Security

clawic Skill

Audit code, docs, tests, and registries against the Constitution, ADRs, and decision map without making broad repairs. Use when checking whether the repository is drifting away from accepted architecture.

jylhis Bundle

Use for systemd, the Linux init system and service manager (PID 1) and its tooling. Covers writing and debugging unit files (.service, .socket, .timer, .target, .mount, .path, .slice, .scope), systemctl / journalctl / systemd-analyze, drop-in overrides and precedence, service dependencies and ordering, socket activation, timers as a cron replacement, security sandboxing (Protect*/Private*/Restrict*, DynamicUser, SystemCallFilter), cgroup v2 resource control (MemoryMax, CPUQuota, slices), user services, journald/logind/networkd/resolved, credentials, and boot performance. Trigger on "systemd", "systemctl", "journalctl", "unit file", "daemon won't start", "enable a service", "systemd timer", "harden a service", "limit CPU/memory of a process", "socket activation", or debugging a failed/looping Linux service. Read the matching reference before editing units or advising changes.

jylhis Bundle

Use this skill when the user asks to improve, iterate on, audit, or refine a specific skill in this repo. Reads filtered entries from the improvement-memory JSONL, buckets them by category, and proposes concrete SKILL.md edits. Triggers on phrases like "improve <skill>", "iterate on <skill>", "what did I correct about <skill>", "tune the <skill> skill", or any direct ask about reviewing past corrections.

jylhis Skill

Review code changes for security, performance, and correctness. Trigger with a PR URL or diff, 'review this before I merge', 'is this code safe?', or when checking a change for N+1 queries, injection risks, missing edge cases, or error handling gaps.

edmundmiller Skill

Creates and wires agenix-encrypted dotfiles secrets. Use for age recipients, encrypted credential updates, and NixOS service secret ownership.

edmundmiller Skill

Prepares intended GitHub pull requests from today's Codex tasks for a concise human review handoff. Use when asked to find today's PRs, make PRs or a PR stack review-ready, audit current-head checks and reviews, improve PR titles/bodies, or draft or send a Slack review handoff.

epicenterhq Bundle

Better Auth security hardening: rate limits, secrets, CSRF, trusted origins, cookies, sessions, OAuth tokens, and audit logging. Use when reviewing auth security, brute-force protection, token handling, or deployment safety.

peopleforrester Skill

Run comprehensive pre-PR verification loop. Checks build, types, lint, tests, security, and coverage.

peopleforrester Skill

Security review and vulnerability assessment. Use when reviewing code for security issues, auditing authentication/authorization, or checking for OWASP Top 10 vulnerabilities. Provides actionable security recommendations.

peopleforrester Skill

Systematic code review for pull requests and code changes. Use when the user asks for a code review, PR review, or wants feedback on code quality. Provides structured feedback on correctness, security, performance, and maintainability.

peopleforrester Skill

Pre-PR quality verification workflow. Runs build, type-check, lint, test, security scan, and coverage analysis in sequence. Stops on first failure and reports actionable fixes. Use before creating pull requests.

peopleforrester Skill

Pre-deployment verification workflow for Django projects. Covers migration checks, security audit, performance profiling, dependency scanning, deployment readiness, and production configuration validation.

peopleforrester Skill

Spring Security 6.x best practices. Covers SecurityFilterChain, JWT auth, OAuth2, CORS, CSRF, method-level security, password encoding, and rate limiting for Spring Boot 3.x applications.

serac-labs Skill

Review ServiceNow server-side scripts for ES5 violations, ACL/injection/XSS issues, N+1 queries, missing setLimit/error handling, hard-coded sys_ids, and business-rule recursion risks.

serac-labs Skill

Create and debug ServiceNow ACLs (record, field, REST, script-include). Covers role/condition/script patterns, which ACL names can apply to a table or field, field-level visibility, and impersonation testing for row- and field-level security.

serac-labs Skill

Build ServiceNow GRC — sn_compliance_policy lifecycle, sn_compliance_control tests, sn_risk_risk assessment with inherent/residual scoring, audit engagements, and findings remediation.

serac-labs Skill

Harden a ServiceNow instance — password complexity, session timeout, MFA enforcement, input sanitization for XSS/injection, security properties, syslog events, and security health checks.

