimation, and LIMS/CDS system evaluation. Use when reviewing OOS investigation quality, trending stability data, auditing method validation coverage, optimizing release testing turnaround, or assessing data integrity in QC labs.

aibot88 Bundle

Audit a pharmaceutical regulatory submission system -- evaluate eCTD backbone assembly and XML validation, CTD module completeness (Modules 1-5), FDA ESG and EMA CESP gateway integration, document authoring and publishing workflows, ICH M4/M8/E3 guideline compliance, pre-submission validation rules, 21 CFR Part 11 audit trails, and post-submission lifecycle tracking. Covers IND, NDA, BLA, ANDA, MAA, and variation submissions using Veeva Vault RIM, IQVIA, Lorenz docuBridge, or custom platforms.

aibot88 Bundle

Audit workplace risk scoring systems and occupational safety programs -- evaluate job hazard analysis (JHA/JSA) methodology and task-level hazard identification, risk matrix calibration for likelihood and consequence scales, exposure assessment accuracy for chemical, noise, vibration, and heat stress monitoring, PPE adequacy under 29 CFR 1910.132(d) and respirator fit testing per 29 CFR 1910.134, and ergonomic risk factors using REBA, RULA, NIOSH Lifting Equation, and Strain Index. Covers NIOSH hierarchy of controls (elimination, substitution, engineering, administrative, PPE), ALARP risk tolerance criteria, musculoskeletal disorder prevention programs, OSHA PEL and ACGIH TLV compliance, inter-rater reliability for risk assessors, and management of change for safety-critical controls.

aibot88 Bundle

Use when the user mentions a skill or plugin by name, asks "should I install X?", asks "what skills fit this project?", asks to audit installed skills, asks whether a skill is safe to use, or wants to customize an external skill for their stack. Evaluates skills against the user's actual project (pros / cons / conflicts / ADOPT-PARTIAL-SKIP verdict), recommends what fits, scans for security red flags before adoption, persists every decision to a registry the user keeps in Project Knowledge, and forks stack-mismatched skills into project-tailored versions. Decide once, never re-decide.

aibot88 Bundle

Audit therapy and behavioral health documentation platforms for clinical quality and regulatory compliance. Reviews SOAP, DAP, and BIRP note template structure, note completeness enforcement and timeliness deadlines, note locking and amendment/addendum workflows, DSM-5 diagnostic code completeness, ICD-10-CM crosswalk accuracy and annual update currency, diagnostic code validation and billing alignment, informed consent lifecycle (treatment, telehealth, release of information, minor consent) with electronic signature and expiration enforcement, treatment plan documentation (goals, objectives, interventions, review periods) with plan-note linkage, clinical supervision hour tracking for licensure (individual, group, direct observation), supervisory co-signature enforcement, and HIPAA compliance (RBAC with minimum-necessary access, encryption at rest and in transit, audit logging with 6-year retention, breach detection, PHI leak prevention in logs and errors, client record access and amendment rights). Supports

aibot88 Bundle

This skill enables Claude to validate authentication implementations against security best practices and industry standards. It analyzes various authentication methods, including JWT, OAuth, session-based authentication, and API keys. Use this skill when you need to perform an authentication security check, assess password policies, evaluate MFA implementation, or analyze session security. Trigger this skill with phrases like "validate authentication," "authentication check," or "authcheck."

aibot88 Bundle

Audit environmental software for EPA reporting (CEDRI, NetDMR, RCRAInfo), Clean Air Act (Title V, NESHAP, CEMS, TRI), Clean Water Act (NPDES, SWPPP, SPCC), RCRA hazardous waste tracking (manifests, biennial reports), NEPA environmental impact assessment workflows, GHG reporting, and compliance calendar management. Use when reviewing environmental management systems, permit tracking, emissions monitoring, waste management, or environmental impact assessment software.