Security

ferroxlabs Bundle

Supabase platform expert covering PostgreSQL database design, Row Level Security policies, real-time subscriptions, auth configuration, storage buckets, edge functions, PostgREST API patterns, database migrations, and full-stack application architecture on the Supabase platform. Use when the user asks about supabase builder, supabase builder best practices, or needs guidance on supabase builder implementation. Do NOT use when the user needs a different specialized skill or is asking about an unrelated technology domain.

ferroxlabs Bundle

Becomes a senior technical writer who produces clear, accurate, and audience-appropriate documentation including API references, developer guides, changelogs, and onboarding materials. Use when the user needs documentation written, restructured, or improved for technical or non-technical audiences. Do NOT use when writing application code, conducting security audits, or designing system architecture.

ferroxlabs Bundle

Practical guide to reducing household waste using the 5R framework (refuse, reduce, reuse, recycle, rot), including waste audit methodology, room-by-room product swaps, composting setup options, bulk shopping strategies, DIY alternatives for common products, meal planning to reduce food waste, and zero-waste approaches for bathroom and kitchen. Use when the user asks about zero waste guide, or needs help with practical guide to reducing household waste using the 5r framework (refuse, reduce, reuse, recycle, rot), including waste audit methodology, room-by-room product swaps, composting setup options, bulk shopping strategies, diy alternatives for common products, meal planning to reduce food waste, and zero-waste approaches for bathroom and kitchen. Do NOT use when the request requires professional specialized advice or falls outside the scope of zero waste guide.

ferroxlabs Bundle

Creates Keep-a-Changelog compliant CHANGELOG.md files with dated, categorized entries (Added, Changed, Deprecated, Removed, Fixed, Security) and semantic versioning. Use when the user needs to write or update a changelog file, document version history, or create a structured change log. Do NOT use for release notes (use `release-notes`), commit messages, or status updates (use `status-update`).

ferroxlabs Bundle

Conducts a room-by-room home energy audit identifying energy loss points and producing a prioritized fix list with estimated kWh savings, cost per fix, and payback period. Gathers the user's housing type, climate zone, current energy costs, and budget to produce an actionable energy reduction plan distinguishing renter-accessible from homeowner-only improvements. Use when the user asks about reducing home energy bills, finding energy leaks, conducting an energy audit, improving home insulation, or lowering heating and cooling costs. Do NOT use for commercial building energy audits, HVAC system design or installation, solar panel evaluation as an investment, or utility-scale energy efficiency programs.

ferroxlabs Bundle

Identity and access management deep dive covering OAuth 2.0 grant types and PKCE, OpenID Connect flows, SAML federation, SCIM user provisioning, multi-factor authentication strategies, session management, token lifecycle, JWT security, zero-trust identity patterns, and identity provider architecture. Use when the user asks about identity engineer, identity engineer best practices, or needs guidance on identity engineer implementation. Do NOT use when the user needs a different specialized skill or is asking about an unrelated technology domain.

ferroxlabs Bundle

Ethereum Layer 2 scaling expertise covering optimistic rollups, ZK rollups, validiums, rollup architecture, bridge mechanics, L2 selection criteria, cost analysis, security assumptions, data availability, interoperability, and migration strategies for building and deploying on Layer 2 networks. Use when the user asks about layer2 specialist, related techniques, best practices, or needs guidance in this domain. Do NOT use when the request is outside the scope of layer2 specialist or requires a different specialized skill.

vamseeachanta Skill

Sub-skill of audit-support: Deficiency (+4).

vamseeachanta Skill

Sub-skill of hidden-folder-audit: Version Metadata.

vamseeachanta Skill

Safely turn drafted issue bodies into reusable gh issue create commands by auditing repo labels, exact duplicates, and auth first.

vamseeachanta Skill

Reconcile duplicate/colliding workspace-hub skills without losing useful content, while avoiding pre-commit skill-content security scan regressions.

ferroxlabs Bundle

Comprehensive guide to creating a healthier, more sustainable home covering energy audit walkthroughs, non-toxic cleaning product recipes and alternatives, water conservation strategies for fixtures and landscaping, indoor air quality improvement, sustainable materials for renovation projects, and understanding green building certifications. Use when the user asks about green home, or needs help with comprehensive guide to creating a healthier, more sustainable home covering energy audit walkthroughs, non-toxic cleaning product recipes and alternatives, water conservation strategies for fixtures and landscaping, indoor air quality improvement, sustainable materials for renovation projects, and understanding green building certifications. Do NOT use when the request requires professional specialized advice or falls outside the scope of green home.

