Security

trilwu Bundle

Enumerate and exploit network services including SMB, FTP, SSH, RDP, HTTP, databases (MySQL, MSSQL, PostgreSQL, MongoDB), LDAP, NFS, DNS, and SNMP. Use when testing network service security or performing port-based exploitation.

everyone-needs-a-copilot Bundle

Cryptographic patterns for encryption, hashing, key derivation functions (KDFs), TLS configuration, JWT signing, password storage, and authentication tokens — with deterministic weak-algorithm detection script. Identifies use of deprecated algorithms (MD5, SHA1, DES, ECB mode) and insecure configurations. Use proactively when reviewing code that uses encryption, hashing, or key management, auditing password storage or authentication tokens, checking TLS configuration, reviewing JWT signing algorithms, or any context where cryptographic primitives are chosen or configured. Run the validator for deterministic weak-algorithm detection.

everyone-needs-a-copilot Bundle

Use when a request needs specialist routing before implementation, including bugs, feature work, architecture changes, UX work, security-sensitive changes, or tc-backed delivery planning.

trilwu Skill

Investigate a compromised or suspicious Windows host from on-disk artifacts -- triage collection, evidence of execution (Prefetch, Amcache, Shimcache, SRUM, UserAssist, BAM), the event-log workhorses by ID (Security 4624/4688/4720/7045/1102, Sysmon, PowerShell 4104, RDP, WMI), persistence hunting across every autostart, lateral-movement traces, $MFT/USN filesystem forensics, anti-forensics detection, and building a super-timeline with the Eric Zimmerman suite, Chainsaw, Hayabusa, and Plaso. Use when triaging a compromised or suspicious Windows host, working through EVTX/Sysmon logs, reconstructing what executed on a Windows machine, hunting persistence and lateral-movement traces, or analyzing a KAPE/triage collection.

trilwu Bundle

Audit and exploit smart contracts and Web3 applications including reentrancy, integer overflow, access control flaws, and DeFi-specific vulnerabilities. Use when testing blockchain applications or performing smart contract audits.

7a336e6e Skill

Implement database security through encryption, Row-Level Security, connection hardening, backups, and audit logging.

everyone-needs-a-copilot Bundle

Use when you need specialist role guidance for architecture, engineering, QA, security, docs, devops, service design, UX, UI design, UI implementation, or industrial design in a Codex session or delegated subagent.

caphtech Bundle

AI実行環境のシークレット境界設定。settings.json permissions.denyルールを生成し、シークレットへの事故的アクセスを防止する。

caphtech Bundle

コード変更の影響範囲分析スキル。変更が引き起こし得る影響を影響面（code/interface/data/external/config/runtime/security/observability）ごとに整理し、「どこをレビューし、何をテストし、何を観測すべきか」を根拠つきで提示する。トリガー条件: 「影響範囲を分析して」「この変更の影響は？」「どこまで波及する？」、PRレビュー依頼時、リファクタ/仕様変更時、障害対応で「原因箇所の周辺影響」を確認したい時。注意: 変更の是非の最終判断は行わない。実行時にしか分からない挙動は推定と不確実性を提示する。

7a336e6e Skill

Analyze third-party libraries and supply chain risks to ensure no compromised or vulnerable code enters the project.

7a336e6e Skill

Configure Flask middleware for CORS, rate limiting, security headers, and request logging.

7a336e6e Skill

Perform a rigorous, full-spectrum security assessment of the codebase, infrastructure, and logic flows to identify and remediate vulnerabilities.

flonat Bundle

Compile one specified LaTeX document, resolve build errors, audit citations, and report build quality. Use when a .tex source must be built or a concrete compilation failure repaired. Not for corpus-wide build checks, visual polish after a clean build, or creating a project; use $latex-health-check, $latex-polish, or $latex-scaffold.

flonat Skill

Compare two LaTeX files, project directories, or Git revisions and produce human-readable plus machine-readable severity-graded semantic changes. Use when determining what changed between manuscript versions or preparing a revision audit bundle. Not for proofreading one version; use $proofread.

flonat Skill

Audit the Research Vault concept wiki read-only for fragmentation, missing tags, write-only concepts, and draft or anatomy conformance, producing a Markdown report. Use when assessing wiki quality before maintenance. Not for promoting or merging concepts; use $wiki-grow or $wiki-merge.

flonat Skill

Extract and compare data-collection methods across a set of empirical papers. Use when the user needs a cross-paper methods matrix or wants to assess how a literature gathers evidence.

vanman2024 Bundle

Backend API authentication patterns with Clerk JWT middleware and route protection. Use when building REST APIs, GraphQL APIs, protecting backend routes, implementing JWT validation, setting up Express middleware, or when user mentions API authentication, backend security, JWT tokens, or protected endpoints.

flonat Skill

Install or reconcile research-project safety rules and protected folder boundaries for data, code, outputs, and paper sources. Use when a project lacks guardrails or is being migrated into the governed structure. Not for auditing the full research scaffold; use $audit-project-research.

vanman2024 Bundle

Clerk session handling, JWT verification, token management, and multi-session workflows. Use when implementing session validation, JWT claims customization, token refresh patterns, session lifecycle management, or when user mentions session errors, authentication tokens, JWT verification, multi-device sessions, or session security.

vanman2024 Bundle

Webhook validation patterns with signature verification, event logging, and testing tools. Use when implementing webhooks, validating webhook signatures, securing payment webhooks, testing webhook endpoints, preventing replay attacks, or when user mentions webhook security, Stripe webhooks, signature verification, webhook testing, or event validation.

flonat Skill

Check whether the current session has coherent guidance, focus, handoff state, working-tree ownership, and enough context to proceed safely. Use when starting, resuming, or diagnosing a confused session. Not for auditing the machine or deployed AI infrastructure; use $system-audit.

