Security

jesusgarciafernandez Bundle

La Gestión de Seguridad Social y Cumplimiento Laboral (v2.0) es la competencia de "Asegurar que los derechos y deberes laborales se cumplen con perfección matemática". Úsala para tareas de Legal y Cumplimiento: social-security, labor-law, payroll, compliance, HR, work-safety.

ndpvt-web Skill

Evaluate and improve secure code generation using the RealSec-bench methodology: multi-stage vulnerability detection with CodeQL SAST scanning, inter-procedural data flow analysis, and composite security+correctness scoring via SecurePass@K. Applies lessons from real-world Java repository vulnerabilities spanning 19 CWE types. Use when: "audit this code for security vulnerabilities", "generate secure Java code", "check for CWE issues in this repo", "evaluate code security with CodeQL", "review this code for injection/crypto/data-flow vulnerabilities", "write secure code that avoids common weaknesses"

ndpvt-web Skill

Evaluate dialogue summaries using the DIAL-SUMMER hierarchical error taxonomy. Detects 10 fine-grained error types across two levels: dialogue-level (speaker/turn structure) and within-turn-level (semantic content). Use when: 'evaluate this meeting summary', 'check this dialogue summary for errors', 'find hallucinations in this conversation summary', 'audit this chat transcript summary', 'grade this call center summary', 'detect speaker misattribution in this summary'.

ndpvt-web Skill

Evaluate and improve the steerability of natural-language-profile-based recommender systems using the SteerEval framework. Build evaluation pipelines that measure whether recommendation engines actually respond to user steering commands (preference edits). Use when: 'evaluate my recommender's steerability', 'test if profile edits change recommendations', 'build a steerable recommendation system', 'measure how well my rec system follows user preferences', 'benchmark natural language profile steering', 'audit recommendation controllability'.

ndpvt-web Skill

Inter-procedural vulnerability detection using context-aware reasoning. Analyzes functions alongside their callers, callees, and global state to find vulnerabilities that single-function analysis misses. Uses code property graph traversal, security-focused context profiling, relevance scoring, and structured reasoning traces. Trigger phrases: - "Check this code for vulnerabilities across function boundaries" - "Analyze this function with its callers and callees for security issues" - "Find inter-procedural vulnerabilities in this codebase" - "Review this code for vulnerabilities that depend on how it's called" - "Do a deep security audit with cross-function context" - "Analyze whether this function is safe given how callers use it"

ndpvt-web Skill

Perform DAG-structured vulnerability reasoning on code, modeling causal dependencies between code facts instead of linear chain-of-thought. Use when asked to: 'analyze this code for vulnerabilities', 'explain why this code is vulnerable', 'trace the root cause of this security bug', 'review this function for memory safety issues', 'is this code exploitable and why', 'reason about the security of this code path'.

ndpvt-web Skill

Generate secure code using Stream of Revision — an in-decoding self-correction technique that backtracks and patches vulnerable code spans during generation rather than after it. Trigger phrases: - "generate secure code" - "fix security vulnerabilities in this code" - "write safe C/C++ code" - "review and revise code for security" - "backtrack and fix this vulnerability" - "self-correcting code generation"

ndpvt-web Skill

Enforce security by construction in AI-generated code using Constitutional Spec-Driven Development (CSDD). Creates a versioned security constitution document mapping CWE/OWASP vulnerabilities to enforceable constraints, then generates code that satisfies those constraints with full traceability. Triggers: 'generate secure code', 'create a security constitution', 'build with security by construction', 'CSDD for my project', 'enforce CWE constraints', 'secure code generation with traceability'

ndpvt-web Skill

Generate and evaluate complete multi-file application repositories with both functional correctness and non-functional quality (maintainability, security, robustness, efficiency, resource usage). Use when: 'generate a complete application from requirements', 'build a multi-file project', 'evaluate code quality of a repository', 'check application-level correctness', 'assess non-functional quality attributes', 'scaffold a production-grade project with tests'.

ndpvt-web Skill

Detect and repair compilation errors hidden behind #ifdef/#ifndef/#if defined() preprocessor directives in configurable C/C++ systems. Analyzes all feature combinations to find errors that only manifest under specific configurations. Use when: 'check my C code for ifdef errors', 'find compilation bugs across configurations', 'fix variability-induced compilation errors', 'analyze preprocessor conditionals for hidden bugs', 'audit configurable system for compile failures', 'detect errors in Linux kernel config-dependent code'.

