Security

rweisssieker-xp Bundle

Identify, categorize and prioritize enterprise risks, compliance gaps, control weaknesses, audit topics, evidence needs and countermeasures. Use for risk reviews, audit preparation and compliance intelligence. Use when the user needs risk compliance intelligence for CIO decision support.

rweisssieker-xp Bundle

Translate security findings, vulnerabilities, identity gaps, incidents and maturity issues into business impact, executive decisions, budget needs and risk trade-offs. Use when the user needs security business translator for CIO decision support.

rweisssieker-xp Bundle

Synthesize constructive CFO, CISO, COO, Audit, architecture and customer dissent before decisions are approved. Use when the user needs executive dissent synthesizer for CIO decision support.

rweisssieker-xp Bundle

Generate concise board, CEO, CFO, CISO/Audit and customer narratives from a decision packet or operating review. Use when the user needs executive narrative generator for CIO decision support.

rweisssieker-xp Bundle

Map IT/OT, shopfloor, ERP, MES, integration, network, security and production-continuity risks into executive risk chains and action gates. Use when the user needs it ot production risk command for CIO decision support.

rweisssieker-xp Bundle

Run a manufacturing, industrial, medtech or regulated-production CIO operating review across IT, OT, ERP, MES, QMS, PLM, security, production continuity, audit evidence, vendors and digital channels. Use when the user needs industrial cio operating system for CIO decision support.

rweisssieker-xp Bundle

Translate security, IAM, vulnerability, breach and control signals into business impact, executive decisions and risk acceptance choices. Use when the user needs cyber business impact translator for CIO decision support.

rweisssieker-xp Bundle

Generate targeted due-diligence questions for board, vendor, crisis, audit, transformation, AI and carve-out reviews. Use when the user needs autonomous due diligence questions for CIO decision support.

rweisssieker-xp Bundle

Analyze enterprise architecture, system landscapes, technical debt, redundancy, data quality, data flows, critical assets and security risks. Use for CIO, CISO and enterprise architecture decisions. Use when the user needs architecture data security intelligence for CIO decision support.

cbrock84 Skill

Structures the tax questions a growing business faces — corporate income, sales and use, payroll, nexus, and the obligations created by hiring or selling somewhere new. Use this to work out what a new state or country obligates you to, prepare for a tax filing or audit, understand sales tax on your product, or check what a remote hire or new market triggers.

cbrock84 Skill

Identifies, assesses, and tracks organizational risk — building and maintaining a risk register, scoring exposure, assigning owners and treatments, and preparing for audit. Use this to stand up a risk program, assess the risk in a decision or initiative, prepare for a certification or audit, decide whether a risk should be accepted, mitigated, transferred, or avoided, or report risk posture to leadership.

cbrock84 Skill

Runs a security incident from detection to closure — triage, containment, investigation, communication, and the review afterward. Use this when a compromise is suspected or confirmed, when preparing an incident response plan or running an exercise, when deciding whether something is an incident, or when a breach may trigger notification obligations.

marucie Skill

Perform Five Forces analysis — competitive rivalry, supplier power, buyer power, threat of substitutes, and threat of new entrants. Use when analyzing industry dynamics, assessing competitive forces, or evaluating market attractiveness.

marucie Skill

Use when adding structured logging, instrumenting Prometheus metrics, wiring up distributed tracing with OpenTelemetry, writing alerting rules, defining SLOs and error budgets, or building a Grafana golden-signals dashboard.

marucie Skill

Use when: user needs internal control evaluation, process audit, fraud detection, COSO framework application, or audit workpaper preparation. Trigger: '内部审计', '内控', '舞弊', 'COSO', '审计底稿', '职责分离', '控制缺陷'. NOT for: external audit (CPA statutory audit) or financial statement audit opinion — those require registered CPA.

marucie Skill

Use when: risk identification, compliance checking, Golden Tax IV alerts, audit preparation, internal control review. Trigger: 合规, 风险, 稽查, 预警, 金税四期, 内控, 质检. NOT for: external audit opinions, legal proceedings.