flonat Skill

Review user-facing documentation for accuracy, consistency, and completeness across private, public, nested repos, and the user manual. Use when docs feel stale, after major changes, or before sharing. (Replaces `repo-doc-audit`)

flonat Bundle

Deliver a fast pre-commit safety scan: file size, anonymity (author / affiliation strings in tex/bib), hardcoded secrets, and invisible-Unicode carriers. Use when the user requests a fast pre-commit safety scan: file size, anonymity (author / affiliation strings in tex/bib), hardcoded secrets, and invisible-Unicode carriers. Triggers: 'audit before commit', 'check before push', 'pre-commit scan', 'safety check'.

vanman2024 Bundle

RLS policy testing patterns for Supabase - automated test cases for Row Level Security enforcement, user isolation verification, multi-tenant security, and comprehensive security audit scripts. Use when testing RLS policies, validating user isolation, auditing Supabase security, verifying tenant isolation, testing row level security, running security tests, or when user mentions RLS testing, security validation, policy testing, or data leak prevention.

dmzoneill Skill

Audit open MRs/PRs for missing Jira issue references. Scans title, description, commits for Jira keys. Optionally creates Jira issues for unlinked MRs. Use when user says "audit PRs", "check Jira links on MRs", or "sprint hygiene".

dmzoneill Skill

Run comprehensive network and TLS security audit - port scan, vulnerability scan, TLS cert inspection, cipher analysis, HTTP headers, SSH host keys. Use when user says "security audit", "network scan".

dmzoneill Skill

Create a Konflux release to push images from staging to production. Verifies image exists, runs security scan, validates app-interface, creates release. Use when user says "release to prod", "promote to production".

flonat Skill

Map claims in a literature to independent replications, robustness checks, failures, and unresolved evidence gaps. Use when assessing the empirical reliability of a body of findings rather than reproducing one project's code. For package rerunnability, use $replication-package.

flonat Bundle

Bootstrap a university course or module folder with the canonical teaching structure, guidance, and starter files. Use when creating or migrating a course workspace. Not for checking an existing course without modifying it; use $audit-project-course.

flonat Bundle

Assemble, anonymize, validate, or audit a research replication package. Use when preparing code and permitted data for reviewer or public release. Not for auditing code quality alone; use $code-suite or $replication-audit as appropriate.

aquariuscook Bundle

Credential exposure detection, OAuth flow validation, API key management testing, and data sanitization verification for n8n workflows. Use when validating n8n workflow security.

flonat Bundle

Audit a paper and submission package against current official venue requirements for its venue, track, article type, cycle, and stage. Use when checking templates, limits, anonymity, declarations, or required files before submission or inside $pre-submission-report. Not for venue recommendations.

dmzoneill Skill

Attach the current AI session context to a Jira issue as a formatted comment. Useful for investigation, audit trail, handoff, debugging. Use when user says "attach session to Jira", "document on Jira", or "export context to AAP-XXXXX".

microsoft Bundle

Runs a security scan on a deployed Power Pages site, fetches the latest scan report, and produces a plain-language summary. Scans the live site's public surface for vulnerabilities and surfaces issues by severity. Use when the user wants to scan, check, test, audit, or assess a published site, find vulnerabilities on production, view the latest scan report, see previous scan results, run a security audit, or asks "how safe is my live site?", "is my site vulnerable?", "audit my production site" — even if they say "find issues" or "check for problems" without mentioning "scan" or "security".

mashharuki Bundle

Marp形式プレゼンテーションの専門レビュー・評価・改善スキル。 10軸スコアリング（100点満点）で品質を定量評価し、具体的な改善コード付きで提案する。 Use when the user asks to: - Review, evaluate, or critique a Marp presentation / プレゼンをレビュー / 評価 / 添削 - Improve, polish, or upgrade existing slides / スライドを改善 / ブラッシュアップ - Check slide quality, score slides, or audit a deck / スライドの品質チェック / 採点 - "このプレゼンどう？" "スライドを見てほしい" "プレゼン資料のフィードバック" Reads .md files with Marp frontmatter, scores across 10 dimensions, and outputs a detailed review report with concrete before/after code improvements. Works as a companion to the marp-slides skill (generation → review → improvement cycle).

mashharuki Bundle

OSSリポジトリやプログラムに対して、認証・認可・入力検証・インジェクション・パストラバーサル・ HTTP/APIセキュリティ・レート制限・並行処理/競合状態・リプレイ・エラーハンドリング・シークレット漏洩・ 暗号・シリアライズ・依存関係障害・リソース枯渇・状態機械の不変条件・Fuzzテスト・静的解析（SAST/ 依存関係脆弱性/シークレットスキャン）・GitHub Actions/CIセキュリティ・性能/負荷テストまで含む、 網羅的なセキュリティ＆性能監査を実施し、重大度付きの所見・再現手順・修正案・推奨回帰テストを 記載した構造化レポートを作成するスキル。ユーザーが「脆弱性を見つけて」「セキュリティ監査して」 「ペネトレーションテストして」「このリポジトリを攻撃者視点でレビューして」「負荷テストして」 「性能テストして」「監査レポートを作って」などと言った場合はもちろん、明示的に「網羅的に」 「あらゆる角度から」といった言葉がなくても、対象がOSSリポジトリ・自作アプリ・APIサーバーであり セキュリティ/性能面の深掘りが求められている場合は積極的にこのスキルを使うこと。単発のPR差分 レビューには `code-review` / `security-review` の方が軽量で適切な場合があるが、リポジトリ全体を 対象にした一回の総合監査＋レポート納品が目的ならこのスキルを使う。