Security

tuanductran Skill

Security-first vetter for SKILL.md files — checks permissions, suspicious patterns, and metadata before installing or publishing skills. Useful for validating third-party skills for this repo.

tuanductran Bundle

Help HR technology teams plan and manage integrations between HR systems (HRIS, ATS, payroll, LMS, benefits platforms) so data flows accurately across the HR tech stack. Use when asked to integrate our HRIS with [system], plan a system integration for HR tools, fix data sync issues between systems, design an HR tech integration architecture, or audit our HR system integrations.

jsgforever Bundle

Validate CSRF protection implementations for security gaps. Use when reviewing form security or state-changing operations. Trigger with 'validate CSRF', 'check CSRF protection', or 'review token security'.

jsgforever Bundle

Use when you need to work with security and compliance. This skill provides security scanning and vulnerability detection with comprehensive guidance and automation. Trigger with phrases like "scan for vulnerabilities", "implement security controls", or "audit security".

jsgforever Bundle

Gate 4 of development cycle - dispatches 6 specialized reviewers (code, business-logic, security, test, nil-safety, consequences) in parallel for comprehensive code review feedback.

jsgforever Bundle

Perform security penetration testing to identify vulnerabilities. Use when conducting security assessments. Trigger with 'run pentest', 'security testing', or 'find vulnerabilities'.

jsgforever Bundle

Guide security incident response, investigation, and remediation processes. Use when you need to handle security breaches, classify incidents, develop response playbooks, gather forensic evidence, or coordinate remediation efforts. Trigger with phrases like "security incident response", "ransomware attack response", "data breach investigation", "incident playbook", or "security forensics".

jsgforever Bundle

Use when you need to work with compliance checking. This skill provides compliance monitoring and validation with comprehensive guidance and automation. Trigger with phrases like "check compliance", "validate policies", or "audit compliance".

jsgforever Bundle

Use when you need to track database changes for compliance and security monitoring. This skill implements audit logging using triggers, application-level logging, CDC, or native logs. Trigger with phrases like "implement database audit logging", "add audit trails", "track database changes", or "monitor database activity for compliance".

jsgforever Skill

Use Trivy vulnerability scanner in offline mode to discover security vulnerabilities in dependency files. This skill covers setting up offline scanning, executing Trivy against package lock files, and generating JSON vulnerability reports without requiring internet access.

dabit3 Bundle

Jailbreak LLMs: Parseltongue, GODMODE, ULTRAPLINIAN.

dabit3 Skill

OSINT username search across 400+ social networks. Hunt down social media accounts by username.

dabit3 Bundle

Set up and use 1Password CLI (op). Use when installing the CLI, enabling desktop app integration, signing in, and reading/injecting secrets for commands.

dabit3 Bundle

Authorized web application penetration testing — reconnaissance, vulnerability analysis, proof-based exploitation, and professional reporting. Adapts Shannon's "No Exploit, No Report" methodology with hard guardrails for scope, authorization, and aux-client leakage. Active testing against running applications you own or have written authorization to test.

dabit3 Bundle

Supply chain investigation, evidence recovery, and forensic analysis for GitHub repositories. Covers deleted commit recovery, force-push detection, IOC extraction, multi-source evidence collection, hypothesis formation/validation, and structured forensic reporting. Inspired by RAPTOR's 1800+ line OSS Forensics system.

dabit3 Skill

Pre-commit review: security scan, quality gates, auto-fix.

egohygiene Bundle

Comprehensive guide for setting up and configuring CodeQL code scanning via GitHub Actions workflows and the CodeQL CLI. This skill should be used when users need help with code scanning configuration, CodeQL workflow files, CodeQL CLI commands, SARIF output, security analysis setup, or troubleshooting CodeQL analysis.

egohygiene Skill

Create, refine, connect, audit, or migrate atomic Mind Garden synapses from developed knowledge. Use when evaluating the Synapse Test, reconciling duplicate insights, writing source-linked knowledge notes, adding relationships, organizing lifecycle metadata, or reviewing an existing synapse corpus.

