Security

majiayu000 Bundle

Methodology for detecting client SOC patches, attacker activity, and security-state changes that occur DURING a red-team engagement — and converting those observations into deliverable findings. Built from authorized red-team work where the client patched a confirmed SQLi within 30 minutes of detection AND an external attacker locked multiple new accounts during a single test session. Use when (a) running ANY active engagement against a monitored target, (b) a previously-confirmed finding stops reproducing, (c) baseline timing shifts unexpectedly, or (d) you notice response patterns changing during testing.

majiayu000 Bundle

<!-- Copyright (c) 2026 defconxt. All rights reserved. -->

majiayu000 Bundle

Respond to a potentially compromised user account. Use when impossible travel, credential stuffing, successful phishing, or suspicious activity indicates account compromise. Investigates activity, contains the account, removes persistence, and restores access.

majiayu000 Bundle

Master application security, threat mitigation, compliance frameworks, and secure authentication. Use this as a central index to access specialized sub-skills.

majiayu000 Bundle

依存関係の脆弱性スキャン、CVE評価、レポート作成を体系化するスキル。 SCAの運用と修正計画の整理を支援する。 Anchors: • OWASP Dependency-Check / 適用: 依存スキャン / 目的: 検出の標準化 • CVSS v3.1 Specification / 適用: 重大度評価 / 目的: 優先度の整合性 • Web Application Security / 適用: 脅威評価 / 目的: リスク判定の一貫性 Trigger: Use when scanning dependencies for vulnerabilities, evaluating CVE reports, producing audit reports, or planning remediation. dependency scan, CVE, CVSS, SCA, supply chain security, audit report

majiayu000 Bundle

Generate detailed control implementation guidance, technical steps, and implementation plans for OSCAL security controls. Use this skill to create implementation narratives, technical procedures, and deployment plans.

majiayu000 Bundle

E2E Critical Coverage audit worker (L3). Validates E2E coverage for critical paths (Money 20+, Security 20+, Data 15+). Pure risk-based - no pyramid percentages.

majiayu000 Skill

UX / usability audit — heuristic evaluation of INTERACTIVE UIs (not just visual polish). Load with design when a UI "feels off", "sucks to use", is hard to learn, needs an instruction wall, or before shipping an interactive tool/editor/app. Scores the RENDERED UI against Nielsen's 10 + interaction heuristics via a SEPARATE fresh-eyes judge and returns a prioritized, severity-ranked fix list. Usability ≠ aesthetics — a beautiful UI can still be unusable; this audits the interaction.

majiayu000 Bundle

Operational security guidance for deployment, monitoring, and maintenance. Use this skill when you need to understand which middlewares to apply, configure environment variables, monitor security post-deployment, or follow the pre-deployment checklist. Triggers include "security operations", "deployment security", "security monitoring", "environment variables", "when to use middleware", "pre-deployment", "security checklist", "production security".

majiayu000 Bundle

Comprehensive knowledge for using the Bash tool in Claude Code effectively. This skill should be used when orchestrating CLI tools, configuring hooks, setting up automation workflows, managing git operations, handling multi-command patterns, or encountering Bash tool errors. Covers: PreToolUse hooks, command chaining patterns, git workflow automation, CLI tool integration, custom commands (.claude/commands/), security configurations, allowlisting, session persistence, output handling, error prevention, and troubleshooting common issues. Use when: setting up Claude Code hooks, configuring bash permissions, creating custom commands, automating git workflows, orchestrating multiple CLI tools, debugging bash command failures, implementing security guards, logging command execution, or preventing dangerous operations.

majiayu000 Bundle

Package and dependency management patterns across ecosystems (npm, pip, cargo, maven). Covers lockfiles, semantic versioning, dependency security scanning, update strategies, monorepo workspaces, transitive dependencies, and avoiding dependency hell.

majiayu000 Bundle

Implement and verify SwiftUI API parity for Raven UI components. Use when asked to audit missing or mismatched SwiftUI views/modifiers, add parity components, wire examples into `Examples/TodoApp`, validate rendering in a browser (including dark mode), and prepare branch/PR deliverables.

majiayu000 Bundle

Use to assess Privacy by Design compliance and GDPR/data protection alignment for a feature or system.

majiayu000 Bundle

Understand the defense-in-depth security architecture of Secure Vibe Coding OS. Use this skill when you need to understand the overall security approach, the 5-layer security stack, OWASP scoring, or when to use other security skills. Triggers include "security architecture", "defense in depth", "security layers", "how does security work", "OWASP score", "security overview", "security principles".

majiayu000 Bundle

Run a hierarchical documentation audit for BioETL using cascade decomposition across doc domains (architecture, providers, contracts, operations, onboarding), aggregate findings into one prioritized report, and generate an actionable remediation plan. Use when users request large-scale doc audits, stale-doc cleanup, or coordinated doc reconciliation after major refactors/releases.

