Security

wahidyankf Bundle

Invocable entry point for the plan-ideas-grooming workflow — sweeps one or more repos' plans/ideas/ folders and converges them into a deduplicated, Eisenhower-quadrant-organized, correctly-resident set of two-pagers. Carries the ten-step procedure, the three residency rules (secrets-bearing, single-repo-only, generalizable), the two classification rubrics (urgency, importance), the fail-safe-toward-duplication relocation sequence, and the six-clause termination audit. Use when a repo's flat idea count exceeds 60, when 90 days have elapsed since the last recorded run, or when a maintainer asks for idea grooming across repos.

wahidyankf Bundle

Domain-specific methodology for docs-tutorial-fixer — re-validating docs-tutorial-checker findings on pedagogical structure, then applying fixes only for objective issues (missing sections, LaTeX delimiters, naming, time estimates, frontmatter) while flagging subjective narrative/style findings for manual review. Use when applying validated fixes from a tutorial audit report.

wahidyankf Bundle

The shared execution protocol inherited verbatim from the retired pr-review-maker monolith by all nine discipline-scoped pr-review-*-maker specialists (architecture, docs, governance, instruction, integrity, logic, performance, security, types) - context consumption, finding requirements hard rules, scope guard, untrusted-input handling, findings handoff (no direct posting), cross-cycle behaviour, and external fact verification. Use when reviewing a PR as one of the nine discipline specialists.

wahidyankf Bundle

Guidelines for generating validation/audit reports with UUID chains, progressive writing, and UTC+7 timestamps

wahidyankf Bundle

Universal classification system for checker and fixer agents using orthogonal criticality (CRITICAL/HIGH/MEDIUM/LOW importance) and confidence (HIGH/MEDIUM/FALSE_POSITIVE certainty) dimensions. Covers priority matrix (P0-P4), execution order, dual-label pattern for verification status, standardized report format, and domain-specific examples. Essential for implementing checker/fixer agents and processing audit reports

swaylq Bundle

软件架构 (含 应用架构 / 系统架构 / 分布式 后端架构 / 前后端 数据流 与 数据模型 设计 / API 边界 / 可扩展性 / 演进式架构 — 不含 硬件架构 / 纯企业架构 / 纯 DevOps / 纯安全架构) (software architecture — application & system architecture for web / mobile / distributed back-ends; designing services + data models + data flow + integration boundaries; making explicit trade-offs about scalability / coupling / consistency / evolvability; not hardware / chip architecture, not pure enterprise-architecture (TOGAF/Zachman), not pure DevOps / SRE, not pure security architecture (those are adjacent disciplines).) Master OS — automated mastery of software architecture — application & system architecture for web / mobile / distributed back-ends; designing services + data models + data flow + integration boundaries; making explicit trade-offs about scalability / coupling / consistency / evolvability; not hardware / chip architecture, not pure enterprise-architecture (TOGAF/Zachman), not pure DevOps / SRE, not pure security architecture (those are adjacent disciplines).: top builders' men

dmzoneill Bundle

Automatically fix CVE vulnerabilities in Python dependencies for downstream projects. Queries Jira for unresolved CVEs, filters already-fixed issues, updates Pipfile and Pipfile.lock using container-based pipenv lock, creates MRs, and updates Jira. Use when the user mentions CVEs, vulnerabilities, security fixes, CVE remediation, dependency security updates, or asks to fix CVEs.

dmzoneill Skill

Verify secrets and configmaps in a namespace. Use for deployment config verification, debugging missing env vars, or auditing secret presence.

aretedriver Bundle

Check for outdated dependencies and security vulnerabilities. Invoke with /deps.

richfrem Bundle

A visual & functional crawler operation utilizing Chrome DevTools Protocol (CDP) or Playwright/Puppeteer to audit prototype UI/UX and behavior.

richfrem Bundle

Extracts pure, framework-free, IO-free domain models and deterministic business rules from a rapid prototype with strict preservation vs replacement classification and purity audit enforcement.

aretedriver Bundle

Safe filesystem operations with path protection, backup enforcement, and audit logging

richfrem Bundle

Use when demonstrating a correctly structured agent skill. Trigger when the user asks to "show a well-formed skill", "give me a skill template", or "what does a compliant SKILL.md look like". Also triggers for regression testing: this fixture MUST score maturity >= L2 with zero Critical or Error findings.

gonzalezpazmonica Bundle

Adversarial review that hunts every weakness, assumption, edge case, and missing test. Opponent mode — finds what will break before it breaks in production. Use when merging, when reviewing security-critical code, or when the solution feels too simple.

aretedriver Bundle

Fleet-wide security audit — runs /security-auditor across multiple repos, aggregates findings to FLEET-SECURITY.md, surfaces NEW findings since last sweep. Use for periodic fleet hardening, post-Dependabot-sweep verification, or before security-sensitive releases.

