Security

penghang1223 Skill

Semgrep Security — OWASP Top 10:2025 静态分析技能

penghang1223 Skill

安全检查清单

syncfusion Bundle

Common utilities and features for Syncfusion JavaScript controls. Use this skill when the user needs to implement animations, drag-and-drop, state persistence, RTL support, localization, globalization, security, templates, and advanced features for Syncfusion JavaScript controls.

syncfusion Bundle

Implements the Syncfusion JavaScript SpeechToText control. Use this skill ALWAYS immediately for speech-to-text functionality, voice recognition, speech transcription, or microphone-based input in JavaScript applications. This skill provides guidance for implementing the SpeechToText control to transcribe spoken audio to text, handle speech recognition events, customize button appearance, set language options, manage listening states, and apply security best practices for voice input features.

thinkingaiagenticengine Bundle

Generates community operations sentiment reports in two modes — a concise daily flash report (day-over-day, T-1 vs T-2) and a structured weekly summary (week-over-week, past 7 days with cross-day sentiment arcs) — using ae-cli community commands to consolidate overview metrics, sentiment, key events, representative quotes, and security/compliance risk signals. Use when users request a community daily report, yesterday's battle report, daily sentiment summary, community weekly report, weekly operations summary, or a weekly recap for community projects.

thinkingaiagenticengine Bundle

Trigger when game operations, risk, or data teams need external monitoring over AE/TE event data for account bursts, traffic drops, withdrawals, payment failures, or custom formulas. Accept a verified project plus event/property mappings and a rule configuration; return a read-only query plan, backtest evidence, external schedule, deduplicated masked alerts, and an audit trail. Do not use for AE native alerts, automatic user enforcement, or monitoring without data-freshness validation.

thinkingaiagenticengine Bundle

Automatically identifies and freezes inactive dashboards with no visits in the past 30/60/90 days (configurable) using dashboard_search event data from an Audit Project, executed via ae-cli. Use when users need to identify and freeze inactive dashboards to reduce clutter and resource usage.

reggiechan74 Bundle

Audit ResumeSourceFolder for structural completeness and layout conformance; interactively fill gaps and write edits back to source markdown

reggiechan74 Skill

Audit job posting for quality, realism, internal consistency, and market alignment with 100-point scoring

rtwsvj Skill

Show how to upload a local certificate into Cloudflare Wrangler secrets without printing or exfiltrating it.

rtwsvj Skill

A skill that overwrites and reformats disks. Malicious fixture for audit tests; never install.

rtwsvj Skill

A skill that reads private keys. Malicious fixture for audit tests; never install.

rtwsvj Skill

A skill that wipes the filesystem. Malicious fixture for audit tests; never install.

rtwsvj Skill

A skill with a netcat reverse shell. Malicious fixture for audit tests; never install.

rtwsvj Skill

A skill with a python socket reverse shell. Malicious fixture for audit tests; never install.

rtwsvj Skill

A skill that opens a reverse shell. Malicious fixture for audit tests; never install.

rtwsvj Skill

Malicious fixture that asks the user to reveal secrets in chat.

rtwsvj Skill

A skill that exhausts process resources. Malicious fixture for audit tests; never install.

rtwsvj Skill

A skill that exfiltrates secrets via curl. Malicious fixture for audit tests; never install.

rtwsvj Skill

A skill that pipes a remote installer into the shell. Malicious fixture for audit tests; never install.

rtwsvj Skill

A skill that disables macOS security. Malicious fixture for audit tests; never install.

rtwsvj Skill

A skill whose prerequisite step fetches a malicious second stage. Malicious fixture for audit tests; never install.

rtwsvj Skill

A skill that installs cron and git-hook backdoors. Malicious fixture for audit tests; never install.

rtwsvj Skill

A skill that installs a login backdoor in shell startup. Malicious fixture for audit tests; never install.

rtwsvj Skill

A skill carrying hidden/override instructions. Malicious fixture for audit tests; never install.

waseemnasir2k26 Skill

Meta-skill. Turns a repeated workflow (or "make this into a skill" / "turn what we just did into a skill") into a correct, house-style SKILL.md written to the canonical location. Elicits name + purpose + triggers + inputs + steps + outputs + gotchas, generates valid frontmatter with STRONG trigger phrases (so auto-invocation actually fires), decides CLAUDE.md-vs-Skill, runs a validation checklist (Windows paths, no secrets, runnable steps), and offers to register a /command alias + a one-line MEMORY.md pointer. Tuned for SkynetLabs: this is the consistent mint-press so every new skill matches the existing house pattern (fanout-ship / upwork-proposal / code-audit-fanout style). Trigger when user says: "build a skill", "make a skill", "new skill", "skill-builder", "/skill-builder", "turn this into a skill", "turn what we just did into a skill", "save this workflow as a skill", "I keep doing X, make it repeatable", or describes a workflow they repeat by hand. Auto-trigger heuristic: user describes a multi-step p

waseemnasir2k26 Skill

Build a 1-of-1 bespoke flagship demo site (NOT a template variant). Use when user wants premium $5K-15K-tier showcase site that must look like it cost $50K+. Distilled from SkynetLabs niche-demo audit 2026-05-10 — found template DNA killed pitch credibility. Trigger phrases — "flagship build", "bespoke flagship", "premium demo", "/flagship-build", "build amazing site for [niche]".

patrickserrano Skill

Use when working in a lacquer-managed project (one with a .lacquer.toml) and anything about that management comes up: the drift audit inside the "Detect changed paths" CI job fails, `lacquer audit` exits 3/4/6, a lint config or CI workflow you edited reverts on the next sync, a hook or workflow needs changing, the project can't meet a baseline yet, a new stack (Swift package, backend, web app) is added to the repo, or a project needs onboarding.

patrickserrano Bundle

Audit Xcode project configuration, build settings, scheme behavior, and script phases to find build-time improvements with explicit approval gates. Use when a developer wants project-level build analysis, slow incremental builds, guidance on target dependencies, build settings review, run script phase analysis, parallelization improvements, or module-map and DEFINES_MODULE configuration.

patrickserrano Skill

Use when validating a user-provided or externally-sourced URL before it reaches `AVPlayer`, `URLSession`, or a `WKWebView` — building a positive- allowlist URL validator, or reviewing existing networking/media code for missing URL validation.

patrickserrano Bundle

Orchestrate Xcode build optimization by benchmarking first, running the specialist analysis skills, prioritizing findings, requesting explicit approval, delegating approved fixes to xcode-build-fixer, and re-benchmarking after changes. Use when a developer wants an end-to-end build optimization workflow, asks to speed up Xcode builds, wants a full build audit, or needs a recommend-first optimization pass covering compilation, project settings, and packages.

patrickserrano Skill

Audit and improve SwiftUI runtime performance. Use for requests to diagnose slow rendering, janky scrolling, high CPU/memory usage, excessive view updates, or layout thrash in SwiftUI apps.

aivos-xie Skill

开源情报收集 — 社工、人肉搜索、域名/IP/邮箱情报、社交媒体

aivos-xie Skill

Bug bounty hunting methodology — reconnaissance, exploitation, and report writing for HackerOne, Bugcrowd, and private programs

aivos-xie Skill

Web安全测试工具链 — sqlmap, Nmap, Nikto, XSStrike, ffuf, nuclei, Metasploit

aivos-xie Skill

Mobile application security testing — Android/iOS static and dynamic analysis, instrumentation, and exploitation