Security

organvm-iv-taxis Skill

Parse a session transcript into a structured Session Governance Index — an annotated bibliography of every file modified and commit made, internal-energy accounting (tool uses, estimated tokens), shipped-vs-tasked atom tally, and classification of missing items as Gaps or Vacuums. Triggers on "visibility-schema-substrate-sweep", "session cascade audit", "session governance audit", or any request to summarize what a session actually produced versus what it was asked to produce.

mvanhorn-printing-press-libra Skill

Terminal-native CLI for Bird's Conversations and SMS APIs with offline search, batch reconcile, and a local SQLite mirror. Trigger phrases: `send an SMS via Bird`, `audit Bird message delivery`, `search Bird conversations`, `block list opt-outs from Bird`, `Bird tenant readiness check`, `use bird`, `run bird`.

mvanhorn-printing-press-libra Skill

Pakistan's clearing-layer data as a local research panel with a coverage audit and an arithmetic self-check, not another dashboard. Trigger phrases: `foreign investor flows on the PSX`, `FIPI and LIPI for last week`, `which sectors did foreigners buy`, `short interest on a Pakistani stock`, `free float for a PSX symbol`, `MTS open positions`, `use nccpl`, `run nccpl`.

mvanhorn-printing-press-libra Skill

Every UniFi Network API operation, plus drift detection, topology, and rule prediction no other UniFi tool has. Trigger phrases: `audit my unifi network`, `what changed on my network`, `list unifi devices`, `check unifi firewall rules`, `unifi port audit`, `use unifi-pp-cli`, `run unifi-pp-cli`.

mvanhorn-printing-press-libra Skill

Search, organize, export, and audit your Cosmos inspiration library from the terminal. Trigger phrases: `search Cosmos`, `find Cosmos inspiration`, `show my Cosmos collections`, `save this to Cosmos`, `export a Cosmos collection`, `compare Cosmos boards`, `audit Cosmos attribution`, `what changed in my Cosmos library`.

mvanhorn-printing-press-libra Skill

Generate and audit Microsoft Clarity browser instrumentation from the terminal. Trigger phrases: `generate a Clarity snippet`, `audit Clarity instrumentation`, `add Microsoft Clarity identify call`.

mvanhorn-printing-press-libra Skill

Lobbying disclosure records with local sync, entity resolution, and evidence-grade exports. Trigger phrases: `search lobbying filings`, `resolve an LDA client`, `audit lobbying spend`, `check LD-203 contributions`, `export lobbying graph`, `use LDA.gov`, `run lda-gov`.

mvanhorn-printing-press-libra Skill

Every 3CX Configuration API (XAPI) object in one Go binary, with a local mirror of your whole PBX, offline search, config diffing, and cross-entity auditing no 3CX tool has. Trigger phrases: `audit my 3cx config`, `what changed on the pbx`, `provision 3cx extensions`, `queue sla report 3cx`, `trace extension 214`, `use 3cx-xapi`, `run 3cx-xapi`.

mvanhorn-printing-press-libra Skill

Create and audit Printify products with manifest-driven image uploads, personalization checks, and local proofing. Trigger phrases: `create Printify products`, `upload Printify artwork`, `audit Printify personalization`, `check Printify product drift`, `run Printify`, `use Printify`.

mvanhorn-printing-press-libra Skill

Every Twilio SendGrid endpoint, plus offline suppression diffs, stats time-series rollups, and a template-variable... Trigger phrases: `send transactional mail`, `manage SendGrid suppressions`, `audit SendGrid bounces`, `SendGrid templates lint`, `SendGrid stats rollup`, `use sendgrid`, `run sendgrid`.

mvanhorn-printing-press-libra Skill

The full Supabase Management API (108 endpoints) plus a local SQLite cache of orgs, projects, functions, branches, and secret names — powering cross-project queries no live API answers in one call, with Auth Admin lookup, PostgREST schema introspection, and Storage usage rollup on top. Trigger phrases: `supabase auth admin lookup`, `supabase secret name audit`, `supabase branches drift`, `supabase project estate rollup`, `supabase storage usage`, `supabase pgrst schema`, `use supabase`, `run supabase`. Anti-triggers: `supabase start` (use the official supabase CLI), `supabase db push` (official CLI), `supabase gen types` (official CLI), supabase realtime subscribe (WebSocket — out of scope).