zpankz Skill

Routes analysis and debugging tasks. Triggers on analyze, debug, troubleshoot, review, audit, security, performance, optimize, investigate, trace.

aretedriver Bundle

Reviews code for quality, security, and best practices

aretedriver Bundle

Hardens websites against common attacks — security headers, CSP policies, input validation, CORS configuration, dependency auditing, and OWASP Top 10 mitigation.

aretedriver Bundle

Repository management through Git CLI and GitHub API with branch protection, commit conventions, and security controls

aretedriver Bundle

Systematic technical debt assessment — scans for security issues, correctness gaps, infrastructure debt, maintainability problems, documentation quality, and dependency freshness

fusengine Bundle

Use when auditing JWT, session, OAuth2/PKCE, password, or MFA implementations for security vulnerabilities and best-practice deviations.

amo-tech-ai-rocket-path-ai Bundle

OpenClaw Gateway setup, configuration, and best practices. Use when installing OpenClaw, configuring channels (WhatsApp/Telegram/Discord), setting up providers (OpenAI/Google/Anthropic), creating skills, managing the gateway daemon, or troubleshooting OpenClaw issues. Triggers on: openclaw, gateway, whatsapp channel, telegram bot, openclaw skill, openclaw config, openclaw install, openclaw cron, openclaw security.

fusengine Bundle

Use when writing or reviewing Go tests, adding coverage, benchmarking, or profiling a Go program. Not for CI/lint wiring (go-tooling-security) or non-Go tests.

fusengine Bundle

Use when checking a specific dependency or package version for known CVEs and security advisories.

fusengine Bundle

Use when setting up Go modules/workspaces, configuring golangci-lint v2, running govulncheck, or building a Go CI quality gate. Not for app logic or non-Go audits.

amo-tech-ai-rocket-path-ai Skill

Use when auditing RLS policies, hardening auth sessions, adding CSP headers, rotating secrets, or before shipping any feature to production. Triggers on "security", "RLS audit", "auth hardening", "CSP", "secrets", "ship to production".

zpankz Bundle

Analyzes events through computer science lens using computational complexity, algorithms, data structures, systems architecture, information theory, and software engineering principles to evaluate feasibility, scalability, security. Provides insights on algorithmic efficiency, system design, computational limits, data management, and technical trade-offs. Use when: Technology evaluation, system architecture, algorithm design, scalability analysis, security assessment. Evaluates: Computational complexity, algorithmic efficiency, system architecture, scalability, data integrity, security.

thewatcher01 Bundle

Audit complet de qualite data sur les 9 dimensions ISO 8000-8. Utiliser pour verifier la fiabilite des donnees d'un projet, d'une table, ou d'un SIREN specifique.

thewatcher01 Skill

Audit rapide securite et qualite du projet courant. Utiliser avant un deploiement ou en revue.

fusengine Bundle

Use when running ecosystem-specific vulnerability scans across project dependencies (npm/composer/pip/cargo/go/etc), with optional auto-fix.

fusengine Bundle

Use when verifying or configuring HTTP security headers (CSP, HSTS, CORS, X-Frame-Options) for a web application (Next.js, Laravel, Express, Django).

thewatcher01 Skill

Prépare un briefing complet avant un rendez-vous prospect. Orchestre TOUS les skills d'intelligence (sirene, scorer, audit-flash, nis2-radar, aides, bodacc) pour produire une fiche synthétique d'une page. Utiliser quand l'utilisateur a un RDV à préparer.

thewatcher01 Bundle

Systematic deep research methodology for complex tasks requiring comprehensive web, GitHub, community, and documentation research. Use when: deep dive, comprehensive research, SOTA analysis, technology evaluation, architecture decisions, library comparison, migration planning, complex debugging, best practices audit, prior art search, unfamiliar patterns, competitive analysis, security audit research.

thewatcher01 Bundle

Génère des propositions commerciales complètes à partir de templates (audit RGPD, DevSecOps, NIS2). Utiliser quand l'utilisateur demande de rédiger une proposition, un devis, ou une offre commerciale pour un prospect.

thewatcher01 Bundle

Audit passif OSINT de sécurité sur un domaine. Vérifie DNS (SPF/DKIM/DMARC), headers HTTP (HSTS, CSP, X-Frame-Options), certificat SSL. Utiliser quand l'utilisateur demande d'auditer la sécurité d'un site ou domaine.

x402agent Bundle

Deep-reasoning Solana and blockchain engineering skill. Use for production blockchain development, on-chain programs, Solana transaction flows, DeFi integrations, token bots, swaps, Anchor/Rust programs, RPC handling, Helius/Jito execution, MEV analysis, PDA/account validation, retry logic, simulations, monitoring, or security hardening.