Security

tomevault-io Bundle

tokscale の集計 JSON を統計的・構造的に解析し、トークンスパイク／モデルミスマッチ／セッション肥大／履歴リプレイ疑惑／オーバーヘッド過多の 5 カテゴリで異常を検出。アクティブな全クライアント（claude/codex/gemini/opencode 等）を横断集計し、怪しい TOP 5 と抑制案を推奨確率付きで提示。詳細レポートを `.brain/thoughts/shared/research/{date}-tokscale-audit.md` に保存する。Use when the user says 「トークン監査して」「tokscale 解析」「異常検出」「ヘビーユーザー特定」「セッションリーク調査」「課金スパイク調査」「/vw-tokscale-audit」等。NOT for 単純な消費量確認（`tokscale monthly --month` を直接実行すれば足りる）and NOT for リアルタイムモニタリング（バッチ集計の事後解析用途）。 Use when this capability is needed.

tomevault-io Bundle

Systematically analyzes and fixes GitHub CodeQL security alerts with proper documentation and testing Use when this capability is needed.

tomevault-io Bundle

API security checklist for reviewing endpoints before deployment. Use when creating or modifying API routes to ensure proper authentication, authorization, and input validation. Use when this capability is needed.

tomevault-io Bundle

Enforce architect-level security standards including AES-256-GCM encryption, secure storage, biometric gates, and memory safety. Use when handling sensitive data, credentials, clipboard content, or API communication security. Use when this capability is needed.

tomevault-io Bundle

Performs intelligent compliance audits for software projects. Automatically detects which regulatory frameworks (GDPR, HIPAA, PCI-DSS, CCPA, SOC 2) apply based on project analysis and user context. Provides tiered reports with executive summaries and detailed technical findings. Use when the user asks about compliance, regulatory requirements, security standards, data protection, or wants to audit their codebase for legal/regulatory adherence. Use when this capability is needed.

tomevault-io Bundle

Use when selecting and designing communication protocol stacks for IoT or embedded systems. Covers physical layer selection, transport and application protocols, security layers, message format design, and error resilience. Do not use for firmware architecture (use embedded-architecture) or fleet-scale operations (use fleet-management).

tomevault-io Bundle

Use when starting any conversation — establishes how to find and use OAC skills, requiring Skill tool invocation BEFORE ANY response including clarifying questions, this is your secret weapon to best perform your tasks

tomevault-io Bundle

Attach the current AI session context to a Jira issue as a formatted comment. Useful for investigation, audit trail, handoff, debugging. Use when user says "attach session to Jira", "document on Jira", or "export context to AAP-XXXXX". Use when this capability is needed.

tomevault-io Bundle

Check Python dependencies for known security vulnerabilities using Safety/PyUp. Use when this capability is needed.

tomevault-io Bundle

Use when mapping isolation boundaries, enumerating crossing points, verifying enforcement mechanisms, and testing for bypass paths across trust domains. Covers containers, VMs, enclaves, namespaces, seccomp, and network segmentation. Do not use for kernel configuration audit (use kernel-hardening) or HW/SW security interface review (use hw-sw-boundary).

tomevault-io Bundle

Review MERN code for compliance with standards, NFRs, and security policy. Use when this capability is needed.

tomevault-io Bundle

Review NEAN code for compliance with standards, NFRs, and security policy. Use when this capability is needed.

tomevault-io Bundle

Refactor Audit

tomevault-io Bundle

Use when applying fixes to Rust code identified by an audit, code review, lint sweep, failing-test triage, or any "fix this list of findings" task. Enforces the discipline of "fix the cause the system architecture calls for, not the symptom" — explicit category choice (root-cause vs. local correctness vs. annotation; defer is forbidden) for each finding, refuses cosmetic conformance and band-aids, forbids unilateral workspace-level changes from a leaf-crate context, and requires honest verification reporting. Pair with `rust-quality` and `rust-gpu-discipline`, which encode the rules being enforced. Trigger when the user says "fix the audit findings", "address the review comments", "fix the clippy errors", "make the failing tests pass", "/fix", or dispatches a subagent to apply fixes from an audit document.

tomevault-io Bundle

Index of vulnerability detection pattern skills. Routes to core patterns (universal) and language-specific patterns for security scanning. Use when this capability is needed.

tomevault-io Bundle

Pre-commit self-validation for code quality and security Use when this capability is needed.

