Security

aiperceivable Bundle

Deep cross-repo consistency audit for the apcore ecosystem. Checks API surface alignment, naming conventions, version synchronization, documentation quality, test coverage, dependency alignment, and configuration consistency across all repos. Generates a detailed report with severity-classified findings.

aircfo Skill

Reconcile Stripe revenue against QuickBooks recognized revenue and explain the gap. Use when someone asks "do our Stripe and QuickBooks numbers match," "why is Stripe revenue different from our books," "reconcile revenue," "tie out Stripe to the GL," or is preparing for month-end close or an audit and needs payments-to-books agreement.

aliasunder Skill

Project-aware PR review grounded in AGENTS.md conventions and vault memory. Runs a multi-dimension review: correctness, convention compliance, test quality, security, performance, and conditional checks (TDQS scoring, feature surface docs). Use when asked to "review this PR", "review PR #X", "do a thorough review", "review against AGENTS.md", or "review with my preferences in mind". Complements the built-in /code-review (which is generic) by loading project-specific conventions and personal preferences. NOT for: quick CI failure diagnosis (use pr-monitor), post-merge testing (use verify), or code simplification without a PR context (use code-quality).

aliasunder Skill

Read code as someone who has never seen the codebase — no conventions, no history, no attachment — and report every place a newcomer pauses: a name that had to be traced, a loop or branch with no stated reason, a term never introduced, a comparison that had to be reasoned about, a comment that promised something the code did not do. Report only; never edits. Use when asked to "read this as a stranger", "fresh eyes on this", "would a newcomer understand this", or to compare two candidate versions of a function on readability. NOT for: convention compliance (use code-quality), correctness or bug hunting (use pr-review / bug-check), or test review (use test-audit).

aliasunder Skill

Audit test files against the project's AGENTS.md test conventions, ensuring tests meet the bar for high-quality behavioral specs. Also checks whether production code changes have adequate test coverage (coverage gap analysis). Use when asked to "audit tests", "check test quality", "review tests against AGENTS.md", "do a test pass", "check test conventions", "ensure tests are high quality", or "are there missing tests". Focuses on test design, assertion quality, and coverage gaps — not code coverage metrics. NOT for: production code quality (use code-quality) or full PR review (use pr-review).

aliasunder Skill

Readability and convention compliance pass on production code, grounded in the project's AGENTS.md and the user's vault memory preferences. Use when asked to "do a readability pass", "code quality pass", "make more readable", "review code quality", "clean up against conventions", "simplify with my preferences", or "review against AGENTS.md". Different from the built-in /simplify (which is generic) — this loads project-specific conventions and personal preferences. NOT for: test file audits (use test-audit), full PR review (use pr-review), or generic simplification without convention grounding (use /simplify).

andresanemic Bundle

Use when building a BOT — one place to open a session and work across several Areas or projects at once, with their criteria reachable and routed, then loaded on demand, instead of answering questions about them — including federating existing Areas under one bot, or auditing a bot that already exists (its scope, README or sources). Trigger on "create a bot for X", "a bot that works on several projects", "federate these areas", "audit my bot", or "fix my bot's scope".

antonbabenko Skill

Find bugs, security holes, and maintainability issues in a diff or file.

konten-studio Bundle

Use when a draft, article, script, or post needs a structured, scored audit — hook, structure, voice fit, AI-slop density, factual risk, and CTA clarity — without rewriting anything.

konten-studio Bundle

Use when Indonesian, English, or code-mixed notes, experiences, scripts, or drafts need coordinated story structure, hook improvement, headline options, anti-AI-slop editing, Jabodetabek register adaptation, platform formatting, a scored content audit, multi-variant comparison, or an end-to-end content review without factual drift.

kyh Skill

Audit and fix convention drift across all projects defined in ~/.zshrc pupa(). Checks tooling choice (oxlint/oxfmt vs eslint/prettier), oxlint type-safety rules, script consistency, tsconfig, stale config references, database tooling (drizzle push scripts + .env.production.local convention, no stale migration dirs), secret hygiene (no tracked .env), and shared-UI/config drift (ui source glob, typed next.config). Package versions are out of scope — use update-all for those. Use when you want to ensure all projects follow the same patterns.

l-mb Bundle

Orchestrate comprehensive Python refactoring - coordinates security, complexity, testing, code health, and modernization skills to systematically improve code quality.

emillindfors Skill

Modern Rust tooling ecosystem guide for 2025 - development workflow, testing, security, and profiling tools

lhfer Bundle

综合代码审查 skill，覆盖安全、性能、代码质量和可维护性。Use when users ask to review code, analyze code quality, evaluate pull requests, or mention code review, security analysis, or performance optimization.

mariadb Skill

Best practices for MariaDB system-versioned (temporal) tables — automatic row history built into the database. Use when tracking data changes over time, implementing audit trails, meeting GDPR or compliance requirements, doing point-in-time queries, or when the user asks about row history, data versioning, temporal tables, or querying past data states in MariaDB. This feature is unique to MariaDB among MySQL-compatible databases.

