Security

tools-only Bundle

Get a second opinion from Gemini on code, architecture, debugging, or security. Uses direct Gemini API calls — no CLI dependencies. Trigger with 'ask gemini', 'gemini review', 'second opinion', 'peer review', or 'consult gemini'.

tools-only Bundle

This skill should be used when the user asks to "attack Active Directory", "exploit AD", "Kerberoasting", "DCSync", "pass-the-hash", "BloodHound enumeration", "Golden Ticket", ...

tools-only Bundle

Audit and manage the full project context landscape: CLAUDE.md memory hierarchy, project documentation, markdown footprint, and content overlap. Detects project type, scores quality, flags stale docs, and reports total context cost. Trigger with 'audit context', 'audit memory', 'update CLAUDE.md', 'restructure memory', 'session capture', 'check project docs', 'markdown footprint', or 'what docs does this project need'.

tools-only Bundle

Audit and manage the full project context landscape: CLAUDE.md memory hierarchy, project documentation, markdown footprint, and content overlap. Detects project type, scores quality, flags stale docs, and reports total context cost. Trigger with 'audit context', 'audit memory', 'update CLAUDE.md', 'restructure memory', 'session capture', 'check project docs', 'markdown footprint', or 'what docs does this project need'.

tools-only Bundle

Security vulnerability detection and remediation specialist. Use PROACTIVELY after writing code that handles user input, authentication, API endpoints, or sensitive data. Key capabilities: RLS policy validation, multi-tenant isolation checks, secrets detection, OWASP Top 10 scanning, admin client misuse flagging. Trigger phrases: 'review security', 'check for vulnerabilities', 'audit RLS policies', 'is this safe'. Do NOT use for general code quality — use code-quality-reviewer instead. <example> Context: User wrote new API endpoints that handle user input user: "I just added server actions for the billing feature that process credit card metadata. Can you check for security issues?" assistant: "I'll audit the billing server actions for input validation, authentication checks, RLS policy coverage, and sensitive data exposure." <commentary>Triggers because the user wrote code handling sensitive data (billing) and explicitly asks for a security review.</commentary> </example> <example> Context: User asks to audi

qhjqhj00 Skill

Evaluates the trade-off between energy efficiency and physical-layer security in an IRS-assisted MISO network with cooperative jamming. Probes how varying transmit power constraints and secrecy rate thresholds impact system performance compared to baseline beamforming strategies. Use when the user has predictions and gold and needs to compute Energy Efficiency.

georgeqle Skill

Audit codebase for opportunities to reduce lines of code while preserving functionality, performance, and quality

georgeqle Skill

Analyze a YouTube channel with evidence-first metadata, transcripts, performance fields, portfolio shape, and repeated content-quality patterns

georgeqle Skill

Audit and reconcile the shared project glossary — find stale terms, missing definitions, conflicts, and gaps across research docs

georgeqle Skill

Audit and implement behavior-preserving cleanup across types, dead code, dependencies, errors, and comments

georgeqle Skill

Use only for developer-facing products; audit docs for quickstart clarity, examples, API reference, troubleshooting, and migration paths

georgeqle Skill

Use only for developer-facing products; audit docs for quickstart clarity, examples, API reference, troubleshooting, and migration paths

georgeqle Skill

Audit and reconcile the shared project glossary — find stale terms, missing definitions, conflicts, and gaps across research docs

georgeqle Skill

Audit and implement behavior-preserving cleanup across types, dead code, dependencies, errors, and comments

georgeqle Skill

Use only for developer-facing products; audit docs for quickstart clarity, examples, API reference, troubleshooting, and migration paths

georgeqle Skill

Use only for developer-facing products; audit docs for quickstart clarity, examples, API reference, troubleshooting, and migration paths

georgeqle Skill

Cross-document consistency audit across research outputs — find contradictions, stale assumptions, and gaps

bytesagain Bundle

Scan meme coins for scam signals, rug-pull risk, and on-chain audit flags. Use when evaluating tokens, auditing contracts, checking liquidity lock status.