tomevault-io Bundle

Use when auditing HARNESS.md, pre-commit hooks, pre-push hooks, architecture gates, or CI workflows for tunacode-cli. This skill treats any mismatch, skipped gate, or failing check as a critical failure and requires manual one-by-one execution rather than make targets, batch wrappers, or summary-only audits.

tomevault-io Bundle

Document security research, CTF solutions, and malware analysis. Includes REPORT.md and STATUS.md templates. Use when this capability is needed.

tomevault-io Bundle

Interactive Playwright session control for the Shaker Scan `/session` API. Use when asked to start or drive an AI security testing session, perform manual browser actions, or run BOLA/IDOR testing via session endpoints. Use when this capability is needed.

tomevault-io Bundle

AI-powered secure development assistant. Dispatches to review, fix, tool, and export subcommands. Use when the user invokes /secdevai with no subcommand or needs an overview of available security commands. Use when this capability is needed.

tomevault-io Bundle

Node.js backend patterns — Fastify/Express, database access, async patterns, security hardening Use when this capability is needed.

tomevault-io Bundle

Perform a security review of the following code:

tomevault-io Bundle

Generate sandbox security policies from plain-language requirements and optional REST API documentation. At minimum, takes API host:port endpoints and intent to produce preset-based or L4 policies. With full API docs (OpenAPI, Swagger, markdown), generates fine-grained per-endpoint L7 rules. Trigger keywords - generate policy, create policy, update policy, change policy, sandbox policy, network policy, API policy, security policy, allow API, restrict API. Use when this capability is needed.

tomevault-io Bundle

对任意代码仓库进行合规审计并生成可取证报告（Markdown + JSON findings），覆盖“是否遵循 AGENTS.md/仓库规则/用户指令”“文档索引/规格/工作记录/任务总结”“TDD 与离线回归证据”“可复现性（.env.example 等）”“潜在密钥泄露与仓库卫生”等；并支持在**人类勾选 finding.id** 后执行选择性低风险整改（默认不改业务逻辑）。触发场景：仓库交付前自检、接手陌生仓库、需要合规审计报告、需要把整改条目做成可选择的执行清单。 Use when this capability is needed.

tomevault-io Bundle

Comprehensive code review covering security vulnerabilities, performance bottlenecks, best practices, and refactoring opportunities. Use when user requests code review, security audit, or performance analysis. Use when this capability is needed.

tomevault-io Bundle

Audits Claude Code plugins for structure, quality, and best practices. Use when validating plugins, checking plugin health, or before publishing. Use when this capability is needed.

tomevault-io Bundle

Use when resolving Github issues. Fixes bugs, refactors code, performs code and security reviews, ensures 100% test coverage, runs CI checks, and creates pull requests. Updates GitHub issues with review results.

tomevault-io Bundle

Generates comprehensive testing handbooks and guides for security testing strategies.

tomevault-io Bundle

Implement security scanning, vulnerability detection, and compliance checks. Use when working with security audits, dependency vulnerabilities, secret detection, CodeQL scanning, SAST/DAST tools, or security best practices. Handles threat modeling and security hardening. Use when this capability is needed.

tomevault-io Bundle

Java Spring Bootサービスにおける認証/認可、検証、CSRF、シークレット、ヘッダー、レート制限、依存関係セキュリティのためのSpring Securityベストプラクティス。 Use when this capability is needed.

tomevault-io Bundle

Comprehensive security engineering skill for application security, penetration testing, security architecture, and compliance auditing. Includes security assessment tools, threat modeling, crypto implementation, and security automation. Use when designing security architecture, conducting penetration tests, implementing cryptography, or performing security audits. Use when this capability is needed.

tomevault-io Bundle

Scoped implementation review. Use when Codex needs to review completed code changes for correctness, maintainability, codebase cohesion, edge cases, surface-level security, and RFC adherence when an RFC or plan is available. Use when this capability is needed.

tomevault-io Bundle

Production Audit Skill

tomevault-io Bundle

Check code against security compliance standards and best practices. Use when this capability is needed.

tomevault-io Bundle

Exploit Investigator — Orchestration Guide

tomevault-io Bundle

GitHub Agentic Workflows (gh-aw) - markdown-based AI automation with 5-layer security, safe outputs, and Continuous AI patterns Use when this capability is needed.