martinacostadev Skill

Review code changes for quality, security, and best practices

martinffx Bundle

FastAPI APIs with Pydantic, OpenAPI, dependencies, security, middleware, lifespan, and response models. Use for routes, validation, authentication or authorization, database-session dependencies, CORS, sync versus async handlers, pagination, errors, or startup and shutdown resources. For ORM mechanics, use python-sqlalchemy.

melodic-software Bundle

Revise pasted writing or text-bearing files for natural, specific, context-aware prose while preserving meaning, evidence, citations, formatting, and the writer's legitimate voice. Use when a user asks to humanize, naturalize, de-AI, polish, rewrite, or audit formulaic writing in documents, Markdown, emails, articles, reports, comments, docstrings, or other prose-bearing artifacts. Do not use for a pure authorship-classification request with no editing goal.

mercedesperezcapilla-gif Skill

Validates that a software change has met all required SDLC gates before or after release in a regulated financial services environment. Checks 14 gates — change record, design agreement, code review, developer testing, independent testing, environment consistency, UAT sign-off, bug management, go/no-go, post-release validation, exceptions and manual interventions, rollback plan, impact communication, and security review. Returns a gate-by-gate status report and a structured sign-off block ready for audit. Use before a release to check readiness, after to confirm completeness, or during a review to evidence what was done.

rysweet Bundle

Microsoft Security Copilot Knowledge Pack — Claude Code Skill

rysweet Skill

Run a comprehensive vulnerability scan on the current investigation. Use when the user wants to find security vulnerabilities in ingested code or binaries. Combines pattern detection, data flow analysis, and AI reasoning.

rysweet Skill

Comprehensive binary security assessment including hardening, attack surface, and vulnerability analysis. Use when analyzing an ELF or PE binary.

rysweet Skill

Multi-language source code security audit. Use when analyzing source code for vulnerabilities. Supports Python, JavaScript, Go, Rust, Java, C/C++.

rysweet Skill

Compare two binaries for security differences. Use for patch analysis or regression testing.

selftune-dev Skill

Reviews code for quality, security issues, and best practices. Provides structured feedback.

sethdford Skill

Run a thorough drift audit to detect standards divergence

sharma23yash-oss Skill

Acts as a Senior Institutional Risk Officer and Head of Long-Term Equities at a premier Indian wealth management firm. ALWAYS activate this skill when the user uploads screenshots, screener exports, financial tables, valuation band charts, CWIP/capex schedules, shareholding patterns, debt maturity profiles, or any balance sheet / P&L data for Indian NSE/BSE-listed companies. Also triggers for phrases like: 'moat analysis', 'governance audit', 'valuation trap', 'margin of safety', 'CWIP to Gross Block', 'capital allocation', 'contingent liabilities', 'dividend sustainability', 'promoter pledging', 'institutional risk', 'solvency check', 'long-term survivability', 'governance rating', or 'buy/hold/avoid' on an Indian stock. Activate even when the user simply pastes a financial table without an explicit question — run the full Three-Pillar Institutional Audit automatically. Do not wait for permission.

sivaprasadreddy Skill

SDD step 5. Reviews the implemented feature code against language and framework best practices, checks for code duplication, security vulnerabilities, performance issues, test coverage, and alignment with feature.md acceptance criteria. Use after /sdd-implement or on any existing feature implementation.

beepboop2025 Skill

Answer "can I trust Seiche" with the honest scoreboard. Use when asked about track record, accuracy, reliability, backtest, whether the signal is real, or before anyone acts on a reading. Also the template for periodic credibility reports.

ben2pc Skill

Review code for bugs, security issues, and performance

berch-t Skill

Use when someone asks for an AIOS audit, asks to score their setup against the 4C AIOS Architecture (Context · Connections · Capabilities · Cadence), or says "is my AIOS working" / "audit my setup" / "find gaps in my AIOS". Produces a 4C scoreboard with top-3 fixes ranked by leverage.

bitwarden Bundle

This skill should be used when implementing Android code in Bitwarden. Covers critical patterns, gotchas, and anti-patterns unique to this codebase. Triggered by "How do I implement a ViewModel?", "Create a new screen", "Add navigation", "Write a repository", "BaseViewModel pattern", "State-Action-Event", "type-safe navigation", "@Serializable route", "SavedStateHandle persistence", "process death recovery", "handleAction", "sendAction", "Hilt module", "Repository pattern", "implementing a screen", "adding a data source", "handling navigation", "encrypted storage", "security patterns", "Clock injection", "DataState", or any questions about implementing features, screens, ViewModels, data sources, or navigation in the Bitwarden Android app.

bytelandtechnology Bundle

Umbrella guide for the standalone Ghidra headless skill family: route to the right phase skill, preserve headless-only constraints, and audit speckit planning without downstream hooks.

bytelandtechnology Bundle

Phase skill for target intake and project initialization before speckit planning or audit.

bytelandtechnology Bundle

Phase skill for evidence extraction, replay expectations, and audit of generated planning artifacts.

bytelandtechnology Bundle

Phase skill for reusable headless Ghidra script authoring, review, registration, and contract-based audit.