Security

voidmatcha Bundle

Use when reviewing Playwright or Cypress E2E specs, Page Objects (POM), PRs, pull requests, patches, diffs, or changed test files — asked to review tests, audit test quality, or find weak, flaky, or silently-passing tests; when tests pass CI but prove nothing or miss bugs; when auditing missing awaits, vacuous or always-passing assertions, anti-patterns, or coverage gaps. Not for debugging a test that is currently failing at runtime (use playwright-debugger / cypress-debugger).

wawoodwa Bundle

Read-only integrity, wiring, and hygiene audit of a project context kit -- a CLAUDE.md entry point plus its docs/ tree (runbooks, changelog, history, status, sessions). Verifies the CLAUDE.md Version matches the changelog, changelog rows stay in reverse-chronological order, every runbook/doc is registered and exists, all relative Markdown links resolve, no orphaned docs, no committed secrets or leaked mount paths, dates are never in the future, session folders follow the dated notes.md convention, and status/history docs stay coherent; plus concurrency-safe rules for editing shared index files when multiple sessions or agents share a context. Use whenever the user wants to audit, validate, verify, lint, or health-check their CLAUDE.md or docs context kit -- before or after an end-of-session capture, a docs reorg, or adding a runbook, when inheriting a kit, or on asks like "are my docs consistent", "any broken links", or "did I commit a secret". Trigger even on terse asks like "check my CLAUDE.md".

wawoodwa Bundle

Design-before-run meta-skill that keeps the Context Kit skill family coherent and evolving. It owns the shared conventions charter (references/CONVENTIONS.md) that every kit skill must honor -- work-start dating, newest-first ordering, multi-session concurrency, entity vocabulary, reference-don't-embed, hygiene, and skill-authoring limits -- audits each kit skill for drift from the charter, and harvests recurring lessons from real operating context kits to propose updates. Always produces an approval-gated proposal first and emits drop-in skill edits; it never auto-edits skills. Use whenever the operator wants to align, sync, audit, or evolve the context-kit skills, reconcile conventions across them, propagate one lesson into the whole suite, or asks 'keep my kit skills consistent', 'update the charter', 'do my context skills still agree', or 'propagate this across the kit skills'. Run it after changing any one kit skill, or after operating several kits, to catch cross-skill drift before it spreads.

wazuh Skill

Resolve a dependency CVE in the Wazuh Dashboard alerting plugin — confirm the vulnerable package is actually present and reachable, apply the least-invasive remediation (direct bump, lockfile dedupe, or scoped resolution), verify build/tests/audit, and hand off a prepared PR. Use when the user asks to fix or resolve a CVE / dependency vulnerability, or provides a CVE id or CVE issue URL.

wenhaoone Skill

Audit value-engineering AI Skill claims against concrete evidence links, review status, and honest wording boundaries. Use when preparing resumes, portfolios, project reports, best-practice documents, release notes, or management summaries that must distinguish verified work, submitted PRs, pending reviews, assumptions, and claims that should not be made.

whackur Bundle

Smart contract code review, security best practices, and audit methodology for Solidity. Use when writing, implementing, reviewing, auditing, or assessing the security of Solidity code. Covers the security thinking framework (CEI, least privilege, defense in depth), structured review process, severity classification, key inspection areas, secure patterns (reentrancy prevention, access control, SafeERC20, upgrade safety), OWASP SCWE Top 10, code improvement proposals, and reporting. Triggers on tasks involving code review, security audit, vulnerability detection, vulnerability assessment, access control, CEI pattern, ReentrancyGuard, SafeERC20, best practices check, or smart contract review.

whackur Skill

Adversarial scenario analysis and threat modeling for Solidity smart contracts. Use when analyzing contracts from an attacker's perspective, identifying multi-step attack vectors, or performing threat modeling. Covers flash loan attacks, oracle manipulation, MEV/front-running, governance exploits, reentrancy scenarios, access control bypasses, economic logic exploits, and cross-contract composability risks. Triggers on tasks involving adversarial analysis, threat modeling, attack scenarios, attack vectors, exploit analysis, or red team review.

whit3rabbit Bundle

Write, edit, or audit prose in a specific person's saved voice, or strip machine-writing patterns when there is no voice to apply. Use whenever the user will send or publish text as themselves (emails, Slack and chat messages, reports, incident writeups, reviews, proposals, documentation, personal correspondence), and whenever the user asks to humanize text, remove AI-isms or AI slop, de-slop a draft, check whether writing sounds AI-generated, make a draft sound less like a chatbot, rewrite something in their voice, match their style, make it sound like them, swap or change the active voice, or draft new prose that will not read as machine output. Covers detect-only audits, in-place file edits, full voice conversions, and drafting from scratch.

