Security

hainrixz Skill

Opt-in fixer (the /claude-seo-ai:fix command). Applies the safe, deterministic SEO/AI-search fixes from a persisted audit to the user's site — meta viewport/charset/lang, JSON-LD, robots.txt AI directives, hreflang, sitemaps, OG/Twitter cards, image dimensions, canonical, AI discovery files — through the adapter that matches the platform (local files, Shopify theme/Admin, WordPress REST/WP-CLI, page APIs, or step-by-step instructions). Dry-run preview by default; writes only after explicit per-change confirmation. Runs only when the user invokes it — never auto-triggered.

hainrixz Skill

Recompute and display the two scores (Search SEO + AI Visibility) from a persisted audit run, without re-crawling. Use to re-show or refresh the scores after an audit, to score a specific run directory or host, or to score a saved findings JSON file.

realdougeubanks Bundle

Structured engineering code review covering readability, complexity, test gaps, SOLID principles, and API consistency. Complements full-security-review with general code quality.

realdougeubanks Bundle

Complete documentation refresh — audits for stale docs, creates missing docs, and rewrites everything for a 2am on-call engineer with zero assumed context. Security items are prominently callout-boxed.

realdougeubanks Bundle

Installs mandatory security, coding, naming, design, testing, error handling, API contract, and performance standards into CLAUDE.md as always-on context for every Claude Code session.

realdougeubanks Bundle

Runs a structured MVP quality-gate audit covering stability, security, logging, docs, and implementation integrity. Reports pass/fail with evidence.

realdougeubanks Bundle

Designs database schemas from domain requirements (ERD, indexes, migrations, security) or reviews existing schemas for normalization issues, missing indexes, unsafe migrations, and scalability risks.

realdougeubanks Bundle

Generates professional incident reports using customizable templates. Supports outage, security, performance, and data-loss incident types. Extensible via templates/ and rules/.

realdougeubanks Bundle

Audits project dependencies across package.json, requirements.txt, go.mod, Cargo.toml, Gemfile, composer.json, and .NET projects for unpinned versions, deprecated packages, missing lockfiles, and known CVEs.

rolemodel Bundle

Perform comprehensive code audits of Ruby on Rails applications based on thoughtbot best practices. Use this skill when the user requests a code audit, code review, quality assessment, or analysis of a Rails application. The skill analyzes the entire codebase focusing on testing practices (RSpec), security vulnerabilities, code design (skinny controllers, domain models, PORO with ActiveModel), Rails conventions, database optimization, and Ruby best practices. Outputs a detailed markdown audit report grouped by category (Testing, Security, Models, Controllers, Code Design, Views) with severity levels (Critical, High, Medium, Low) within each category.

rolemodel Skill

Audit UI implementations against Nielsen's 10 Usability Heuristics for User Interface Design. Produces a structured issue log with severity ratings, heuristic mappings, and remediation guidance. Use when conducting heuristic evaluations, reviewing UI code for usability compliance, or auditing existing interfaces.

tanq16 Skill

The entry point for any coding work in a project that has these skills installed - implementing a feature, changing or refactoring code, fixing a bug, scaffolding something new, or touching build and CI. Selects and loads the skills that govern the task before any code is written, holds the work to them while coding, and ends with a self-review of the diff against them. Use this first whenever you are about to develop anything. Not for a pure question with no code change, not for writing unit tests, and not for a full audit of an existing codebase.

tanq16 Skill

Config layering and durable state for a Node Web Only server - defaults deep-merged with config.json, the ephemeral session secret, and atomic state.json writes. Use when loading config, adding a config key, deciding what may be persisted, or writing a state file. Triggers on config.json, config.example.json, deepMerge, loadConfig, state.json, randomBytes session secrets, mode 0600, and write-then-rename.

neumie Bundle

Use when prose sounds AI-generated or robotic and needs an audit, minimal cleanup, fact-preserving rewrite, or reconstruction in a taught human voice.

neumie Bundle

Use when reviewing changes since a fixed point (branch, commit, tag, or PR base). Runs independent behavior, architecture, security, and verification/operations reviews.

neumie Skill

Use when mapping where CLAUDE.md or AGENTS.md files should exist. Scans for non-obvious complexity, evaluates existing files, identifies gaps. Run before agents-md-audit on each flagged file.

neumie Bundle

Use when auditing a CLAUDE.md or AGENTS.md file. Scores six metrics (0-100), cites issues, suggests fixes. Codebase scan first, falls back to file-only when no codebase available.

