Security

ferroxlabs Bundle

Advanced shell scripting expert covering shell and Zsh patterns, robust error handling (set -euo pipefail), argument parsing (getopts, manual), portability across shells and OS, testing shell scripts (bats, shellcheck), process management, text processing pipelines, and script security practices. Use when the user asks about shell scripting master, shell scripting master best practices, or needs guidance on shell scripting master implementation. Do NOT use when the user needs a different specialized skill or is asking about an unrelated technology domain.

ferroxlabs Bundle

Guides expert-level authentication patterns implementation: security and web-development decision frameworks, production-ready patterns, and concrete templates for authentication patterns workflows. Use when the user asks about authentication patterns, authentication patterns configuration, or security best practices for authentication projects. Do NOT use when the user needs a different backend infrastructure capability -- check sibling skills in the backend infrastructure subcategory.

ferroxlabs Bundle

Systematic home decluttering and organization workflow from initial audit and system design through room-by-room execution and long-term maintenance habits for a permanently organized living space. Use when the user wants to declutter organize home or needs a structured multi-step process for this goal. Do NOT use when the request is a single-step task or requires professional advice beyond educational guidance.

ferroxlabs Bundle

Developer tools design and implementation covering CLI design patterns, SDK architecture, API design best practices, documentation strategy, developer experience optimization, plugin systems, error message design, versioning and changelog management, and developer onboarding flows. Includes code examples, DX audit checklists, and distribution patterns. Use when the user asks about developer tools builder, related techniques, best practices, or needs guidance in this domain. Do NOT use when the request is outside the scope of developer tools builder or requires a different specialized skill.

ferroxlabs Bundle

Email security expertise covering SPF, DKIM, and DMARC configuration for domain protection, phishing detection techniques, email encryption with PGP and S/MIME, secure email provider evaluation, email header analysis, business email compromise prevention, and building organizational email security policies. Use when the user asks about email security hardener, related techniques, best practices, or needs guidance in this domain. Do NOT use when the request is outside the scope of email security hardener or requires a different specialized skill.

ferroxlabs Bundle

Cryptocurrency wallet security expertise covering cold storage setup, hardware wallet configuration, multisig wallet deployment, seed phrase management, recovery planning, phishing and social engineering prevention, transaction verification, approval hygiene, and operational security practices for protecting digital assets. Use when the user asks about wallet security advisor, related techniques, best practices, or needs guidance in this domain. Do NOT use when the request is outside the scope of wallet security advisor or requires a different specialized skill.

ferroxlabs Bundle

Conducts a household waste audit and produces a zero-waste action plan organized by waste stream (trash, recycling, compost, hazardous). Gathers the user's current waste habits, housing situation, and local services to produce a prioritized reduction plan with estimated waste diversion percentages and cost savings. Use when the user asks about reducing household waste, starting a zero-waste journey, improving recycling habits, or conducting a waste audit. Do NOT use for commercial or industrial waste management, hazardous waste disposal procedures, composting setup details (use composting-starter-guide), or municipal waste policy analysis.

ferroxlabs Bundle

Audit digital products against WCAG 2.1/2.2 standards, determine conformance levels, identify failures, and produce actionable remediation plans with prioritized fixes. Use when the user asks about wcag compliance auditor, related techniques, best practices, or needs guidance in this domain. Do NOT use when the request is outside the scope of wcag compliance auditor or requires a different specialized skill.

ferroxlabs Bundle

Structured evaluation of time allocation, role satisfaction, burnout indicators, and boundary effectiveness across work and personal domains. Produces a balance scorecard with specific recommendations for sustainable adjustment. Use when the user asks about work life balance audit, related techniques, best practices, or needs guidance in this domain. Do NOT use when the request is outside the scope of work life balance audit or requires a different specialized skill.

ferroxlabs Bundle

Creates a terminal-to-gate workflow with check-in timelines, security preparation steps, connection procedures, and gate-area logistics. Gathers flight details, airport, traveler experience level, and special needs to produce a timed step-by-step airport navigation plan from arrival at the airport to boarding the plane. Use when the user asks about airport navigation, check-in procedures, how early to arrive at the airport, connecting flight logistics, or getting through security efficiently. Do NOT use for flight booking strategies (use travel logistics skills), travel itinerary building (use trip-itinerary-builder), or airport lounge access evaluation.

ferroxlabs Bundle

Mobile application security covering certificate pinning implementation, secure local storage patterns, jailbreak and root detection, code obfuscation and tamper detection, API security for mobile clients, biometric authentication, secure key management, network security, reverse engineering defense, and compliance with OWASP MASVS. Use when the user asks about mobile security engineer, mobile security engineer best practices, or needs guidance on mobile security engineer implementation. Do NOT use when the user needs a different specialized skill or is asking about an unrelated technology domain.

