Security

ozrwayne Bundle

逐条核验论文、报告或研究笔记中的事实性主张是否被指定来源原文支持，保存主张位置、来源指针、原文定位、判断和阻断状态。Use when the user asks for“检查引用是否支持这句话”“做 claim-to-source audit”“核验数字、趋势或因果说法”“投稿前查主张”,or requests the rw-claim-audit workflow.

ozrwayne Bundle

核对文内引用、参考文献、作者身份、年份消歧、DOI 和指定格式规则，不判断来源是否支持主张。 Use when the user asks for “检查引用格式”、“核对文内引用和参考文献”、“检查同姓作者”、“做 citation audit”, or requests the rw-citation-audit workflow. Runs without a private local workspace or preset research-lab; use user-provided material and bundled public-source methods.

ozrwayne Bundle

审查研究中的分析单位、重复层级、统计方法和结果报告是否对得上，不把报告审查当成重新分析。 Use when the user asks for “检查统计报告”、“核对 n 和重复实验”、“审查统计方法和结果”, or requests the rw-statistics-audit workflow. Runs without a private local workspace or preset research-lab; use user-provided material and bundled public-source methods.

pipecat-ai Skill

Toggle the server-side login killswitch on a Supabase environment. Usage `/maintenance <env> <on|off>` (e.g. `/maintenance prod on`). Sets or unsets the `MAINTENANCE_MODE` secret on the login edge function, which short-circuits new logins with HTTP 503 when enabled. Existing sessions keep working.

qiao-925 Skill

对指定 SKILL.md 进行静态审查。在修改任何 SKILL.md 后自动触发，或手动调用审计某个 skill。检查 frontmatter 规范、description 质量、正文结构与类型一致性、冗余内容。关键词：skill审查、skill-audit、审计、静态检查、frontmatter、description、类型一致性。

rhyssullivan Skill

Run Warden security scans in this repo using Sentry's warden-skills. Use when asked to audit security, scan with Warden, investigate authz/data-exfil/code-execution/GitHub Actions risks, or triage Warden findings.

rlajous Bundle

Perform a comprehensive code review on a GitHub pull request. Use when the user asks to review a PR, review code changes, check a pull request for quality, security, bugs, or best practices, or provides a PR number or GitHub PR URL to review.

rubicon Bundle

Use the codebase knowledge graph for structural code queries. Triggers on: explore the codebase, understand the architecture, what functions exist, show me the structure, who calls this function, what does X call, trace the call chain, find callers of, show dependencies, impact analysis, dead code, unused functions, high fan-out, refactor candidates, code quality audit, graph query syntax, Cypher query examples, edge types, how to use search_graph.

rubicon Bundle

Generate Secret Santa assignment lists from participant names and optional exclusion pairs. Use when the user asks to organize a Secret Santa, assign recipients, resolve duplicate names, or validate exclusion constraints.

securityskills Skill

Prepare an organization for a SOC 2 Type I or II audit — trust services criteria mapping, evidence collection, control implementation, and remediation planning. Use when starting a SOC 2 journey or preparing for an audit window.

securityskills Skill

Audit JSON Web Token implementations for algorithm confusion, weak secrets, missing validation, and token lifecycle flaws. Use when a codebase or API uses JWTs for auth.

securityskills Skill

Perform a security-focused code review — map trust boundaries, audit input paths and auth flows, and use vulnerability-class-driven checklists instead of line-by-line skimming. Use on any PR or codebase with security implications.

securityskills Skill

Systematically review a web application against the OWASP Top 10 vulnerability classes with concrete test cases per category. Use for web app assessments and security gate reviews.

securityskills Skill

Turn changes authored by AI coding agents into evidence an auditor accepts — provenance, authorization, and mapping to change-management controls. Use when agents contribute to code that falls under SOC 2, ISO 27001, PCI DSS or similar.

securityskills Skill

Execute an authorized penetration test end-to-end, from scoping and rules of engagement through reconnaissance, exploitation, post-exploitation, and reporting. Use when planning or running an offensive security engagement.

securityskills Skill

Enumerate and exploit common Active Directory misconfigurations such as Kerberoasting, AS-REP roasting, delegation abuse, and ACL attacks. Use during authorized internal network assessments.

wilbeibi Bundle

Review a diff, package, or API through one of five lenses (necessity and layering, honest invariants and costs, product-versus-library fit, a complexity gate before a design change, or newcomer clarity). Use when asked to review, audit, or polish code, vet a dependency, judge whether a change is too complex, or find what a new hire would not understand.

wilbeibi Bundle

Audit a skill library for duplicated guidance, contradictions, bloat, dead references, and defects. Use when cleaning, consolidating, or de-duplicating a skills tree.