majiayu000 Bundle

Background knowledge about Activity Intents on the Fediverse, based on FEP-3b86 (DRAFT status). Covers how servers publish machine-readable URL templates via WebFinger for cross-server social interactions (Follow, Like, Announce, Create, etc.), the rel namespace convention (https://w3id.org/fep/3b86/*), RFC 6570 URI Templates with parameter placeholders, the 28 standard activity intents plus the Object intent, the special Create intent for pre-populating new content, workflow callbacks (on-success, on-cancel), the remote server interaction flow, the fallback chain (Activity Intents → oStatus subscribe → hard-coded URLs), security considerations (CSRF, open redirects, interstitial pages), the history from oStatus remote follow through Mastodon's authorize_interaction endpoint, the Twitter Web Intents inspiration, comparison with Fedilinks (FEP-07d7), and implementations across Emissary, Forte, Loops, PieFed, streams, and WordPress. Load when the user asks about implementing remote interaction buttons; cross-se

majiayu000 Bundle

PayFast payment gateway integration specialist for FastAPI and Node.js. Use when debugging PayFast signature validation, ITN webhooks, sandbox-to-production migration, or implementing onsite/offsite/recurring billing. Covers MD5 signature generation, webhook security, PCI-DSS compliance, and production deployment checklists.

majiayu000 Bundle

Hybrid Claude-Flow V3 integration architecture: hook execution order, system roles, background workers, production features (DDD/ADR/security), and integration rules. Use when working with Claude-Flow hooks, workers, or production features.

majiayu000 Bundle

Find split ownership — the same concept defined in multiple files, with duplicate types, shadow constants, orphaned loaders, and zombie exports. Use when codebase feels tangled, after major refactors, or when you find code that looks alive but nothing imports it.

majiayu000 Bundle

Configures JWT Bearer authentication for .NET APIs. Includes token generation, validation, refresh tokens, and user context extraction from claims.

majiayu000 Bundle

<!-- Copyright (c) 2026 defconxt. All rights reserved. -->

majiayu000 Bundle

Intercept Android app HTTPS traffic using BlueStacks and Burp Suite on macOS. Use when: (1) Need to analyze Android app API calls, (2) App ignores HTTP proxy, (3) App uses SSL pinning that blocks interception, (4) Need to install Burp CA as system certificate. Covers ADB setup, proxy configuration, Zygisk SSL unpinning, and Magisk trustusercerts module for system CA installation.

majiayu000 Bundle

<!-- Copyright (c) 2026 defconxt. All rights reserved. -->

majiayu000 Bundle

Implements a bounded product-code change through the smallest complete root-cause solution. Use for scoped delivery; not for planning, review, audit, upgrades, modernization, or tuning.

majiayu000 Bundle

Add authentication with Better Auth (TypeScript). Use for email/password, OAuth providers (Google, GitHub), 2FA/MFA, passkeys/WebAuthn, sessions, RBAC, rate limiting.

majiayu000 Bundle

<!-- Copyright (c) 2026 defconxt. All rights reserved. -->

majiayu000 Bundle

Explain MotherDuck security, governance, and access-control patterns. Use when a security_compliance_owner, technical_owner, or application_builder is asking about residency, access boundaries, service accounts, isolation, sharing, or governance posture.

majiayu000 Bundle

Implement PCI DSS compliance requirements for secure handling of payment card data and payment systems. Use when securing payment processing, achieving PCI compliance, or implementing payment card security measures.

majiayu000 Bundle

シークレット管理アーキテクチャの設計・実装スキル。 Vault/KMS/Secrets Manager統合、キーローテーション、アクセス制御マトリクスを体系的に設計する。 シークレット分類からライフサイクル管理まで、エンタープライズグレードの機密情報管理戦略を提供。 Anchors: • Clean Architecture (Robert C. Martin) / 適用: 依存関係ルール / 目的: シークレット管理層の分離 • Zero Trust Architecture (NIST SP 800-207) / 適用: 認証・認可 / 目的: 最小権限アクセス • OWASP Secrets Management Cheat Sheet / 適用: 実装パターン / 目的: セキュリティベストプラクティス • HashiCorp Vault Best Practices / 適用: Vault統合 / 目的: シークレットバックエンド設計 Trigger: Use when designing secret management architecture, integrating Vault/KMS, planning key rotation, or creating access control matrices. secret management, vault integration, key rotation, access control, KMS, secrets manager, credential management

majiayu000 Bundle

Application security specialist covering OWASP top 10, secure coding, and vulnerability prevention

majiayu000 Bundle

This skill helps write secure web applications. Use when working on any web application to ensure security best practices are followed.

majiayu000 Bundle

Guidelines for generating validation/audit reports with UUID chains, progressive writing, and UTC+7 timestamps

majiayu000 Bundle

Implement FastAPI dependency injection with Depends(), security dependencies, database session management, request-scoped deps, and testing with overrides. Use when the user builds FastAPI endpoints, manages database connections, implements auth, or asks about dependency injection. Trigger when you see repeated setup logic in endpoint functions that should be extracted to dependencies.

majiayu000 Bundle

Add, repair, audit, or standardize `rimraf`-based cleanup in Node.js/TypeScript projects with deterministic, cross-platform `package.json` scripts. Use when users ask to add or fix `clean`/`prebuild`, replace `rm -rf` or Windows delete commands (`rmdir`, `del`), clear artifacts (`dist`, `build`, `coverage`, `.cache`, `.turbo`, `*.tsbuildinfo`), enforce CI-safe script behavior, or verify cleanup reliability on Windows and Unix.

majiayu000 Bundle

Extended deep-dive reverse engineering with advanced tracing, deobfuscation, and exploit validation.

majiayu000 Bundle

Creates evidence-backed current or target architecture diagrams. Use when relationships need visualization; not for UI design, architecture audit, or invented structure.