ferroxlabs Bundle

Recover storage space, audit apps, organize photos, improve battery life, and boost phone performance with step-by-step cleanup procedures for iOS and Android. Use when the user asks about phone cleanup guide, related techniques, best practices, or needs guidance in this domain. Do NOT use when the request is outside the scope of phone cleanup guide or requires a different specialized skill.

ferroxlabs Bundle

Comprehensive personal privacy audit covering browser hardening, phone privacy settings, social media exposure reduction, data broker removal, and ongoing privacy maintenance routines. Use when the user asks about privacy audit guide, related techniques, best practices, or needs guidance in this domain. Do NOT use when the request is outside the scope of privacy audit guide or requires a different specialized skill.

ferroxlabs Bundle

Provides a plain-language overview of common tenant rights including notice requirements, repair obligations, security deposit protections, eviction procedures, and anti-retaliation rules. Helps tenants understand their position and prepare for conversations with landlords, tenant rights organizations, or attorneys. Use when the user has a question about their rights as a renter, is facing a landlord dispute, wants to understand eviction procedures, or needs to know their obligations as a tenant. Do NOT use for commercial tenancies, landlord-side guidance, legal advice on specific disputes, or lease review before signing (use lease-agreement-reviewer instead).

ferroxlabs Bundle

Diagnose and fix WiFi problems - slow speeds, dead zones, interference, connection drops, and security issues with step-by-step solutions. Use when the user asks about wifi troubleshooter, related techniques, best practices, or needs guidance in this domain. Do NOT use when the request is outside the scope of wifi troubleshooter or requires a different specialized skill.

ferroxlabs Bundle

Threat modeling expertise covering STRIDE methodology, attack trees, data flow diagrams, trust boundaries, threat prioritization with DREAD scoring, mitigation strategies, threat modeling for APIs and microservices, and automated threat modeling tools for proactively identifying security risks during system design. Use when the user asks about threat modeler, threat modeler best practices, or needs guidance on threat modeler implementation. Do NOT use when the user needs a different specialized skill or is asking about an unrelated technology domain.

ferroxlabs Bundle

Web Application Firewall configuration expertise covering OWASP Core Rule Set design, rate limiting rules, geo-blocking, bot detection, custom rules for application-specific attacks, logging and monitoring, false positive management, and WAF bypass prevention for protecting web applications at the network edge. Use when the user asks about waf configurer, waf configurer best practices, or needs guidance on waf configurer implementation. Do NOT use when the user needs a different specialized skill or is asking about an unrelated technology domain.

ferroxlabs Bundle

Guided workflow for eliminating debt systematically from comprehensive debt audit and strategy selection through creditor negotiation, execution discipline, and prevention planning. Covers credit cards, student loans, medical debt, personal loans, and other consumer debt. Use when the user wants to get out of debt or needs a structured multi-step process for this goal. Do NOT use when the request is a single-step task or requires professional advice beyond educational guidance.

ferroxlabs Bundle

Guides MQTT message broker architecture including topic design, QoS levels, retained messages, security configuration, and client implementation patterns Use when the user asks about mqtt specialist, related techniques, best practices, or needs guidance in this domain. Do NOT use when the request is outside the scope of mqtt specialist or requires a different specialized skill.

ferroxlabs Bundle

Advanced PostgreSQL mastery covering indexing strategies (GIN, GiST, BRIN, B-tree), table partitioning, pg_stat analysis, VACUUM tuning, connection pooling with PgBouncer, JSONB operations, full-text search, row-level security, replication topologies, and essential extensions like PostGIS and pg_cron. Use when the user asks about postgres expert, postgres expert best practices, or needs guidance on postgres expert implementation. Do NOT use when the user needs a different specialized skill or is asking about an unrelated technology domain.

ferroxlabs Bundle

Practical guide to cryptocurrency fundamentals covering Bitcoin and Ethereum basics, wallet security, exchange selection, DeFi risks, scam identification and avoidance, tax reporting obligations, portfolio sizing, and a safety-first approach to digital assets. Emphasizes risk awareness and consumer protection over speculation. Use when the user asks about crypto navigator, or needs help with practical guide to cryptocurrency fundamentals covering bitcoin and ethereum basics, wallet security, exchange selection, defi risks, scam identification and avoidance, tax reporting obligations, portfolio sizing, and a safety-first approach to digital assets. Do NOT use when the request requires professional financial advice or falls outside the scope of crypto navigator.

paulasilvatech Skill

Generate production-ready Python 3.10+ code for the PowerPlatform-Dataverse-Client SDK with DataverseError handling, singleton client management, retry with exponential backoff for 429/timeout failures, OData optimization, audit logging, type hints, docstrings, configuration handling, and usage examples. Use when asked for Dataverse Python code, SDK examples, or system instructions.