mvanhorn-printing-press-libra Skill

AgentMail operations with local memory, safe sends, and fleet-wide insight. Trigger phrases: `check my AgentMail inboxes`, `search AgentMail messages`, `review a draft before sending`, `find unresolved AgentMail follow-ups`, `audit scheduled AgentMail sends`, `use AgentMail`, `run AgentMail`.

mvanhorn-printing-press-libra Skill

Every DNS Made Easy operation, plus a local record store that makes cross-zone search, drift detection, and 'where is this IP used' instant and offline. Trigger phrases: `where is this IP used in DNS Made Easy`, `export my DNS Made Easy zone`, `what DNS records changed`, `bulk update DNS records across zones`, `audit my DNS zones`, `use dnsmadeeasy`, `run dnsmadeeasy`.

mvanhorn-printing-press-libra Skill

A Go CLI for Lunch Money's official v2 OpenAPI — offline SQLite store, subscription detection, and bulk smart... Trigger phrases: `categorize my transactions`, `find duplicate charges`, `subscription audit`, `what's my budget burn`, `net worth at a date`, `use lunch-money-pp`, `run lunch-money`.

mvanhorn-printing-press-libra Skill

Every Trigger.dev management endpoint, plus offline FTS over runs, span-cost rollups, and zombie-schedule detection no other tool gives you. Trigger phrases: `trigger.dev failed runs`, `trigger.dev cost rollup`, `trigger.dev schedule health`, `audit trigger.dev env vars`, `watch trigger.dev failures`, `use trigger-dev`, `run trigger-dev`.

mvanhorn-printing-press-libra Skill

The only machine-readable view of Pakistani custody data — per-security CDS penetration and a twenty-year eligibility record, from a source no tool has ever automated. Trigger phrases: `how much of this symbol is in CDS`, `CDS eligibility history for`, `has this PSX symbol been reused`, `government stake in this Pakistani company`, `CDC statistics`, `use cdc-pakistan`, `run cdc-pakistan`.

mvanhorn-printing-press-libra Skill

Every Admin By Request portal action, plus a local SQLite mirror of audit, events, inventory and requests for ad-hoc... Trigger phrases: `list pending admin by request elevations`, `approve adminbyrequest request`, `deny adminbyrequest request`, `generate offline elevation PIN`, `check who keeps requesting admin elevation`, `sync admin by request audit log`, `use adminbyrequest`, `run adminbyrequest`.

mvanhorn-printing-press-libra Skill

Every Google Search Console feature you'd reach for, plus an offline SQLite cache that powers period compare, quick... Trigger phrases: `search console performance for example.com`, `quick wins for sc-domain:example.com`, `cannibalization audit on this site`, `compare last 28 days to prior period in GSC`, `why did traffic drop on this property`, `which pages are decaying`, `use google-search-console`, `run gsc`.

mvanhorn-printing-press-libra Skill

A focused per-module ServiceTitan CLI for the Pricebook — sync once, then audit markup, costs, vendor parts, and warranties the ST UI cannot. Trigger phrases: `use servicetitan-pricebook`, `run servicetitan-pricebook`, `sync the pricebook`, `check markup drift`, `reconcile a vendor quote`, `update pricing from this invoice`, `audit warranty text`, `find duplicate parts in the pricebook`, `find SKUs missing a 2M part number`, `rewrite this pricebook description`, `find a part for`, `pricebook health check`, `which prices drifted`.

jeremylongshore Bundle

Optimize Devin Desktop (formerly Windsurf) licensing through current plan, seat, quota, and extra-usage analysis. Use when right-sizing a team, forecasting usage, or reducing spend. Trigger with "windsurf cost", "windsurf billing", "seat audit", "extra usage", or "windsurf budget".

jeremylongshore Bundle

Audit and improve a Claude Code skill using Skill Crossroads. Use when the user says "audit my skill", "grade my skill", "check my skill quality", "why doesn't my skill trigger", or "lint my SKILL.md" — or before publishing any skill, to get an evidence-cited quality score, ranked fix list, and badge. Trigger with "audit my skill".

aiskillstore Bundle

Deslop, humanize, edit, or audit AI-sounding, robotic, generic, corporate, or ChatGPT-like copy while preserving the writer's voice.

aiskillstore Bundle

Standardising Technical Output Writing (STOW) applies exact output contracts, preserves code, commands, paths, identifiers, quotations, and data values, and reviews editable prose for focus, technical clarity, terminology, evidence strength, and recurrent synthetic-writing pathologies. Use when the user explicitly invokes STOW or asks to write, rewrite, review, or validate a README, runbook, procedure, plan, audit, handoff, public technical document, controlled-technical text, mixed prose with protected literals, or an exact JSON, JSONL, YAML, or Markdown artefact.

