Security

phuc-nt Skill

Research technical solutions, analyze architectures, gather requirements thoroughly. Use for technology evaluation, best practices research, solution design, scalability/security/maintainability analysis.

phuc-nt Bundle

Review GitHub PRs for duplicate prior work, project standards, strategic necessity, correctness, security, breaking changes, code quality, and AI-slop patterns. Supports --fix and --reply.

phuc-nt Skill

STRIDE + OWASP-based security audit with optional auto-fix. Scans code for vulnerabilities, categorizes by severity, and can iteratively fix findings using mk-autoresearch pattern.

phuc-nt Bundle

Scan codebase for security vulnerabilities, hardcoded secrets, dependency issues, and OWASP patterns. Use when asked to 'security scan', 'check for secrets', 'audit security', or before major releases.

robsonrung Bundle

Create, audit, or simplify project instruction files such as AGENTS.md and CLAUDE.md. Use to fix instruction drift or separate conditional guidance; use skill-expert for SKILL.md files.

robsonrung Bundle

Review code changes or requirements with evidence-backed findings. Use for integration seams, public contracts, security, migrations, or a requested deep review; keep local task reviews scoped.

robsonrung Skill

Identify security decisions during an interview and classify slices for deep or standard review. Use when defining an exposed security surface or planning its review; full-review performs the code review.

trac3r00 Bundle

Parses a crontab, expands every schedule into concrete values, explains each job in plain words, and flags invalid lines, impossible schedules, and over-frequent jobs. Crontab syntax is write-only for most humans; this makes it readable. Stdlib-only, deterministic.

trac3r00 Bundle

Repo Audit

trac3r00 Bundle

Grades the HTTP security headers of a URL — HSTS, Content-Security-Policy, framing protection (X-Frame-Options/frame-ancestors), X-Content-Type-Options, Referrer-Policy, and cookie Secure/HttpOnly flags — with an A-F letter grade and per-header pass/warn/fail. Stdlib-only fetch, no browser.

vigneshbarani24 Skill

Use when working with SAP Concur — Concur Expense, Concur Travel, Concur Invoice, Concur Request, expense policy configuration, receipt management, travel booking, approval workflows, integration with S/4HANA FI, audit rules, or compliance monitoring.

vigneshbarani24 Skill

Use when designing SAP authorization concepts, building or reviewing roles, analyzing SoD conflicts, implementing GRC Access Control (ARA/ARM/EAM/BRM), configuring Firefighter access, auditing security logs, or securing BTP with XSUAA and IAS.

donatassimkus Bundle

Blog Audit

donatassimkus Bundle

UI/UX audit

donatassimkus Bundle

Technical audit

donatassimkus Bundle

AUDIT: is the Claude Code rig itself healthy? Audit and self-maintain the Claude Code setup. Auto-updates the capabilities reference, diagnoses what's working across memory/skills/hooks/rules/security, auto-executes safe cleanup and batches the rest for approval. Use when asked to audit the setup, optimize workflows, review Claude Code health, find automation opportunities, or clean up the system.

spinabot Skill

Host security hardening and risk-tolerance configuration for Brigade deployments. Use when a user asks for security audits, firewall/SSH/update hardening, risk posture, exposure review, Brigade cron scheduling for periodic checks, or version status checks on a machine running Brigade (laptop, workstation, Pi, VPS).

spinabot Bundle

Create, edit, improve, or audit AgentSkills. Use when creating a new skill from scratch or when asked to improve, review, audit, tidy up, or clean up an existing skill or SKILL.md file. Also use when editing or restructuring a skill directory (moving files to references/ or scripts/, removing stale content, validating against the AgentSkills spec). Triggers on phrases like "create a skill", "author a skill", "tidy up a skill", "improve this skill", "review the skill", "clean up the skill", "audit the skill".

fallow-rs Skill

Audit the current Fallow session for missed work, incomplete verification, stale documentation, companion drift, or cleanup before final completion.

fallow-rs Skill

Measure Fallow maintainability using the repository's SIG system properties and update the evidence-backed audit report.