whit3rabbit Bundle

Audit, tighten, and restructure CLAUDE.md and AGENTS.md memory files so the root file stays a short "where am I" plus rules instead of a changelog. Use when the user asks to audit, improve, clean up, shrink, or split a CLAUDE.md or AGENTS.md, says their memory file is too long, stale, or being ignored, wants gotchas moved to docs or per-module memory files, or mentions CLAUDE.md / AGENTS.md maintenance or project memory. Reports named failure modes with evidence and a per-item disposition plan before touching anything, and holds the prose to the active voice profile.

whit3rabbit Bundle

Draft a new README.md, or audit and improve an existing one, using patterns measured from 100 real, currently-trending GitHub repos rather than generic advice, and written in the user's own saved voice rather than a generated open-source register. Use when the user asks to write a README, create a project README, improve or clean up their README, review a README against best practices, add badges or a table of contents, restructure a README's sections, make a README look more professional, or make one sound like they wrote it. Covers new-project READMEs and edits to existing files.

ikhono-ai Bundle

You are a senior application security engineer. Review the given code for security vulnerabilities, focusing on the OWASP Top 10 and language-specific risks.

illegalstudio Skill

Audit and update the docs/ wiki to match the current codebase — checks all doc files against source code and fixes any mismatches.

illegalstudio Bundle

Regenerate and audit Elephc's generated builtin documentation from the shared builtin contract plus builtin! and eval_builtin! backend bindings. Use when a change touches crates/elephc-builtin-contract, src/builtins, crates/elephc-magician/src/interpreter/builtins, builtin signatures, builtin lowering hooks, docs/php/builtins, docs/internals/builtins, scripts/docs/builtin_registry.json, or before opening a PR that changes PHP builtins.

illegalstudio Bundle

Audit and prepare Elephc's numbered release changelog from the last published GitHub release through an exact candidate main SHA. Use only for explicit release preparation, version tags, release Pull Requests, or pre-release verification. Refresh live release/main state, reconcile every merged PR and direct first-parent commit, inspect actual shipped behavior, draft concise user-facing bullets with complete source traceability, and update the named release section only after user approval.

itwin Skill

Domain knowledge for remediating CVEs in the iTwin.js Rush monorepo — pnpm-config.json structure, fix strategies, validation, and audit workflows.

jfrog Skill

Identify Folio books with low on-hand stock so the operator can replenish before the title goes out of stock. Use whenever the user asks about books running low, low stock, restock list, what's almost gone, stock audit, or which titles need reordering.

gtn1024 Skill

Comprehensive guide to HTTP request handling and WebSocket connections in Hydro plugins. Covers route registration, handler lifecycle, parameter decorators, response building, operations, the @requireSudo security decorator, WebSocket handlers, and inheritance patterns.

guildshelf Bundle

Launch a Windows background process (.bat, node, python, .exe) with no visible console window — no black console flash on login or restart. Provides a generic VBS launch wrapper (window style 0) for the startup folder, the Start-Process -WindowStyle Hidden pattern for child processes inside a .bat, and the pythonw / CREATE_NO_WINDOW patterns for Python. Use when a script, bot, or dev server keeps popping a command window or flashing a console on startup/login and you want it fully silent. Windows only. NOT for macOS or Linux, NOT for hiding malware or evading security software, NOT a scheduler/cron manager, and this Lite edition does not include focus-steal governance, pop-up diagnostics, or batch-hiding of existing Task Scheduler jobs (the full Silent Runner covers those).

hectorai-live Skill

Use ONLY when the user explicitly asks to add negative search terms based on bleeding data — trigger phrases include "run search term negation for X", "negate bleeding search terms for X", "add negatives for bleeding in X", "execute bleeding negation on X", and close paraphrases where "negation" or "negative" + a named brand co-occur. Identifies bleeding search terms per the standard Hector bleeding rules (SP-only, ≥ floor(1/CR) clicks, 0 orders, exclude branded, exclude ASIN-pattern, ungrouped), then negates each identified SearchTerm as a NEGATIVE EXACT MATCH in the specific ad group where it is bleeding. Does NOT fire on conversational mentions of negation, on single-term negation requests, on audit requests, or on requests to edit this skill. ALWAYS presents a preview and requires explicit CONFIRM before any write. Runs independently of the audit skill — no prior audit required.

hermeticormus Skill

Security audit and hardening for Debian/Ubuntu Linux systems covering user access, SSH, firewall, ports, file permissions, updates, and backups. Explains each change's benefit and lock-out risk before applying. Use when auditing or hardening a server or workstation.

hiroppy Skill

Audit docs/ design documents, specs, and implementation plans against current source code for drift. Outputs a drift report and updates documents. Triggers on "check if docs are up to date", "diff docs vs code", "update design docs", "docs consistency check", "verify specs match source", "check plan completion status". Most effective after code or documentation changes.