marucie Skill

Quality Gate Workflow

marucie Skill

Scope Contract Workflow

marucie Skill

Delivery Review Workflow

iblai Skill

Connect an ibl.ai organization for API access. Gets the user signed in (ibl.ai/join if new, login.iblai.app/me if returning), captures their org key and username, mints a Platform API Token, and writes IBLAI_ORG / IBLAI_USERNAME / IBLAI_API_KEY to .env and PLATFORM / TOKEN / IBLAI_USERNAME to iblai.env (the same values under the names each skill family uses). If you already hold org credentials (key + secret), the secret works directly as the Api-Token — no browser needed. Run this first before any other iblai-* skill.

iblai Bundle

Audit and harden existing codebases (especially AI-generated / vibe-coded ones) for production readiness. Use when the user asks to review, audit, clean up, harden, deslop, refactor, or fix quality issues across an existing codebase. Works in two phases — first a thorough multi-pass audit written to a structured file, then systematic fixes applied in safety-tiered order. Language-agnostic. Does NOT change business logic — only hardens, cleans, and robustifies.

iblai Skill

Manage an organization's Platform API Tokens via the platform API — list, create (secret shown once), and delete Api-Tokens by name. Use when issuing or rotating the keys that authenticate ibl.ai API access.

etanhey Bundle

Review changes and handle CodeRabbit/Greptile/Bugbot/GitHub feedback. Triggers: review, comments, security.

etanhey Bundle

Create/edit/audit/eval golem skills. Triggers: create skill, skill eval, live eval, JSONL mining.

etanhey Bundle

Audit unfamiliar repos: architecture, features, config gaps. Triggers: unfamiliar repo audit. NOT catchup.

etanhey Bundle

Bash security checklist: injection, set -euo, printf, quoting. Triggers: shell hardening, bash security.

etanhey Bundle

Audit code for duplicated ownership, uncoordinated implementations, multiple writers, split lifecycle controls, live-copy drift, or missing single sources of truth. NOT for generic lint, style, security, or architectural research audits.

etanhey Bundle

Audit cmux panes for claim-or-close. Triggers: sprint close-out, idle workers, dead shells, uncommitted or unpushed artifacts, untitled seats, stale numeric surface refs.

etanhey Bundle

Workflow depth-floor gate. Triggers: ultracode, exhaustive audit, deep fan-out, workflow topology, persistent collab.

etanhey Bundle

Mine a conference for hiring targets and matching jobs. Triggers: tech or security conference, Hackers Summer Camp, BSides, Black Hat, DEF CON, conference sponsors, exhibitors, speakers. NOT for general job search or LinkedIn post drafting.

etanhey Bundle

Lint launchd plists for hardcoded secrets. Triggers: launchd plist, LaunchAgents, plist secret, raw API key in plist, secrets hygiene, op:// reference.

etanhey Bundle

Pre-R0 diff of implementation vs SOTA research. Triggers: before R0, architectural audit. NOT per-PR review.

qa-aman Skill

Audit a user flow for friction and drop-off points. Use when the user says "UX audit", "audit this flow", "where are users dropping off", "why isn't this converting", "review the onboarding", "usability audit", "what's causing friction", "user journey review", or wants to identify why users struggle with a flow - even if they don't explicitly say "UX audit".

qa-aman Skill

Write a vulnerability report. Use when the user says "vulnerability report", "vuln report", "security finding", "write up this finding", "pentest finding", "bug bounty report", "security disclosure", "CVE writeup", "document this vulnerability", "how to report a security issue", or needs to formally document a security vulnerability with evidence, impact, and remediation guidance - even if they don't explicitly say "report".

cbrock84 Skill

Tracks hardware and software assets through their life — procurement, ownership, licensing, refresh, and disposal. Use this to build an asset register, prepare for a software audit, plan a refresh cycle, control license spend, or dispose of equipment safely.

cbrock84 Skill

Runs the loop from discovering a weakness to confirming it is fixed — scanning, triage, prioritization by real exploitability, remediation tracking, and patch policy. Use this to stand up or fix a vulnerability program, triage scanner output, decide what to fix first, set patch SLAs, handle a disclosure from an outside researcher, or report posture to leadership.