mokhtarabadi Skill

Enforces decentralized task management, UI/UX design strictness, and global state constraints within AGENTS.md.

yuriyarhat-cyber Bundle

Review and harden application security across code, auth, data flow, dependencies, secrets, infrastructure, and deployment configuration. Use when Codex needs secure code review, threat modeling, abuse-case analysis, vulnerability triage, remediation planning, or security-focused implementation guidance.

yuriyarhat-cyber Bundle

Audit pages and funnels for conversion problems. Use when Codex needs to find what is hurting leads, signups, bookings, or sales across landing pages, forms, bot flows, service pages, or simple funnels.

stark-ai-de Bundle

Audit repository documentation, README, examples, installation steps, onboarding flow, API docs, and contribution docs. Use when the user asks whether docs are clear, complete, current, or ready for a public repo.

stark-ai-de Bundle

Audit, review, clean up, and prune Codex memories. Use when the user asks about ~/.codex/memories, stale or noisy memories, memory pollution, cross-repo rule leakage, sensitive memory contents, memory config tuning, cleanup plans, or whether entries belong in memory, AGENTS.md, repo docs, skills, config, or deletion. Do not use for ordinary repo docs cleanup.

stark-ai-de Bundle

Audit, review, clean up, and prune Claude Code durable context. Use when the user asks about CLAUDE.md, CLAUDE.local.md, .claude/rules, user Claude rules, Claude Code auto memory, /memory, stale instructions, memory pollution, sensitive context, settings such as autoMemoryEnabled or claudeMdExcludes, or where a Claude instruction should live. Do not use for Codex memory, Cursor rules, Claude app memory, Anthropic API Memory Stores, or generic docs cleanup.

stark-ai-de Bundle

Audit repository health and maintenance readiness. Use when the user asks for a repo review, maintainer audit, cleanup plan, onboarding audit, technical debt scan, CI/docs/release hygiene review, or public repo readiness check.

stark-ai-de Bundle

Review public repository security hygiene at a baseline maintainer level. Use when the user asks for secret-leak checks, SECURITY.md review, dependency hygiene, GitHub settings checklist, CI safety, or public release security readiness.

texarkanine Skill

Perform operations with security checks

wso2 Skill

Reuse catalog roles when a design has sign-in, permissions, or test users — write specs/design/security.json.

carlos-algms Skill

Simplify and reduce code while preserving behavior. Use when the user asks to simplify, clean up, refactor, audit, report on, or reduce recently changed code. Supports apply mode for edits and report mode for findings only.

domengabrovsek Skill

Creates or refreshes technical engineering docs in the current repo's /docs/ tree: Diataxis layout, mermaid diagrams, ADR support, drift audit. Use when the user says 'write docs', 'document this', 'audit the docs', or '/document'.

domengabrovsek Skill

Audits and optionally prunes git worktrees: current repo by default, cross-repo scan under ~/dev/ with --all. Use when the user says '/worktrees', 'audit worktrees', or 'prune worktrees'.

hjewkes Bundle

Audit context window composition and identify optimization targets. Use when performance feels sluggish, context warnings appear, after installing new skills, or for periodic context health checks.

mimukit Skill

Survey an existing codebase for the structural change worth making, then rank the candidates, crown one, and write it up as a reviewable proposal. Use when the user says "where should I refactor", "this code is hard to change", or "audit the module boundaries". It proposes and never edits code.

akachandan1 Skill

Content performance intelligence and feedback loop specialist. Use when user wants to analyze content performance, audit posts, find what's working, review engagement data, or mentions "content audit", "performance analysis", "what's working", "engagement report", "content report", "hook analysis", or "content feedback".

1yihui Skill

Host security hardening and risk-tolerance configuration for OpenClaw deployments. Use when a user asks for security audits, firewall/SSH/update hardening, risk posture, exposure review, OpenClaw cron scheduling for periodic checks, or version status checks on a machine running OpenClaw.

1yihui Bundle

Security-first skill vetting for AI agents. Use before installing any skill from ClawHub, GitHub, or other sources. Checks for red flags, permission scope, and suspicious patterns.

1yihui Bundle

Monitor one or more GitHub repositories and send low-noise alerts with configurable policy modes (major_only, balanced, verbose). Use when setting up recurring repo watch, release/security monitoring, PR merge tracking, and daily digest workflows via OpenClaw cron.