Security

fastrevmd-lab Bundle

Parse Cisco ASA and FTD LINA running configurations into the shared firewall schema. Use when input contains show running-config, access-list, access-group, object network, object-group, nameif, security-level, NAT, interfaces, or failover, including audit, conversion, diff, summary, and explanation tasks. For FMC- or FDM-managed Firepower policy exported as JSON, use parsing-firepower-configs instead.

fastrevmd-lab Bundle

Design, configure, audit, and troubleshoot Juniper SRX AutoVPN full-tunnel hub backhaul. Use when handling group-ike-id gateways, traffic selectors, ARI, shared st0, anti-recursion routes, source NAT, VPN hairpinning, NAT-T, or Junos 24.4R1+ PSK and 0.0.0.0/0 commit errors. Use ADVPN for direct spoke shortcuts.

fastrevmd-lab Bundle

Parse FortiGate and FortiOS full-configuration or backup exports into the shared firewall schema. Use when input contains config/edit/set/next/end blocks, VDOM, firewall policy or address, srcintf, dstintf, UTM profiles, or VIPs, including audit, conversion, diff, summary, and explanation tasks.

fastrevmd-lab Bundle

Parse Cisco Secure Firewall (Firepower) FMC and FDM management exports into the shared firewall schema. Use when input is JSON from the FMC or FDM REST API or an FDM configexport bundle and contains accessPolicy, accessrules, securityZones, prefilterpolicies, intrusionPolicy, filePolicy, variableSet, ftdnatpolicies, applicationFilters, or urlCategories, including audit, conversion, diff, summary, and explanation tasks. For ASA-style LINA running-config text such as access-list, nameif, or object network, use parsing-cisco-configs instead.

fastrevmd-lab Bundle

Map firewall controls, evidence, and gaps to CIS Controls v8/v8.1 safeguards. Use when assessing IG1/IG2/IG3, inventory, secure configuration, access, logging, threat prevention, or safeguard IDs such as 4.2 and 13.3. Excludes product-specific CIS Benchmarks.

fastrevmd-lab Bundle

Audit normalized Cisco, Fortinet, Palo Alto, and Juniper firewall rulebases for security hygiene. Use when finding any-any, shadowed, redundant, or orphaned rules, missing deny or logging, exposed management, weak VPN crypto, hardening gaps, or unused objects. Parse raw configs first.

fastrevmd-lab Bundle

Audit and maintain Juniper SRX AppID and IDP/IPS licensing and offline signature content. Use when reporting entitlement or expiry, installing a license from a supplied file, updating IDP or AppID signatures offline, checking chassis-cluster license or content parity, or verifying signature versions after a change. Not for Junos software upgrades or IDP policy design.

stefanoskarakasis Bundle

Audits any SKILL.md in this repo against SKILL-SPEC.md, the skill authoring standard — checks frontmatter, the seven required sections, tier-appropriate sections, and quality-gate structure, then returns a scored checklist with prioritized fixes. Trigger on: "review this skill", "audit this SKILL.md", "does this skill meet spec", "is this skill done", "quality check this skill", or any request to validate a skill file against the repo's authoring standard.

stefanoskarakasis Bundle

Draft a jurisdiction-aware privacy policy for any digital product — use this skill whenever a PMM or Product Manager needs to create, update, audit, or review data protection documentation, asks about GDPR, CCPA, or UK GDPR obligations, mentions "privacy policy", "cookie policy", "data retention", "right to be forgotten", "data processing agreement", or asks what their product needs to comply with applicable privacy law.

techwolf-ai Bundle

Personal diagnosis of where your Claude Code + Cowork spend goes. Reads local transcripts, prints your conversation length distribution, marathon share, cache rebuild costs, and per-project diagnosis (good projects and problem projects) right in the terminal. Then offers a deeper dive that fans out parallel Haiku subagents over your most expensive (and most efficient) sessions and writes a tight Markdown report. Use when the user asks "why is my Claude spend so high", "where am I burning tokens", "diagnose my Claude habits", "audit my Claude usage", or asks for a personal token-cost diagnosis.

xiaolai Skill

Audit the book-level motif registry that tracks recurring objects, phrases, and images across chapters. For each motif, verifies declared appearances exist, no motif appears in its `forbidden_in:` chapters, frequency floor is met, and declared evolution actually progresses (no flat repetition). Reads `book/registries/motif-registry.yml`. Distinct from metaphor-audit and device-audit.

xiaolai Skill

Audit the book-level callback graph that tracks setup → payoff edges across chapters. Verifies every planted anchor has its declared downstream payoff and every payoff still has its upstream plant. Catches orphaned plants and orphaned payoffs. Reads `book/registries/callback-graph.yml`; runs book-wide when any graph chapter is rewritten. Cousin of fair-clue-audit (which covers chapter-internal recognition).

xiaolai Skill

Audit a chapter against its declared per-chapter contract (Hoare triple of reader-state pre/postconditions) and verify the chapter delivers the declared `knows`, `can_discriminate`, `feels`, and `primed_for` slots. The `feels:` slot resolves through rule 12 reader-experience values; passing requires both structural delivery AND core-value preservation.

fabioc-aloha Skill

Reviews a design or change for proportionate security controls, privacy boundaries, and safe Markdown-rendering practices without claiming external scans.

fabioc-aloha Skill

Reviews a knowledge, instruction, or skill library for purpose, coherence, duplication, gaps, maintainability, and evidence-based improvement proposals.