rheinmir Skill

Ghi và kiểm provenance (nguồn + sha256 checksum) cho skill — dùng khi 'cài skill từ ngoài', 'skill này từ đâu', 'audit nguồn skill', 'checksum skill', 'supply-chain skill', phát hiện skill bị sửa lén; bổ trợ orca-sec-scans. Chạy fdk/tools/skill-provenance.py. /skill-provenance

griddynamics Bundle

Run authorized, evidence-preserving security reviews and prepare remediation inputs.

griddynamics Bundle

To design and audit Solr schemas: field types, analyzers, docValues, solrconfig.

griddynamics Bundle

Workflow for authorized, evidence-preserving security review and remediation-task preparation.

clawlink-hq Skill

NPM integration for AI agents via ClawLink — browser login, no API key setup. Connect NPM through ClawLink's hosted setup to search packages, get download stats, check security advisories, and browse registry metadata. Use this skill when the user wants to work with NPM (Developer Tools) — connect NPM, read or update NPM data, or take actions in NPM from chat instead of saying you cannot access it.

dasexperten Bundle

Process Audit Expert

jsgforever Bundle

Composable binary security suite for static analysis, dynamic tracing, contract capture, baseline drift, and policy gating. Triggers: "binary security", "reverse engineer binary", "black-box binary test", "behavioral trace", "baseline diff", "security suite".

jsgforever Bundle

Unified paper audit for Chinese and English papers. Use when reviewing paper quality, pre-submission checks, or doing adversarial reviews.

jsgforever Bundle

Audit and improve English LaTeX academic papers. Use when writing, reviewing, or compiling IEEE, ACM, Springer, NeurIPS, and ICML papers.

jsgforever Bundle

Audit 6 categories of breaking changes with executable checks for contracts, API diffs, serialized state, and event types.

jsgforever Bundle

Check dependencies for known security vulnerabilities and outdated versions. Use when auditing third-party libraries. Trigger with 'check dependencies', 'scan for vulnerabilities', or 'audit packages'.

jsgforever Bundle

Check compliance with OWASP Top 10 security risks and best practices. Use when performing comprehensive security audits. Trigger with 'check OWASP compliance', 'audit web security', or 'validate OWASP'.

openharmonyinsight Bundle

Expert coding guide for OpenHarmony C++ development. Use this skill when writing, refactoring, or reviewing C++ code for OpenHarmony projects. It enforces strict project-specific conventions (naming, formatting, headers) and critical security requirements (input validation, memory safety).

openharmonyinsight Bundle

OpenHarmony软总线代码安全检视专家 - 全面检查C/C++代码的安全编码规范和日志规范。 涵盖40+条安全规则，包括指针安全、内存管理、锁管理、敏感信息保护等关键领域。 提供跨文件调用分析和控制流分析，生成详细的代码审查报告。 仅在用户输入包含"软总线安全卫士"时触发。 ⚠️ 重要：此技能为只读审查工具，不修改源文件。

openharmonyinsight Bundle

Check whether OpenHarmony API documentation follows the required templates and whether public API docs, system API docs, error code docs, and interface declarations/comments/implementations are consistent. Use when the user asks to review API doc quality, compare docs against code, audit error code docs, fill missing interface documentation, or generate a doc issue report.

tuanductran Bundle

Help TA operations leaders design and run the operational backbone of recruiting — requisition workflows, ATS process design, recruiting SLAs, and reporting cadence. Use when asked to design our requisition approval workflow, build recruiting SLAs, set up ATS stages and workflows, audit our recruiting process for bottlenecks, or build a recruiting operations dashboard.

winsorllc Bundle

Execute multi-step Standard Operating Procedures (SOPs) with approval gates, state persistence, and execution tracking. Use when you need to run complex, multi-step workflows that require human approval, conditional branching, and audit trails.

winsorllc Skill

Automated code review and analysis. Use when: user wants to review code changes, check for issues, analyze complexity, or perform security scans.