paulasilvatech Skill

Supply COBOL, DB2, VSAM, and JCL modernization context: corpus layout, member conventions, target stack boundaries, evidence precedence, stage flow, and security rules. Use when starting any COBOL/DB2 modernization task, before analysis, design, implementation, verification, or delivery.

paulasilvatech Skill

Supply COBOL, DB2, VSAM, and JCL modernization context: corpus layout, member conventions, target stack boundaries, evidence precedence, stage flow, and security rules. Use when starting any COBOL/DB2 modernization task, before analysis, design, implementation, verification, or delivery.

paulasilvatech Skill

Apply Helidon 4 SE and MP best practices for Java 21 applications, including routing, DB Client, Jakarta and MicroProfile APIs, configuration, security, observability, and tests. Use when working with Helidon SE, Helidon MP, HttpService, HttpRules, MicroProfile Config, Helidon DB Client, Helidon Security, or Helidon testing.

paulasilvatech Bundle

Enforce AppSec audit integrity for security analysis, code review, threat modeling, SAST, SCA, and quality scan agents. Use this skill when running a post-analysis quality gate, preventing rationalization, retrying failed evidence collection, running a second-pass self-critique, scoring output from 1-10 with a ≥8 threshold, or recording governed lessons or memories.

paulasilvatech Skill

Apply Spring Boot best practices for project structure, dependency injection, configuration, REST controllers, DTO validation, services, transactions, Spring Data JPA, logging, testing, and security. Use when asked for Spring Boot guidance or to implement Java backend code.

paulasilvatech Bundle

Configure and manage GitHub secret scanning, push protection, custom patterns, exclusions, alert triage, remediation, bypass workflows, and pre-commit secret scans through the Advanced Security plugin. Use this skill when enabling secret scanning, resolving blocked pushes, writing secret_scanning.yml, creating regex patterns, triaging alerts, or scanning code before committing.

paulasilvatech Skill

Use this skill when the user asks to modernize legacy code with a disciplined GitHub Copilot workflow: brief, assess, map, extract business rules, reimagine architecture, transform modules, and harden with tests and security review. Trigger for COBOL, JCL, legacy Java, .NET, C++, classic ASP, monolith modernization, behavior-preserving rewrite, business-rule extraction, modernization assessment, or legacy-to-modern transformation.

paulasilvatech Skill

Diagnose and remediate CentOS Linux incidents with RHEL-compatible systemd, journal, dnf/yum, SELinux, firewalld, and rollback practices. Use when the user asks to triage CentOS service failures, package issues, boot problems, networking/firewall symptoms, or security-policy denials.

paulasilvatech Skill

Diagnose and remediate Debian Linux incidents with apt, dpkg, systemd, journal analysis, AppArmor-aware checks, firewall review, and rollback practices. Use when the user asks to triage Debian service failures, package issues, boot problems, network symptoms, or security-profile denials.

ferroxlabs Bundle

Compliance framework audit expertise covering SOC 2 Type II controls, GDPR technical requirements, HIPAA security rule, PCI DSS for developers, ISO 27001 controls, audit evidence collection, compliance-as-code, and continuous compliance monitoring for meeting regulatory and industry security standards. Use when the user asks about compliance checker, compliance checker best practices, or needs guidance on compliance checker implementation. Do NOT use when the user needs a different specialized skill or is asking about an unrelated technology domain.

ferroxlabs Bundle

Becomes a senior site reliability engineering lead who commands incident response by coordinating investigation, communication, and remediation across specialist agents. Use when the user faces a production outage, service degradation, security breach, or any urgent operational event requiring structured response coordination. Do NOT use when the user needs routine monitoring setup (use devops-engineer), post-incident process improvement without an active incident, or sprint facilitation (use sprint-facilitator).

ferroxlabs Bundle

Penetration testing methodology for authorized security testing covering OWASP Testing Guide, reconnaissance techniques, injection testing, XSS detection, CSRF testing, authentication bypass, privilege escalation, API security testing, and professional report formatting. For defensive and authorized testing purposes only. Use when the user asks about penetration tester, penetration tester best practices, or needs guidance on penetration tester implementation. Do NOT use when the user needs a different specialized skill or is asking about an unrelated technology domain.

ferroxlabs Bundle

Tax-loss harvesting education covering wash sale rules, substantially identical security definitions, direct indexing concepts, harvesting strategies and triggers, tracking methods, and integration with overall portfolio and tax planning. Use when the user asks about tax loss harvester, related techniques, best practices, or needs guidance in this domain. Do NOT use when the request is outside the scope of tax loss harvester or requires a different specialized skill.