fabioc-aloha Skill

Assesses whether documentation or library content remains current and produces evidence-bounded, proposal-first update recommendations.

asymmetric-al Skill

OWASP security patterns, secrets management, security testing

asymmetric-al Skill

Security-first bash scripting patterns for 2025 (mandatory validation, zero-trust)

agent-engineer-master Bundle

Activate when implementing or modifying API endpoints, authentication or authorization logic, database queries or ORM calls, user input handling, session/token management, file uploads, webhooks, or any feature that stores or transmits user data — gates implementation with threat surface analysis, secure defaults verification, attacker's eye pass, and structural control check before any code ships; do NOT activate for read-only documentation, configuration review, or infrastructure changes unrelated to user data flow

connorgriffin Bundle

Write a pull-request body and score it before the PR is opened, or audit an existing PR's body against the same rubric. Use when about to run gh pr create, when a PR body needs writing or rewriting, or when asked whether a PR description is any good. Invoked as /pr-body write <body-file> or /pr-body audit <pr>.

connorgriffin Bundle

Vocabulary and principles for well-designed CI. Use when the user wants to design, review, or audit CI, says CI is noisy, slow, or expensive, or is designing a workflow yml.

connorgriffin Bundle

Lifecycle for user-facing surfaces — revise a shipped surface in the running app, lock a greenfield visual spec, build to a lock, critique/audit/polish a UI, or re-settle a locked term. Use for any request to design, review, or verify rendered UI (screens, dashboards, flows, components). Not for backend-only work or module/API design ("interface" in the code sense — use codebase-design for that).

connorgriffin Bundle

Front door for review of any kind — code, a plan, a document that needs named reviewer perspectives, or pending changes with a security question. Classifies the subject in front of it and routes to exactly one review skill; does no reviewing itself. Use for 'review this', '/review', or any request to review a PR, diff, plan, spec, brief, document, or security-sensitive change.

ilamanov Bundle

Map a codebase into a structured vocabulary — surfaces, features, entities, flows, compartments, invariants, tech stack — plus code-health metrics. Produces a JSON map and an interactive local UI. Use whenever the user wants to understand or audit a codebase.

rome-os Bundle

Senior engineer code review workflow — whole-picture understanding, mandatory beyond-the-diff verification, architecture-level review (SSOT, Occam's razor), SOLID, security, performance, and code quality, with P0-P3 severity classification.

driangle Skill

Audit documentation coverage across CLI commands, web features, and configuration. Builds the CLI, discovers all commands/flags, checks web pages, and cross-references against docs/ and apps/docs/.

xiaolai Skill

Hunting skill for xss vulnerabilities. Built from 174 public bug bounty reports. Use when hunting xss on any target.

ominou5 Skill

Comprehensive funnel audit framework. Systematically reviews every page for conversion killers, missed opportunities, and quick wins. Produces a scored report with prioritized recommendations.

samzong Skill

Pre-push bot-adversarial self-review gate. Simulates 7 AI reviewer lenses (coderabbit / copilot / codex / strict-maintainer / gemini / claude-code / greptileai) on staged or just-committed diff, auto-fixes MUST-FIX findings atomically, loops to convergence (hard cap 2 rounds), writes audit trail to commit body and a sentinel file for the Claude Code hook. Self-contained — does NOT call `pr-eval` (which is post-push only). Invoked by `ship` Step 3.5, by `commit` before commit, or manually before any push. Use when: "pre-ship", "pre-push scan", "bot exhaust", "ship-ready check", "push 之前扫一遍", "本地审", or invoked from `ship`.

samzong Bundle

Review a GitHub Pull Request as a responsible project owner using the `gh` CLI. Use when the user provides a PR URL (e.g. https://github.com/ORG/REPO/pull/N) or a PR number for the current git repo (prefer upstream, else origin) and wants an owner-grade review document `review-N.md` written in Chinese with copy-pastable GitHub comments in English. Scope the review to lines changed by the PR (do not nitpick unrelated pre-existing code), but apply best practices and flag any clear bugs, security issues, or CI failures caused by the change.

samzong Bundle

Find critical implementation bugs that can crash production, corrupt data, bypass security, deadlock, race, or break core logic. Use for explicit fatal bug hunts such as "find critical bugs", "audit for fatal bugs", "security vulnerability audit", "race condition audit", "find crash or data loss bugs", or reliability incident reviews. Do not use for general code review, refactoring, style feedback, or routine performance analysis.

xingfanxia Skill

Review source files changed during a phase for bugs, security issues, and code quality problems

xingfanxia Bundle

Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive security checklist and patterns.

andvl1 Skill

Publish E2E/QA test reports (markdown + screenshots) as secret GitHub Gists. Uses two-gist pattern to work around GitHub rendering limits. Trigger when: report needs to be shared via gist, E2E test run completed and report must be published, user asks to "upload report", "publish to gist", "share test results", or after manual-qa produces a report with screenshots.

bex-co Bundle

Autonomously release a bex component (today cli) — sync shipped main, choose the version, publish the tag, recover routine failures, and verify every distribution channel. Use when the user asks to release, publish, or bump the CLI. /ship lands code; /release mints versions.

bex-co Bundle

Security audit of a codebase — web apps, APIs, services, CLI tools, libraries, daemons, and more. Use when asked to find security bugs, do a security review, audit for vulnerabilities, or pen-test the code. Focuses on exploitable issues with real impact, not theoretical concerns or industry-standard behavior.