levalencia Bundle

This skill should be used when establishing comprehensive QA testing processes for any software project. Use when creating test strategies, writing test cases following Google Testing Standards, executing test plans, tracking bugs with P0-P4 classification, calculating quality metrics, or generating progress reports. Includes autonomous execution capability via master prompts and complete documentation templates for third-party QA team handoffs. Implements OWASP security testing and achieves 90% coverage targets.

levalencia Skill

Designs and implements backend systems including REST APIs, microservices, database architectures, authentication flows, and security hardening. Use when the user asks to "design REST APIs", "optimize database queries", "implement authentication", "build microservices", "review backend code", "set up GraphQL", "handle database migrations", or "load test APIs". Covers Node.js/Express/Fastify development, PostgreSQL optimization, API security, and backend architecture patterns.

levalencia Skill

ISO 13485 internal audit expertise for medical device QMS. Covers audit planning, execution, nonconformity classification, and CAPA verification. Use for internal audit planning, audit execution, finding classification, external audit preparation, or audit program management.

levalencia Bundle

Safely package codebases with repomix by automatically detecting and removing hardcoded credentials before packing. Use when packaging code for distribution, creating reference packages, or when the user mentions security concerns about sharing code with repomix.

levalencia Bundle

Provides REST API design standards and best practices for Spring Boot projects. Use when creating or reviewing REST endpoints, DTOs, error handling, pagination, security headers, HATEOAS and architecture patterns.

levalencia Skill

ISO 27001 ISMS implementation and cybersecurity governance for HealthTech and MedTech companies. Use for ISMS design, security risk assessment, control implementation, ISO 27001 certification, security audits, incident response, and compliance verification. Covers ISO 27001, ISO 27002, healthcare security, and medical device cybersecurity.

sandeeprdy1729 Skill

Comprehensive guide to risk management. Master the concepts, implementation, best practices, and real-world applications of risk management in professional environments.

sandeeprdy1729 Skill

Comprehensive guide to quantum cryptography. Master the concepts, implementation, best practices, and real-world applications of quantum cryptography in professional environments.

jantoniofc Skill

Trace every user-facing button/touchpoint through its full state change sequence to find bugs where functions individually work but cancel each other out, produce wrong final state, or leave the UI in an inconsistent state. Use when: systematic debugging found no bugs but users report broken butt...

jantoniofc Bundle

Build robust backend systems with modern technologies (Node.js, Python, Go, Rust), frameworks (NestJS, FastAPI, Django), databases (PostgreSQL, MongoDB, Redis), APIs (REST, GraphQL, gRPC), authentication (OAuth 2.1, JWT), testing strategies, security best practices (OWASP Top 10), performance opt...

jantoniofc Bundle

Technology stack evaluation and comparison with TCO analysis, security assessment, and ecosystem health scoring. Use when comparing frameworks, evaluating technology stacks, calculating total cost of ownership, assessing migration paths, or analyzing ecosystem viability.

sickn33 Skill

Comprehensive security auditing workflow covering web application testing, API security, penetration testing, vulnerability scanning, and security hardening.

sickn33 Skill

Audit and rewrite content to remove 21 categories of AI writing patterns with a 43-entry replacement table

sickn33 Skill

Web application security testing workflow for OWASP Top 10 vulnerabilities including injection, XSS, authentication flaws, and access control issues.

ranbot-ai Skill

Expert in threat modeling methodologies, security architecture review, and risk assessment. Masters STRIDE, PASTA, attack trees, and security requirement extraction. Use for security architecture r...

sickn33 Skill

WordPress plugin development workflow covering plugin architecture, hooks, admin interfaces, REST API, and security best practices.

danstrem2 Bundle

Use when writing tests, creating test strategies, or building automation frameworks. Invoke for unit tests, integration tests, E2E, coverage analysis, performance testing, security testing.

danstrem2 Bundle

別駭我！基本安全檢測 — Security self-check for Clawdbot/Moltbot. Run a quick audit of your clawdbot.json to catch dangerous misconfigurations — exposed gateway, missing auth, open DM policy, weak tokens, loose file permissions. Auto-fix included. Invoke: "run a security check" or "幫我做安全檢查".