aiskillstore Bundle

DDD compliance check for Java projects with auto mode detection. Use when user mentions "DDD check", "DDD audit", "check my changes", "architecture review", "pre-commit check", "DDD compliance", "review this code", or "check entire project".

aiskillstore Bundle

Comprehensive testing and validation of Claude skills. Use this skill whenever the user wants to test, validate, audit, or quality-check a skill — whether they say "test my skill", "check this skill works", "validate my skill", "run skill-check", or anything similar. Also trigger when the user asks things like "does this skill handle edge cases?", "what's wrong with my skill?", "find problems in my skill", "is this skill secure?", "does my skill follow best practices?", or "how robust is this skill?". Even if they just say "check this" and point at a skill directory, use skill-check. This skill covers triggering tests, output quality tests, input/output contract validation, script execution checks, security review, best practices auditing, and multi-file skill analysis. Do NOT use for creating or editing skills (that's skill-creator) — skill-check is purely about testing and reporting on existing skills.

aiskillstore Bundle

自动化图片内容审核工作流。全量压缩后批量审核，支持鉴黄、政治、暴恐识别，以表格汇总结果。Use when auditing images, checking image content, or scanning photos for inappropriate material.

aiskillstore Bundle

Full-project DDD compliance audit — scans ALL Java files against every DDD layer rule. Use for architecture reviews, onboarding, and pre-release checks.

aiskillstore Bundle

Use when a user wants to review the public security posture of an AI-generated, vibe-coded, or deployed website through an authorized passive scan, especially for security headers, exposed secrets, source maps, public files, and deployment mistakes.

aiskillstore Bundle

Audit software releases with unforgiving standards. Use when soft approvals or incomplete scope could create deployment risk. Execute a full-lifecycle audit across fifteen core domains, including security, architecture, UX, and privacy. Apply deterministic scoring, evaluate hard evidence, and enforce release gates with hard-stop rules regardless of the overall score.

aiskillstore Bundle

Draft, promote, archive, and supersede ADR-style decision records (types are open: architecture, product, security, policy, legal, …) and keep INDEX.md and cross-links generated, via the bundled scripts/decisions.py tool. Use when creating or promoting decision drafts, superseding or archiving a decision, fixing a promotion breach, or running build, check, promote, rename-draft-id, or install.

aiskillstore Bundle

Reviews code for security vulnerabilities, performance issues, and best practices. Use when reviewing code, performing security audits, checking for code quality, reviewing pull requests.

aiskillstore Bundle

Draft, audit, or revise point-by-point reviewer response letters for Nature-family manuscript revisions. Use when the user provides reviewer comments, editor decision letters, revision notes, response drafts, or asks how to respond to major/minor revision requests, rebuttal letters, response to reviewers, peer-review reports, 审稿意见回复, 逐点回复, 修回信, 大修回复, 小修回复, or 如何回复 reviewer. Also trigger on general peer-review response needs during academic writing/revision even without the word "Nature", such as replying to reviewers for any journal, writing a rebuttal/response letter, handling revision comments, and Chinese phrasings like 回复审稿人、审稿回复、返修、 修改稿回复、写rebuttal、回应审稿意见、应对审稿.

aiskillstore Bundle

Security review guidance and domain checklists based on NIST, CIS, OWASP, MITRE ATT&CK, SLSA, and OpenSSF frameworks.

aiskillstore Bundle

Guides Stripe integration decisions — API selection (Checkout Sessions vs PaymentIntents), Connect platform setup (Accounts v2, controller properties), billing/subscriptions, Treasury financial accounts, integration surfaces (Checkout, Payment Element), migrating from deprecated Stripe APIs, and security best practices (API key management, restricted keys, webhooks, OAuth). Use when building, modifying, or reviewing any Stripe integration — including accepting payments, building marketplaces, integrating Stripe, processing payments, setting up subscriptions, creating connected accounts, or implementing secure key handling.

aiskillstore Bundle

依据中国工信部《互联网网站适老化通用设计规范》和《移动互联网应用(APP)适老化通用设计规范》，对项目代码进行适老化合规检测，生成问题报告、修改建议，并支持自动修复。

aiskillstore Bundle

Audit and migrate existing Markdown rendering to Markstream. Use when Codex needs to replace another renderer, classify direct vs custom vs plugin-heavy usage, preserve behavior during adoption, migrate custom renderers into scoped Markstream overrides, or decide when `nodes` streaming is worth adopting.