Security

aivos-xie Skill

内网渗透 — 横向移动、代理隧道、权限维持、域渗透

aivos-xie Skill

Active Directory攻击 — BloodHound、Certipy、bloodyAD、DonPAPI、域渗透

aivos-xie Skill

恶意软件分析 — 沙箱、动态分析、脱壳、反混淆、YARA规则

aivos-xie Skill

安全测试总览 — 逆向工程、密码爆破、Web安全三大方向工具链

aivos-xie Skill

数字取证 — 磁盘/内存/网络取证、日志分析、时间线重建

aivos-xie Skill

密码爆破工具链 — hashcat, John, Hydra, Medusa, CeWL, crunch

aivos-xie Skill

无线安全 — WiFi破解、蓝牙攻击、RFID克隆、SDR

aivos-xie Skill

免杀对抗 — AV绕过、C2框架、权限维持、横向移动、隐蔽通信

aivos-xie Skill

逆向工程工具链 — Ghidra, radare2, Frida, apktool, jadx, angr, pwntools

aivos-xie Skill

密码学攻击 — 加密算法分析、侧信道、RSA攻击、哈希碰撞

aivos-xie Bundle

Build custom web-based file managers with Flask — upload, download, rename, move, delete, mkdir. Supports Chinese filenames, secret-key auth, drag-and-drop upload. Use when the user wants a self-hosted file server, web disk, or lightweight AList/Nextcloud replacement.

br3eze-code Skill

Review and remediate Dependabot and dependency vulnerabilities in AgentOS repositories. Use for critical or high-severity alert triage, dependency-path analysis, specialist assignment, secure upgrades, regression testing, rollback planning, release gates, and audit evidence.

gsmlg-dev Skill

Read `phoenix-duskmoon-design` skill first to understand all design rules, then audit this project for compliance. Report every violation with file path, line number, the offending code, and the correct fix.

wanghaisheng Skill

Map how all game systems affect each other. Identify feedback loops, emergent behaviors, and potential degenerate strategies before they ship. Use this skill when: (1) designing a game with multiple interacting systems, (2) diagnosing unexpected emergent behavior or exploit paths, (3) evaluating whether adding a new system creates healthy or degenerate interactions, (4) identifying which systems are too tightly or loosely coupled, (5) mapping feedback loops (reinforcing, balancing, broken), (6) predicting where player-discovered strategies will emerge, (7) understanding why a balance change in one system cascades unexpectedly. Medium-agnostic — works for digital, tabletop, and hybrid games.

aemerson-commits Bundle

Weekly knowledge review — runs skill-audit, then analyzes instincts vs CLAUDE.md vs skills. Proposes new skills, skill enhancements, CLAUDE.md cleanup, and marks covered instincts. Triggered from /start-day on Fridays.

aemerson-commits Skill

Audit environment variables across all projects — detect missing secrets, compare code references against deployed config, and identify which env vars each context requires.

aemerson-commits Skill

Comprehensive pre-merge review — security pentesting, performance, scalability, UX consistency, and code hardening — then works the findings through to landed fixes on a branch. Run before merging dev to main to catch issues before production. The deliverable is a merge-ready branch, not a findings list: after synthesis the skill verifies each finding, triages apply/flag/outward-facing, fixes on a branch cut from the reviewed SHA with a regression test that fails on the unfixed code, and re-runs the full pre-flight. Triggers: 'pre-merge review', 'review before merge', 'full code review for merge', 'fix the review findings'. Soft-default: when planning a commit or merge that touches 3+ top-level projects, suggest running this skill before pushing — the cross-project blast radius warrants a review even if no individual change looks risky.

codeatcode Skill

Comprehensive Django guide - security, ORM, PostgreSQL, GeoDjango, Django 6.0 features, admin extensions, middleware, authentication, sessions, and ecosystem tools

davisbuilds Bundle

Static analysis security scanning and architectural trifecta detection using semgrep. Use when reviewing code for security vulnerabilities, running SAST scans, checking for the lethal trifecta (private data + untrusted input + external comms co-occurrence), or when the user says 'scan', 'security scan', 'trifecta check', 'check for vulnerabilities', 'SAST', or 'secure this code'. On-demand via /scan and /trifecta-check commands.

davisbuilds Bundle

Perform local code reviews on workspace changes without posting to GitHub. Use for requests like /review, review this diff, audit staged changes, or check branch changes. Produces findings-first reports with severity, file line references, risks, and test gaps.

