Security

tomevault-io Bundle

Comprehensive read-only code review of branch changes. Use when reviewing a branch before merging or when wanting a thorough code audit. Use when this capability is needed.

tomevault-io Bundle

Scan codebase for Outfitter Stack adoption candidates. Identifies throw statements, console usage, hardcoded paths, and custom errors. Use when assessing adoption scope or checking readiness. Use when this capability is needed.

tomevault-io Bundle

Analyze wireless and radio frequency security in applications, protocols, and hardware. Covers WiFi, Bluetooth/BLE, RFID/NFC, Zigbee, LoRa, cellular, and SDR-based analysis. Use when auditing IoT devices, wireless protocols, access control systems, or any RF-enabled infrastructure. Use when this capability is needed.

tomevault-io Bundle

Use when creating or publishing Claude Code hooks - covers executable format, event types, JSON I/O, exit codes, security requirements, and PRPM package structure

tomevault-io Bundle

Run security scans locally (Semgrep, Trivy, Gitleaks) to detect vulnerabilities, secrets, and code issues before pushing. Use when the user wants to check for security issues, scan dependencies, or validate code security. Use when this capability is needed.

tomevault-io Bundle

Audit generated video quality with objective checks and produce an optimization plan for next render iteration. Use when this capability is needed.

tomevault-io Bundle

Analyze codebase for cleanup opportunities and generate actionable reports. Use when asked to review code health, find technical debt, audit the codebase, identify cleanup tasks, or when the user mentions "cleanup", "code health", "tech debt", "audit", or "what needs fixing". Use when this capability is needed.

tomevault-io Bundle

Identify and clean up stale git branches locally and on remotes with safe, reversible steps. Use when asked to prune, list, or delete merged/old branches or audit branch hygiene. Use when this capability is needed.

tomevault-io Bundle

Ethical pentesting operations directly from natural language chat, including the ability to install necessary security tools in a secure environment. Use when this capability is needed.

tomevault-io Bundle

Docs Audit — Monorepo-Wide Documentation Audit

tomevault-io Bundle

Audit and improve CLAUDE.md files in repositories. Use when user asks to check, audit, update, improve, or fix CLAUDE.md files. Hames-aware fork — recognizes the v5.x kernel + .cursor/rules/* module separation, isolated domains, defense-line signatures, and workspace lock. In non-Hames repos this falls back to standard upstream behavior. Use when this capability is needed.

tomevault-io Bundle

Set up Rust quality gates (cargo check/build, clippy, rustfmt, dead code, unused deps via cargo-machete, doc build, tests) in any Rust repo, wired through `prek` (pre-commit reimagined) with a `check.sh` orchestrator underneath. Use when the user says "add quality gates for Rust", "set up Rust linting", "add clippy", "add cargo clippy and rustfmt", "add cargo checks", "Rust quality gate setup", "add prek for Rust", "add cargo-machete", "Rust pre-commit hooks", or wants to establish code quality infrastructure in a Rust project (as opposed to Go, TypeScript, or Python). Step 12 covers optional cargo-audit/cargo-deny, coverage via cargo-llvm-cov, MSRV verification, miri, and feature-matrix testing via cargo-hack for larger repos. Use when this capability is needed.

tomevault-io Bundle

Audit knowledge freshness and coverage. Checks what's documented against the current codebase, identifies stale or outdated knowledge, finds gaps, and provides targeted brv curate commands to fix them. Use when this capability is needed.

tomevault-io Bundle

Apply project-specific security and privacy guardrails (auth, headers, rate limiting, logging). Use when touching authentication, request handling, metrics exposure, or anything that could leak sensitive data. Use when this capability is needed.

tomevault-io Bundle

When reviewing or fixing Python code that uses setattr() with user-controlled kwargs to configure C++ extension objects (SessionOptions, RunOptions, etc.) in ONNX Runtime. Use this to apply the allowlist pattern that prevents arbitrary file writes and other attacks via reflected property access. Use when this capability is needed.

tomevault-io Bundle

Gemini as design advisor and visual analyst. Sends UI screenshots, designs, or visual content to Gemini for expert review. Strong in UI/UX critique, visual analysis, document understanding. Don't use for backend code or security. Use when this capability is needed.

tomevault-io Bundle

Security Vulnerability Scanner

tomevault-io Bundle

Rust CI workflow for greenfield Cargo projects using stable toolchains, caching, fmt, Clippy, tests/nextest, docs, audit/deny jobs, feature matrices, coverage, artifacts, and release gates aligned with local just check. Use when this capability is needed.

tomevault-io Bundle

HTTP Security Headers analysis and testing methodology Use when this capability is needed.

tomevault-io Bundle

Audits code for Outfitter Stack compliance including Result types, error handling, logging patterns, and path safety. Use for pre-commit reviews, code quality checks, migration validation, or when "audit", "check compliance", "review stack", or "stack patterns" are mentioned. Use when this capability is needed.