winhok Bundle

只读审计 TestSpec TestLib 的结构健康、重复用例、模块错放、provenance 缺失和未验证历史导入。用户说「审计 TestLib」「检查知识库质量」「清理重复用例前先盘点」「TestLib 被污染了」「历史用例是否可信」「找出该废弃或合并的用例」或执行 testspec-audit 时使用。只输出证据和 lifecycle proposal，不修改 TestLib。

yaojingang Bundle

Diagnose a website page or small page set for GEO readiness with authoritative public evidence, systematic page analysis, code/content/schema fixes, and four-format Chinese report delivery.

yaojingang Bundle

当用户需要基于品牌官网抓取、公开事实交叉验证、内容资产诊断、站内站外 GEO 机会地图、项目启动诊断、季度复盘或投放前评估时使用；不用于问答平台采样监测、单页诊断、文章写作、标题生成、后端归因或执行路线图拆解。

brianv1981 Bundle

Evolving product-truth audit: one living artifacts/AUDIT_<SLUG>.md, update in place (aim-handoff rules), never dated _REAUDIT/_AUDIT3 novels. Modes baseline|delta|closeout|event. Use for audit, re-audit, /aim-audit, or when the Operator asks how a target is doing vs its README.

isnoobgrammer Bundle

Creates new skills, improves/refactors/audits existing ones, and ensures SIP compliance across the ecosystem. Use whenever the user wants to create a skill from scratch, turn a workflow into a skill, edit or audit a skill, add SIP composability, or discuss skill architecture — including when they describe a repeatable workflow and say 'I wish this was automatic'. Triggers on: '/create-skill', 'make a skill', 'turn this into a skill', 'new skill', 'improve this skill', 'audit this skill'.

antgroup Bundle

Systematic code review patterns covering security, performance, maintainability, correctness, and testing — with severity levels, structured feedback guidance, review process, and anti-patterns to avoid. Use when reviewing PRs, establishing review standards, or improving review quality.

antgroup Bundle

Automated GitHub PR code review with diff analysis, lint integration, and structured reports. Use when reviewing pull requests, checking for security issues, error handling gaps, test coverage, or code style problems. Supports Go, Python, and JavaScript/TypeScript. Requires `gh` CLI authenticated with repo access.

eugenezhangco-spec Skill

Memory Audit — Self-Cleaning Memory Lint

eugenezhangco-spec Skill

Runs a structured weekly review session where the assistant asks the user about their week, updates all context files, audits backlogs, and sets priorities for next week. Use this skill whenever the user says 'let's do the weekly review', 'weekly review', 'weekly check-in', 'let's review the week', 'end of week review', or 'how did this week go'. Also activates when the user wants to audit and clean up context files, update stale metrics, or align on priorities. Do NOT use for daily planning (use day-planner). This is the assistant and user sitting down once a week to get everything current.

enuno Skill

Run security scans and vulnerability checks

acquia Skill

Use when managing MEO CDN domains, security rulesets, IP rules, custom security rules, rate limiting rules, failover groups, or purging CDN cache for a subscription or environment.

acquia Skill

Use when user asks about fixing security vulnerabilities, composer audit failures, vulnerable Drupal packages, or CVE advisories in a Drupal codebase.

arogyareddy Skill

Audit all skills in the current project for frontmatter completeness, effort level appropriateness, allowed-tools scoping, and content quality. Produces a scored report with effort-level recommendations for each skill. Use when onboarding to a new project, reviewing skill quality before shipping, or adding effort fields to an existing skill library.

arogyareddy Bundle

Audit Claude Code configuration to measure fixed-context token overhead and produce a prioritized action plan

elastic Skill

Use when obs-migrate created Kibana alerting rules and the user asks whether they can enable them, verify them, review connectors/actions, audit migrated rules, or safely roll alert rules into production.

s-hiraoku Skill

This skill provides expert-level guidance for VS Code extension development. Use when implementing new extension features, debugging extension code, designing WebView UIs, implementing Language Server Protocol features, or optimizing extension performance. Covers activation events, contribution points, VS Code API patterns, security best practices, testing strategies, and publishing workflows.

aws-samples Skill

Generate all security control artifacts and compliant IaC templates from mapping-results.json and validated.json. Split into 3 focused sub-skills for better accuracy; this skill orchestrates them.

aws-samples Skill

Generate detective and responsive security control artifacts — Config rules with Lambda handlers, EventBridge rules, CloudWatch alarms, SSM runbooks, Step Functions workflows, CloudTrail configuration. Reads from mapping-results.json and validated.json.