davisbuilds Bundle

Audit and harden a software repo against supply-chain and workflow risks. Use when a user asks to audit a repo, harden CI, pin GitHub Actions, freeze installs, reduce bot workflow risk, review lockfile/package-manager discipline, or create repo-local security investigation artifacts. Supports Node, Python, GitHub Actions, GitLab CI, and mixed-stack repos. On-demand via /repo-audit and /repo-harden.

davisbuilds Bundle

Review changed code for silent failures and inadequate error handling — empty or over-broad catch blocks, errors logged-and-swallowed, unjustified fallbacks, null/optional-chaining that hides failures, and retries that exhaust silently. Use when the user asks to review error handling, check catch/try-except blocks, audit fallback behavior, or hunt for swallowed errors. Not general diff review (local-review) or security scanning (secure-code).

roxabi Bundle

Audit README, CONTRIBUTING, and plugin READMEs against the developer-tool pattern.

roxabi Bundle

Bootstrap OSS community health files (CONTRIBUTING, LICENSE, SECURITY, templates).

roxabi Bundle

Audit and clean CLAUDE.md, memory, skills, and rules — resolve every finding (fix/promote/relocate/delete), track recurrences, target bloat=0. Triggers: "cleanup context" | "context audit" | "clean memory" | "drain memory" | "prune memory" | "audit memory" | "consolidate rules" | "spa day" | "memory audit".

mostafa-drz Skill

Audit Skills

mostafa-drz Skill

Plays the role of a real user in an interview-style usability test. Takes context about the product (URL, description, focus areas), auto-suggests a persona (overridable), then drives real Chrome via the claude-in-chrome extension to explore the product think-aloud style — narrating live reactions while flagging confusion, friction, and delight, and capturing GIFs/screenshots of the friction moments. Produces a structured UX report with severity-ranked pain points, what worked, and prioritized recommendations. Learns over time which findings the user considers signal vs noise. Use when you want a real-user-perspective audit of a web product to catch UX/UI/product issues that automated tests can't catch.

mostafa-drz Skill

Audits codebases against compliance frameworks (SOC2, HIPAA, PCI-DSS, GDPR, ISO27001, etc.) using parallel agents per subdirectory/sub-repo. Produces a detailed markdown report with line-level code references. Use when you need to check a directory or monorepo for compliance violations before an audit or review.

singleton-sd Skill

Review code for quality, correctness, security, and adherence to best practices

singleton-sd Bundle

Converts PDFs to AI-ready Markdown using OpenDataLoader PDF (@opendataloader/pdf) with audit-ready naming, metadata, and logs. Use when the user provides a PDF path, asks to parse/extract/convert a PDF to markdown, or mentions opendataloader-pdf for document ingestion.

singleton-sd Skill

Turn a refined product or engineering idea into decision-complete behavioral, business, data, security, integration, and non-functional requirements before design and delivery planning.

telagod Bundle

Scans code for security vulnerabilities, detects dangerous patterns, and ensures security decisions are documented. Use when running security scans, auditing code, or checking for OWASP issues, injection risks, or sensitive data leaks. Automatically triggered on new modules, security-related changes, or post-refactor.

telagod Bundle

安全架构与治理：威胁建模 (STRIDE/PASTA/LINDDUN)、零信任身份架构、IAM/SSO/MFA/PAM、合规框架 (SOC2/PCI/HIPAA/GDPR)、DLP、隐私工程、安全控制设计。Use when designing security architecture, threat modeling new systems, implementing zero-trust identity, designing IAM/SSO/PAM, building compliance evidence chains, or planning privacy-by-design.

telagod Bundle

蓝队与紫队工程：检测规则编写、SIEM/EDR 调优、事件响应、数字取证、威胁狩猎、ATT&CK 映射、紫队演练闭环。Use when writing Sigma/YARA detection rules, tuning SIEM noise, responding to security incidents, conducting forensic analysis, hunting threats, or running purple team exercises.

maudeunfledged834 Skill

When the user needs to design, improve, or audit a post-signup activation flow to get new users to their first value moment. Activate when activation is lagging, time-to-value feels excessive, or first sessions lack impact.

advaitpaliwal Skill

Compare a paper's claims against its public codebase. Use when the user asks to audit a paper, check code-claim consistency, verify reproducibility of a specific paper, or find mismatches between a paper and its implementation.