tomevault-io Bundle

Review Rust code for idiomatic style, anti-patterns, and common pitfalls — ownership, API design, logging, lints, secrets handling. Use when the user asks to review Rust code, judge whether something is idiomatic, refactor a `.rs` file, or audit a Rust module. Do NOT use for pure error-handling refactors (use rust-error-design) or async/tokio audits (use rust-async-audit) — invoke those instead when the focus is narrow. Use when this capability is needed.

tomevault-io Bundle

Audit cryptographic implementations for misuse, weak algorithms, improper key management, and TLS/certificate configuration issues. Uses testssl.sh, openssl, sslyze, and code review patterns. For authorized security assessments. Use when this capability is needed.

tomevault-io Bundle

Security-focused code review of diffs and pull requests using Trail of Bits expertise. Use when this capability is needed.

tomevault-io Bundle

Read-only telemetry dashboard for the memory subsystem. Surfaces top queries, hit/miss rate, latency p50/p95/p99 (db_ms via Rust + hook_ms via JSONL), top-N memories injected vs ignored, and scope/tier breakdown. Trigger on 'memory review', 'memory audit', 'memory stats', 'how is memory doing', 'memory hit rate', 'memory latency'. Do not trigger for memory mutations (create/touch/archive) — this skill never writes. Use when this capability is needed.

tomevault-io Bundle

Guidelines for building robust APIs with Express.js and TypeScript, covering middleware patterns, routing, and security best practices Use when this capability is needed.

tomevault-io Bundle

Set up cross-language pre-commit hooks for any git repository — auto-formatting, linting, type-checking, secret scanning, large-file detection, and Conventional Commit message checks. Detects which languages the repo uses (Node.js / TypeScript, Python, PHP, Java, Go, Rust, Ruby, Shell, generic) and wires the right hooks via the universal pre-commit framework, with an optional Husky + lint-staged + Prettier track for pure-Node repos. Use whenever the user wants to add pre-commit hooks, set up husky, install pre-commit, configure lint-staged, run formatting/linting/typecheck/tests on commit, scan for secrets at commit time, enforce conventional commits, or hits you with phrases like 'set up pre-commit', 'add husky', 'wire up commit hooks', 'block secrets at commit', 'make my repo lint on commit', or 'configure git hooks'. Use when this capability is needed.

tomevault-io Bundle

Audit all git worktrees in the current project. Use when the user asks about worktree status, which branches are merged, which have uncommitted changes, or which worktrees can be safely cleaned up. Use when this capability is needed.

tomevault-io Bundle

OWASP Top 10 security vulnerabilities with detection and remediation patterns. Use when conducting security audits, implementing secure coding practices, or reviewing code for common security vulnerabilities. Use when this capability is needed.

tomevault-io Bundle

Guide you through Trail of Bits' 5-step secure development workflow. Runs Slither scans, checks special features (upgradeability/ERC conformance/token integration), generates visual security diagrams, helps document security properties for fuzzing/verification, and reviews manual security areas. (project, gitignored) Use when this capability is needed.

tomevault-io Bundle

Structured security analysis using OWASP Four-Question Framework and STRIDE methodology. Generates threat matrices with risk ratings, mitigations, and prioritization. Use for attack surface analysis, security architecture review, or when asking what can go wrong. Use when this capability is needed.

tomevault-io Bundle

Performs a structured five-stage code review covering requirements compliance, correctness, code quality, testing, and security/performance. Each stage uses targeted checklists and categorized feedback (Blocker/Major/Minor/Nit) with actionable suggestions and rationale. Use when the user asks for code review, PR feedback, pull request review, or wants their code checked for bugs, style issues, or vulnerabilities — triggered by phrases like "review my code", "check this PR", "review my changes", "pull request review", or "code feedback". Use when this capability is needed.

tomevault-io Bundle

Test web applications for security vulnerabilities including SQLi, XSS, command injection, JWT attacks, SSRF, file uploads, XXE, and API flaws. Use when pentesting web apps, analyzing authentication, or exploiting OWASP Top 10 vulnerabilities. Use when this capability is needed.

tomevault-io Bundle

Comprehensive audit of a Webflow site including pages, CMS collections, health scoring, and actionable insights. Use for site analysis, migration planning, or understanding site structure. Use when this capability is needed.

tomevault-io Bundle

Entropy Audit (expert-entropy-auditor)

tomevault-io Bundle

Master smart contract security best practices to prevent common vulnerabilities and implement secure Solidity patterns. Use when writing smart contracts, auditing existing contracts, or implementing security measures for blockchain applications. Use when this capability is needed.

tomevault-io Bundle

Comprehensive binary exploitation techniques covering stack overflow, format string, heap exploitation, integer overflow, and advanced exploitation methods. Use when working on CTF challenges, binary vulnerability analysis, exploit development, or debugging memory corruption vulnerabilities in Linux binaries (x86/x64). Use when this capability is needed.