ndpvt-web Skill

CWE-guided vulnerability reasoning and detection using knowledge-graph-structured analysis. Analyzes source code for security vulnerabilities with structured CWE-level explanations grounded in a security knowledge graph. Triggers: 'analyze this code for vulnerabilities', 'find CWE issues in this function', 'security audit with CWE classification', 'explain the vulnerability in this code', 'what CWE does this bug fall under', 'check this C function for memory safety issues'

ffsshhttiikk Skill

Mobile app security practices

ffsshhttiikk Skill

Security risk identification and analysis

ffsshhttiikk Skill

Expert-level knowledge and advanced techniques for Network Security

ffsshhttiikk Skill

Security incident handling procedures

ffsshhttiikk Skill

Security audit procedures and controls

ffsshhttiikk Skill

Threat intelligence collection and analysis

ffsshhttiikk Skill

Secure software development practices

ultroncore Skill

Reverse engineer Android APKs using jadx, apktool, frida, and static/dynamic analysis workflows to understand app internals, detect malware, or perform security research.

ultroncore Bundle

Analyze code diffs and PRs specifically for security implications, identifying newly introduced vulnerabilities and security regressions.

ultroncore Bundle

This skill should be used when the user requests to audit, check, or improve application security by analyzing security headers, cookie configuration, RLS policies, input sanitization, rate limiting, and other security measures. It generates a comprehensive security audit report with actionable recommendations. Trigger terms include security audit, security check, harden security, security review, vulnerability check, security headers, secure cookies, input validation, rate limiting, security best practices.

ultroncore Bundle

This skill should be used when the user requests to generate, create, or add Row-Level Security (RLS) policies for Supabase databases in multi-tenant or role-based applications. It generates comprehensive RLS policies using auth.uid(), auth.jwt() claims, and role-based access patterns. Trigger terms include RLS, row level security, supabase security, generate policies, auth policies, multi-tenant security, role-based access, database security policies, supabase permissions, tenant isolation.

ultroncore Skill

Implement anti-detection techniques for web scraping — browser fingerprint spoofing, rate limiting, proxy rotation, CAPTCHA handling, and stealth browser patterns — while operating within ethical and legal boundaries.

nahisaho Bundle

Security Incident Response skill suite for coordinated multi-step workflows. Includes an orchestrator plus specialized sub-skills designed to produce higher-quality outcomes through structured chaining.

nahisaho Bundle

Compliance and Audit Automation skill suite for coordinated multi-step workflows. Includes an orchestrator plus specialized sub-skills designed to produce higher-quality outcomes through structured chaining.

nahisaho Bundle

Orchestrates security incident response from triage to post-incident improvement.

nahisaho Bundle

Peer review skill. Structured peer review generation following journal guidelines, constructive critique formulation, statistical audit, and review scoring.

nahisaho Bundle

Research audit report skill. Systematic quality assessment of experimental designs, statistical analyses, reproducibility, and reporting standards compliance.

nahisaho Bundle

Orchestrates compliance workflows from control mapping to audit-ready response.

nahisaho Bundle

Drafts audit-ready responses with traceable control evidence references.

yejiming Bundle

Interact with Bitget Wallet API for crypto market data, token info, swap quotes, and security audits. Use when the user asks about token prices, market data, swap/trading quotes, token security checks, K-line charts, or token rankings on supported chains (ETH, SOL, BSC, Base, etc.).

yejiming Bundle

Secure WalletConnect integration for AI agents. Connect to user wallets as a DApp (Proposer) without ever handling private keys. Request transactions and signatures - users approve everything in their wallet. Zero custody, maximum security. Use when you need to interact with user wallets securely via WalletConnect v2.

yejiming Bundle

Security development skill from professional Solidity audit team. Cyfrin-backed Solidity security best practices, vulnerability patterns, and audit guidance.

ultroncore Skill

Generate Software Bills of Materials (SBOMs) with Syft — a CLI tool and library from Anchore that catalogs all packages, libraries, and dependencies in container images and filesystems. Use this skill whenever the user needs to create an SBOM, comply with software supply chain requirements, or generate a CycloneDX/SPDX inventory of their application's dependencies. Trigger for "syft sbom", "software bill of materials", "sbom generation", "supply chain security", or "syft anchore".

ultroncore Skill

Run automated vulnerability detection on your own web apps and infrastructure using Nuclei — a fast, template-based vulnerability scanner for defensive security assessments. Use this skill when the user needs to scan their own web applications for known vulnerabilities, misconfigurations, or CVEs using Nuclei templates. All use is strictly for systems you own or have explicit written authorization to test.

ultroncore Skill

HashiCorp Boundary — identity-based secure remote access without VPN or bastion hosts. Use this skill whenever the user needs to provide SSH/RDP/database access to engineers without exposing infrastructure, replace bastion hosts with identity-aware access, set up just-in-time access with Vault-brokered credentials, configure Boundary targets and host catalogs, or integrate with SSO for infrastructure access. Trigger for "boundary access", "hashicorp boundary", "replace bastion host", "just-in-time access", "boundary targets", or "identity-based ssh access".