hoangnb24 Bundle

Convert accepted repository rules into the smallest repository-native mechanical validation with positive and negative proof and precise enforcement-level reporting. Use for requests to enforce architecture, reliability, security, or quality boundaries; prevent a documented violation from recurring; add structural guards; or turn accepted rules into validation. Do not use to infer or invent policy from conventions, code patterns, tests, defaults, or undocumented preferences.

hoangnb24 Bundle

Independently audit a brownfield onboarding transcript, operational map, or exact proposed documentation patch before application. Use when a fresh reviewer must verify an $onboard-repository first pass, distinguish environment-caused Unknowns from reasoning defects, score its safety and evidence gates, or run a narrow patch-admissibility decision for specific capsule-backed hunks. This audit is read-only and must not edit files, install tools, start services, create state, or trust the producer's self-score.

kong Skill

Reviews AI Gateway documentation files for correctness during the v1 → v2 migration. Use this skill whenever you need to audit or fix AI Gateway docs for migration issues — whether reviewing specific files or all AI Gateway files across how-tos, landing pages, and reference pages. Triggers on requests like "review this ai-gateway file", "check my migration", "audit ai-gateway docs for v2", "find v1 references in ai-gateway pages", "update this file for AI Gateway v2", or any time someone is working on AI Gateway content under app/_how-tos/ai-gateway, app/_landing-pages/ai-gateway, or app/ai-gateway.

kucoin Bundle

KuCoin Earn products using the KuCoin API. Query Simple Earn and Structured Earn products. Authentication requires API Key, API Secret, and Passphrase.

kucoin Bundle

KuCoin Spot trading using the KuCoin API. Authentication requires API Key, API Secret, and Passphrase.

kucoin Bundle

KuCoin Assets management using the KuCoin API. Account information, balances, deposits, withdrawals, sub-accounts, and fee rates. Authentication requires API Key, API Secret, and Passphrase.

kucoin Bundle

KuCoin Broker and Affiliate using the KuCoin API. Affiliate invite management, commission queries, Broker Pro user management, and ND (Exchange) Broker queries. Authentication requires API Key, API Secret, and Passphrase.

kucoin Bundle

KuCoin Convert using the KuCoin API. Get conversion quotes, query convert order details and history. Authentication requires API Key, API Secret, and Passphrase.

kucoin Bundle

KuCoin Margin trading using the KuCoin API. Cross margin and isolated margin market data, order queries, borrowing/repaying queries, lending queries, and risk limits. Authentication requires API Key, API Secret, and Passphrase.

kucoin Bundle

KuCoin Futures trading using the KuCoin API. Futures market data, orders, positions, and funding fees. Authentication requires API Key, API Secret, and Passphrase.

kura-by2 Bundle

skill-audit

liberfi-io Skill

Research and analyze tokens on supported blockchains: search tokens by keyword, get token details (price, market cap, volume, supply), run security audits (honeypot, mint risk, proxy, tax), list DEX liquidity pools, view top holders, find smart money traders, and retrieve K-line candlestick chart data. Trigger words: token, coin, search token, find token, look up token, token info, token details, token data, token price, price of, how much is, what is the price, market cap, market capitalization, volume, trading volume, supply, total supply, circulating supply, FDV, fully diluted valuation, token security, security audit, is it safe, honeypot, rug pull, mint risk, proxy contract, buy tax, sell tax, token pools, liquidity pools, DEX pools, trading pools, LP, liquidity, token holders, top holders, who holds, whale holders, holder distribution, token traders, smart money, smart traders, KOL traders, top traders, candles, candlestick, K-line, kline, price chart, price history, OHLCV, token analysis, token researc

linuxfoundation Skill

How to judge the implementation of an lfx-v2-committee-service pull request: the general quality dimensions (correctness, error handling, tests, concurrency, readability, code truthfulness), how to hold the diff to the repo's documented standards for this Goa + NATS Go service, and the security anchors that make a diff security-relevant here. Use on every PR that changes code, however small; this is the reviewer's line-level lens.

linuxfoundation Skill

Pre-PR shape check for local lfx-v2-committee-service work. Audits branch name, JIRA reference, conventional commits, rebase status, DCO and GPG signing, total diff size, and repo-specific protected files against the target base branch. Does not audit Go code, generated output correctness, contracts, charts, or tests; run /committee-service-preflight after this shape check passes.

livlign Skill

Audit a GitHub repo's README against best-practice patterns and produce a prioritized punch list of fixes. Runs a structured review covering hero presence, install-to-first-success length, "what is this in one sentence" clarity, audience-jargon match, scannability, and drift signals (stale versions, dead links, badge sprawl). Read-only diagnostic; opens a PR only when the user explicitly asks.