Security

hack23 Skill

Open source governance, security posture badges, license compliance, SBOM generation, and vulnerability management for transparency-driven development

hack23 Skill

Implement strong encryption, secure hashing, and proper key management following NIST and OWASP cryptography guidelines

hack23 Skill

Security architecture review, control validation, penetration testing guidance, and compliance verification for the CIA platform

hack23 Skill

Hack23 Information Security Policy integration for SDLC — developer-facing mapping of ISP requirements to daily engineering activities, tooling, and evidence

rweisssieker-xp Skill

Create audit-ready evidence packs with masking, chain of custody, evidence quality grades, and validation artifacts.

rweisssieker-xp Skill

Generate guarded admin execution previews with policy gates, confirmation tokens, audit records, and rollback/validation metadata.

rweisssieker-xp Skill

Configure, validate, or run the local AXPA RBAC web portal with token-based dashboard access and audit logging.

rweisssieker-xp Skill

Generate executive and change-control reports for AX 2012 performance findings with risk, impact, evidence, recommendations, and audit-ready action plans.

rweisssieker-xp Skill

Generate governance artifacts such as runbooks, RACI, business impact timeline, suppression governance, data quality checks, and audit exports.

cyberuni Bundle

Audit, improve, or write a SKILL.md — check description trigger coverage, structure, security, and agentskills.io compliance. Use when reviewing or creating a skill for Claude Code, Cursor, Codex, Copilot CLI, or any agentskills-compatible runtime, even if the user says "my skill isn't triggering", "review before I publish", or "check this skill."

ferroxlabs Skill

You want issues found, classified, fixed, tested and committed without steering each one

ferroxlabs Skill

You want every outstanding verification item across all steps gathered in one place

ferroxlabs Skill

quality gates | code review debug audit security eval ui

ferroxlabs Skill

You want the code checked for bugs, security issues and quality before it goes anywhere

ferroxlabs Skill

A milestone looks done and you want it checked against what you originally asked for

yue-zhou1 Skill

Audit FHE implementations for noise-budget accounting, bootstrapping correctness, modulus-switching safety, plaintext leakage, and key-switch parameter integrity.

yue-zhou1 Skill

Audit MPC implementations for garbled-circuit integrity, oblivious transfer misuse, share validation, Beaver triple authenticity, and transcript/session binding issues.

yue-zhou1 Skill

Audit VDF implementations for sequentiality assumptions, Wesolowski/Pietrzak verifier soundness, challenge derivation integrity, and modulus/group setup risks.

yue-zhou1 Skill

Audit Verifiable Random Function implementations (RFC 9381 ECVRF and RSA-FDH-VRF) for key validation, ciphersuite/suite-string domain separation, encode-to-curve and cofactor handling, proof-to-hash ordering, and uniqueness/pseudorandomness assumptions, plus application-level output grinding. Use when reviewing VRF provers, verifiers, or consumers of VRF outputs (leader election, lotteries, randomness beacons).

yue-zhou1 Skill

Provides shared severity, testing-evidence, and finding-contract references for ZK and cryptographic audit skills. Use when classifying findings, checking whether test evidence is sufficient, or writing findings in a consistent structure.

yue-zhou1 Skill

Audit Noir circuits for unconstrained function boundary failures, oracle validation gaps, Brillig/ACIR consistency issues, and witness-generation soundness bugs.

yue-zhou1 Skill

Queryable index of real-world ZKP vulnerabilities. Use when a Phase 2 audit skill identifies a suspicious pattern and needs to check whether a similar bug has been documented before — or when a confirmed finding needs to be recorded. Covers circom, noir, halo2, cairo, zkVM, and custom DSLs. Backed by upstream community corpus (zksecurity/zkbugs) and configurable organization findings repo.

yue-zhou1 Skill

Audit zkVM guest programs and proof systems for memory consistency, continuation proof soundness, precompile safety, and guest-host boundary violations across SP1, RISC Zero, and Valida.

yue-zhou1 Skill

Audit Cairo and Starknet code for hint validation failures, felt252 overflow, builtin misuse, and Sierra-to-CASM soundness gaps. Use when reviewing Cairo contracts, prover hints, or Starknet-specific proof construction.

yue-zhou1 Skill

Audit lattice-based cryptography for LWE/RLWE parameter soundness, noise sampling correctness, rejection-sampling safety, and decryption-failure assumptions.

yue-zhou1 Skill

Audit standardized post-quantum KEM implementations — currently ML-KEM / FIPS 203 — for encapsulation/decapsulation conformance, implicit-rejection correctness, ciphertext and key validation, compression/rounding, and decapsulation-failure oracle resistance. Use when reviewing ML-KEM/Kyber APIs, serialization, or decapsulation paths.

yue-zhou1 Skill

Generate cargo-fuzz targets for Rust cryptographic code. User-triggered only and never auto-invoked by the audit flow. Produces crash and edge-case evidence for crypto-fp-check.

yue-zhou1 Skill

Generate Kani proof harnesses for Rust crypto code. User-triggered only — never auto-invoked by the audit flow. Produces formal verification evidence for crypto-fp-check.

yue-zhou1 Skill

Audit cryptographic dependency sets for vulnerable versions, security-significant feature flags, advisory coverage, transitive risk, and stale fork provenance.

yue-zhou1 Skill

Audit randomness and nonce lifecycles: CSPRNG/DRBG initialization and reseeding, entropy availability, fork/clone/snapshot duplication, deterministic nonce derivation (RFC 6979, EdDSA), and reuse across retries, crashes, persistence, and concurrent state. Use when any secret-dependent random value's generation or lifetime is in question.

yue-zhou1 Skill

Review Rust cryptographic code for implementation-level security bugs. Use when auditing constant-time behavior, secret zeroization, panic and overflow hazards, unsafe blocks, unchecked constructors, feature flags, or dependency hygiene in crypto crates.

yue-zhou1 Skill

Audit ZK circuits, proof systems, and verifier code for soundness and transcript failures. Use when reviewing witness constraints, Fiat-Shamir flows, KZG/PCS setup assumptions, public input encoding, or recursive proof threading.

yue-zhou1 Skill

Route a full cryptographic or ZK audit across the framework. Use when you need to decide which skill should run next, which domain auditors apply, or how to move from initial context to verified finding, report, and index flow.

yue-zhou1 Skill

Audit elliptic-curve, pairing, and BLS signature code for point-validation, subgroup, serialization, DST, and pairing-equation failures. Use when reviewing deserialization, `hash_to_curve`, aggregate verification, or batch pairing logic.

yue-zhou1 Skill

Audit Fiat-Shamir transcript implementations for completeness, domain separation, challenge derivation order, and public input binding across interactive-to-non-interactive proof transforms.

yue-zhou1 Skill

Audit Merkle tree implementations for second-preimage attacks, leaf-node domain separation, sparse tree edge cases, and proof verification soundness.