fallow-rs Skill

Audit Fallow for unnecessary code, misleading tests, redundant abstractions, avoidable copying, and stale maintenance guidance. Use for a requested slop audit or deep cleanup pass.

fallow-rs Skill

Iteratively improve Fallow maintainability using measured SIG audit deltas, retaining only changes that improve the targeted property without regressions.

jonesrussell Skill

Show everything Claudia knows with provenance tracing and entity counts. Triggers on "what do you know?", "show memories", "memory audit", "what do you remember about".

jonesrussell Skill

Use when auditing a service directory for security vulnerabilities, reviewing auth boundaries, access control, input validation, public surface abuse, secrets handling, or operational hardening. Triggers on /security-review, "security audit", "review security", or any request to check a codebase for security issues.

gulmezeren2-byte Skill

Row Level Security policies that hold under an anon key: policy per operation, testing as an unauthenticated caller, and the join that leaks a row the policy meant to hide.

peterbamuhigire Bundle

Use when research, analysis, forecasts, or recommendations need adversarial review, red-team challenge, devil's advocacy, source audit, method review, dissent handling, and revision disposition before release.

peterbamuhigire Bundle

Use when the engine must turn research into reusable knowledge assets, audience-specific variants, and monetizable offerings rather than a one-off document only. Encodes knowledge audit, asset design, reuse discipline, and commercialization framing.

timlai666 Skill

This skill MUST be used when a user wants to scan, audit, analyze, or tidy up a folder or collection of files — whether uploaded directly to the conversation, specified by local path, or described verbally. Trigger on requests like 整理檔案、掃描資料夾、幫我分類檔案、檔案整理計畫、資料夾結構建議、file organization, folder audit, help me sort my files, clean up my downloads, rename and categorize files, suggest a folder structure. MUST follow a plan-first, execute-later pattern, and MUST NOT rename, move, or delete anything before the user confirms the full plan.

timlai666 Skill

Inspect code diffs before opening a pull request or merging. This skill MUST be used when the user provides a code diff, pastes code changes, asks for a code or PR review, or when code is about to be submitted as a PR or merged. It MUST NOT be skipped solely because the diff is small. It SHOULD also be used before committing or handing back substantial or high-risk code changes. It MUST NOT be used when changes are limited to non-code content such as documentation, prose, images, or formatting. For small, low-risk self-changes, perform only a lightweight review without specialist dispatch. Checks requirement scope, correctness, security, compatibility, and test coverage. Triggers on: 幫我看程式 diff, 看一下程式改了什麼, review 程式碼, PR review, diff review, code review, 看看程式有沒有問題

mingchen666 Bundle

Use this skill whenever the user is learning computer networking, computer networks, TCP/IP, OSI, subnetting, routing, switching, DNS, HTTP, TCP, UDP, DHCP, TLS, NAT, congestion control, network security basics, or asks for a chapter summary, learning path, concept explanation, study notes, revision plan, or course help for a networking class.

autumnsgrove Bundle

Audit pull requests for Grove SDK compliance, convention adherence, and pattern violations. The crane stands vigil over every change. Use when reviewing PRs for standards compliance before merge.

autumnsgrove Bundle

Unified codebase audit that launches 10 parallel micro-lane subagents to check compliance, security, and quality. Auto-fixes deterministic issues, reports everything else inline. Three modes — quick (branch diff), standard (changed packages), full (entire codebase).

autumnsgrove Bundle

Comprehensive security auditor that surveys entire applications or subsystems with threat modeling, OWASP coverage, infrastructure review, and formal reporting. The hawk circles above the grove, seeing everything. Use when you need a full security assessment, not just a quick check.

autumnsgrove Skill

Rummage through code with curious precision, inspecting every corner for security risks and cleaning up what doesn't belong. Use when auditing security, finding secrets, removing dead code, or sanitizing before deployment.

autumnsgrove Bundle

The drum sounds. Spider, Raccoon, and Turtle gather for complete security work. Use when implementing auth, auditing security, or hardening code end-to-end.

autumnsgrove Skill

Better Auth framework reference — configuration, security, rate limiting, sessions, plugins, and production hardening. Use when configuring Better Auth, auditing auth security, adding plugins, or troubleshooting Heartwood.