newmindsgroup Skill

Identify and exploit authentication and session management vulnerabilities in web applications. Broken authentication consistently ranks in the OWASP Top 10 and can lead to account takeover, identity theft, and unauthorized access to sensitive systems.

newmindsgroup Skill

Analyze a repository to generate recommended Claude Code settings.json permissions. Use when setting up a new project, auditing existing settings, or determining which read-only bash commands to allow. Detects tech stack, build tools, and monorepo structure.

newmindsgroup Skill

Comprehensive checklist for conducting thorough code reviews covering functionality, security, performance, and maintainability

newmindsgroup Bundle

Provide production-ready shell script templates for common Linux system administration tasks including backups, monitoring, user management, log analysis, and automation. These scripts serve as building blocks for security operations and penetration testing environments.

newmindsgroup Skill

Expert in secure mobile coding practices specializing in input validation, WebView security, and mobile-specific security patterns.

newmindsgroup Skill

Node.js development principles and decision-making. Framework selection, async patterns, security, and architecture. Teaches thinking, not copying.

newmindsgroup Bundle

Autonomously deep-scan entire codebase line-by-line, understand architecture and patterns, then systematically transform it to production-grade, corporate-level professional quality with optimizations

newmindsgroup Bundle

Advanced vulnerability analysis principles. OWASP 2025, Supply Chain Security, attack surface mapping, risk prioritization.

newmindsgroup Skill

Enables ultra-granular, line-by-line code analysis to build deep architectural context before vulnerability or bug finding.

newmindsgroup Skill

Expert in secure backend coding practices specializing in input validation, authentication, and API security. Use PROACTIVELY for backend security implementations or security code reviews.

newmindsgroup Skill

Analyze cryptographic code to detect operations that leak secret data through execution timing variations.

newmindsgroup Skill

Security auditor for Laravel applications. Analyzes code for vulnerabilities, misconfigurations, and insecure practices using OWASP standards and Laravel security best practices.

newmindsgroup Skill

Expert in threat modeling methodologies, security architecture review, and risk assessment. Masters STRIDE, PASTA, attack trees, and security requirement extraction. Use PROACTIVELY for security architecture reviews, threat identification, or building secure-by-design systems.

newmindsgroup Skill

Deep audit before GitHub push: removes junk files, dead code, security holes, and optimization issues. Checks every file line-by-line for production readiness.

newmindsgroup Skill

Conduct comprehensive SSH security assessments including enumeration, credential attacks, vulnerability exploitation, tunneling techniques, and post-exploitation activities. This skill covers the complete methodology for testing SSH service security.

newmindsgroup Bundle

Provide a comprehensive, structured reference for the 100 most critical web application vulnerabilities organized by category. This skill enables systematic vulnerability identification, impact assessment, and remediation guidance across the full spectrum of web security threats.

newmindsgroup Bundle

Build comprehensive attack trees to visualize threat paths. Use when mapping attack scenarios, identifying defense gaps, or communicating security risks to stakeholders.

newmindsgroup Skill

Searches and explores Burp Suite project files (.burp) from the command line. Use when searching response headers or bodies with regex patterns, extracting security audit findings, dumping proxy history or site map data, or analyzing HTTP traffic captured in a Burp project.

newmindsgroup Bundle

This skill ensures all code follows security best practices and identifies potential vulnerabilities. Use when implementing authentication or authorization, handling user input or file uploads, or creating new API endpoints.

newmindsgroup Skill

Expert in event sourcing, CQRS, and event-driven architecture patterns. Masters event store design, projection building, saga orchestration, and eventual consistency patterns. Use PROACTIVELY for event-sourced systems, audit trail requirements, or complex domain modeling with temporal queries.

newmindsgroup Bundle

Conduct comprehensive security assessments of SMTP (Simple Mail Transfer Protocol) servers to identify vulnerabilities including open relays, user enumeration, weak authentication, and misconfiguration.

newmindsgroup Bundle

Apply STRIDE methodology to systematically identify threats. Use when analyzing system security, conducting threat modeling sessions, or creating security documentation.

newmindsgroup Bundle

AUTHORIZED USE ONLY: This skill contains dual-use security techniques. Before proceeding with any bypass or analysis: > 1.

newmindsgroup Skill

Build a minimal but real security policy for sensitive apps. The output is a single, coherent Blue Book document using MUST/SHOULD/CAN language, with explicit assumptions, scope, and security gates.

newmindsgroup Skill

Identifies dependencies at heightened risk of exploitation or takeover. Use when assessing supply chain attack surface, evaluating dependency health, or scoping security engagements.