Security

tonone-ai Skill

Audit existing data cleaning code — find missing validation, silent data loss, and quality gaps. Use when asked to "audit our data cleaning", "are we losing data silently", or "find data quality gaps".

tonone-ai Skill

Audit existing ML monitoring — find gaps in drift coverage and missing alerts. Use when asked to "audit our ML monitoring", "are our models monitored", or "find drift coverage gaps".

pramoddutta Skill

Audit error messages across an application for clarity, actionability, consistency, and user-friendliness by cataloging and grading every error surface.

pramoddutta Skill

Security testing for OAuth2 implementations including authorization code flow, PKCE, token handling, redirect URI validation, and scope enforcement.

fdu-ins Skill

Map paper claims to code, config, tests, and artifacts for end-to-end traceability. Use when users ask for claim audit trails, evidence mapping, implementation to paper alignment, or submission traceability checks.

outlinedriven-odin-claude-plugin Bundle

Use when guardrail-adjacent material (stealth, scraping, privacy, IP, policy, security) or mixed reversible/irreversible, sensitive work, or the user says "autobahn this". Not for carved risky work.

tonone-ai Skill

Audit guardrail coverage — bypass vectors, false positive rates, policy gap analysis, red-team scenarios. Use when asked to "audit our AI guardrails", "can our filters be bypassed", or "check guardrail false positives".

tonone-ai Skill

Audit existing API documentation for completeness, accuracy, and developer experience. Use when asked to "audit our API docs", "are our docs accurate", or "review documentation quality".

tonone-ai Skill

Design a compromise assessment — hunting scope, methodology, and evidence collection. Use when asked "are we compromised", "run a compromise assessment", or "scope a threat hunt".

tonone-ai Skill

Manage vendor relationships — vendor selection scorecard, contract review checklist, renewal tracking, and vendor consolidation audit. Use when asked to "evaluate this vendor", "review this contract", "track vendor renewals", or "reduce our SaaS spend".

pramoddutta Skill

Analyze git repositories to build security ownership topology, compute bus factor for sensitive code, detect orphaned security-critical files, and export ownership graphs for visualization.

tonone-ai Skill

Audit existing vulnerability management — find SLA gaps, missing tiers, and process failures. Use when asked to "audit our vulnerability management", "find patch SLA gaps", or "are we patching fast enough".

tonone-ai Skill

Audit existing security awareness program — coverage gaps, effectiveness metrics, and culture indicators. Use when asked to "audit our security awareness program", "find training coverage gaps", or "measure our security culture".

tonone-ai Skill

Design a security awareness training curriculum — topics, format, and effectiveness measurement. Use when asked to "design security training", "build a security awareness curriculum", or "train our team on security".

pramoddutta Skill

Testing HIPAA compliance for healthcare applications including PHI handling, audit logging, access controls, and data encryption verification.

outlinedriven-odin-claude-plugin Bundle

Use when a user asks to audit what recall fed agents. Not for source or remote-system changes.

tonone-ai Skill

Audit test suite health — find flaky tests, slow tests, coverage gaps, and testing anti-patterns. Use when asked to "audit tests", "fix flaky tests", "why are tests slow", "test health", or "improve test suite".

tonone-ai Skill

Audit existing queue and streaming infrastructure — find missing DLQs, scaling gaps, and reliability issues. Use when asked to "audit our queues", "do we have DLQs", or "find queue reliability gaps".

tonone-ai Skill

Survey existing privacy and legal docs for completeness and GDPR compliance. Use when asked to "audit our privacy docs", "are we GDPR compliant on paper", or "what legal docs are missing".

tonone-ai Skill

Audit token usage patterns — avg context size, waste, truncation frequency, budget adherence. Use when asked to "audit our token usage", "how often do we truncate", or "find context waste".

tonone-ai Skill

Verify observability posture — audit monitoring coverage, find blind spots, prioritize gaps. Use when asked "is monitoring sufficient", "observability review", "are we covered", or "pre-launch monitoring check".

tonone-ai Skill

Automated SAST + dependency vulnerability scan. Runs Semgrep (code vulnerabilities) and pip-audit (CVE-matched dependencies) and writes a structured JSON report. Use when asked to "scan for vulnerabilities", "run a security scan", "check for CVEs", or "audit dependencies".

outlinedriven-odin-claude-plugin Bundle

Use when changes touch auth, parsing, dependencies, network, or pre-release, or a diff or baseline needs regression review. Modes: full, differential. Not for adding controls: use security-hardening.

tonone-ai Skill

Audit existing changelog and deprecation practices — find missing entries, undocumented breaks, and stale deprecations. Use when asked to "audit our changelog", "find undocumented breaking changes", or "check for stale deprecations".

tonone-ai Skill

Audit a proposed API change for breaking changes — classification and impact assessment. Use when asked "is this a breaking change", "will this break clients", or "assess the impact of this API change".

tonone-ai Skill

Audit existing API for breaking change risks and missing compatibility controls. Use when asked to "find breaking change risks in our API", "audit our compatibility controls", or "what could break clients".

tonone-ai Skill

Usability review — evaluate an existing flow or UI against usability heuristics, flag friction points, and recommend fixes. Use when asked to "review the UX", "usability audit", "what's wrong with this flow", "UX feedback", "critique this design", or "why are users dropping off here".

tryboy869 Bundle

[Applies to: **/*] This guide provides opinionated, actionable best practices for writing modern Ruby code, focusing on maintainability, performance, and security, with a strong emphasis on RuboCop and Rails conventions.

pramoddutta Skill

Teach agents to build go or no-go release readiness scorecards with gated criteria for coverage, flakes, defects, performance, security, and sign-off.

pramoddutta Skill

Teach agents to run Nuclei DAST and API security scans in CI, write templates, and gate builds on actionable findings.

pramoddutta Skill

Writing custom static analysis rules for ESLint, Semgrep, and SonarQube to enforce project-specific code quality and security standards.

outlinedriven-odin-claude-plugin Bundle

Use when asked to audit, profile, or debug page load performance, Lighthouse scores, or site speed. Don't use for tasks that require source or remote-system changes.

tonone-ai Skill

Design QA audit — red flags, severity classification, visual quality scorecard. Use when asked to "QA the design", "check visual quality", "design review before launch", "visual bugs", "design audit", or "does this look right".

tonone-ai Skill

Audit existing API schemas across a codebase — find inconsistencies and coverage gaps. Use when asked to "audit our API schemas", "find schema inconsistencies", or "check spec coverage".

tonone-ai Skill

Full security audit — secrets, dependencies, IAM, auth, injection, XSS, HTTPS, rate limiting, public storage. Use when asked for "security audit", "check for vulnerabilities", "security review", or "are we secure".

tryboy869 Bundle

[Applies to: **/*] This guide establishes definitive best practices for integrating Clerk, focusing on robust security, efficient session management, and secure token handling in line with modern OAuth 2.0 (RFC 9700) and JWT (RFC 8725) standards.