matiascomercio Skill

configure-audit

matiascomercio Skill

Harden software supply chain security by configuring minimum release age across package managers. Auto-detects active managers or accepts explicit argument.

matiascomercio Skill

Configures audit logging for pi-ac-audit by reviewing defaults, proposing overrides, and updating project-level or user-level audit.yaml. Triggers on keywords: configure audit, audit config, audit yaml

davidtoby Bundle

Create, repair, audit, and deliver bilingual video subtitles with English speech timing and Chinese aligned on the same subtitle event. Use when asked to add English/Chinese subtitles to a video, fix subtitle sync, fill missing Chinese lines, produce softsub or hardcode MP4 deliverables, or turn a messy subtitle workflow into a reliable repeatable delivery process.

davidtoby Skill

Download a YouTube video, convert to MP4 if needed, build bilingual English/Chinese subtitles, audit completeness, and export softsub + hardcode MP4 deliverables. Includes fallback paths when YouTube auto-captions are partial or Chinese caption download is rate-limited, and notes a hardcode duration drift fix.

soden46 Skill

Laravel guidance to define clear constraints-performance, security, testing, architecture, dependencies-so AI generates code that meets your project standards

soden46 Skill

Audit completed Laravel projects and propose reusable updates to personal Laravel standards without importing project-specific details.

soden46 Skill

Laravel guidance to remove unneeded Composer packages and assets to improve boot time, memory, and security surface

lgwanai Skill

Cross-phase audit of all outstanding UAT and verification items

impertio-studio Bundle

Use when reviewing, validating, or auditing Blender Python code for correctness. Runs systematic checks for deprecated API usage, context errors, version compatibility issues, threading violations, data reference invalidation, incorrect operator calls, and addon structure compliance. Prevents shipping code with silent version-dependent failures. Keywords: code review, validation, audit, deprecated API, context error, version compatibility, threading, addon structure, code quality, Blender Python, my addon has errors, check my code, why does my script fail.

impertio-studio Bundle

Use when reviewing, validating, or auditing IfcOpenShell Python code for correctness. Runs systematic checks for schema compatibility errors, incorrect API usage (direct attribute modification vs api.run), entity reference invalidation, performance anti-patterns, and IFC standard compliance. Prevents shipping code that works on one schema but fails on another. Keywords: code review, validation, audit, IfcOpenShell, API usage, schema compatibility, entity reference, performance, code quality, check my IFC script, review IfcOpenShell code.

krmorehead Skill

Auto-generation and persistence patterns for secrets, keys, and dynamic configuration. Includes env file patterns, blockinfile usage, and variable scoping.

krmorehead Skill

OpenWrt SSH authentication transition and security hardening patterns. Use when implementing SSH key authentication, security hardening, or managing authentication transitions.

itallstartedwithaidea Skill

Secret Protection prevents credential leaks across the development lifecycle through `.env` scanning, pre-commit hooks, secret rotation policies, and runtime detection.

itallstartedwithaidea Skill

The Google Ads Account Audit skill executes a comprehensive, pattern-driven analysis of any Google Ads account using a proprietary 1,000-pattern knowledge base.

goharabbas321 Skill

Offensive security and penetration testing skill. Covers automated vulnerability scanning, secure-coding bypass detection, sanitization reviews, and exploit drafting.

systempromptio Skill

Deterministically audit and optimise a published guide. Runs a 14-section quality audit, applies 7 rewrite rules for value density, brand discipline, search-intent alignment, and CTR. Reads 28-day GSC query data per URL, produces a 100-point score delta across 11 dimensions, commits changes, and updates the per-guide report. Handles guides without GSC data. Load identity and brand-voice first.

systempromptio Skill

Write and review systemprompt.io documentation to the highest standard. Research-first workflow with per-doc reports, consistent structure enforcement, terminology compliance, code example validation, and quality gate aligned with documentation-optimiser audit. Load identity and brand-voice first.

madappgang Bundle

Router for the eight Bun/TypeScript skills — setup, HTTP, errors, testing, security, production, performance, TUI. Says which to read for a task, without loading them. Any Bun or TS work.