Security

tomevault-io Bundle

Launch an efficiency audit on modified Python files using Aider + Gemini 2.0 Flash. Analyzes bugs, efficiency, readability, and security. Saves report to database/audit_reports/. Use when this capability is needed.

tomevault-io Bundle

End-to-end Stellar development playbook. Covers Soroban smart contracts (Rust SDK), Stellar CLI, JavaScript/Python/Go SDKs for client apps, Stellar RPC (preferred) and Horizon API (legacy), Stellar Assets vs Soroban tokens (SAC bridge), wallet integration (Freighter, Stellar Wallets Kit), smart accounts with passkeys, status-sensitive zero-knowledge proof patterns, testing strategies, security patterns, and common pitfalls. Optimized for payments, asset tokenization, DeFi, privacy-aware applications, and financial applications. Use when building on Stellar, Soroban, or working with XLM, Stellar Assets, trustlines, anchors, SEPs, ZK proofs, or the Stellar RPC/Horizon APIs. Use when this capability is needed.

tomevault-io Bundle

Reviews code for bugs, security vulnerabilities, and style issues. Use when the user asks for a code review, wants feedback on a snippet, or mentions reviewing code quality. Use when this capability is needed.

tomevault-io Bundle

Perform comprehensive code review for quality, security, and maintainability. Use when reviewing code changes, PRs, or when asked to check code quality. Use when this capability is needed.

tomevault-io Bundle

Reviews code changes for quality, security, and best practices. Use when this capability is needed.

tomevault-io Bundle

Reviews changed code for bugs, regressions, risky assumptions, missing tests, compatibility breaks, and missing documentation. Use when the user asks for a general code review, diff review, PR check, or pre-merge issue pass; delegate explicit security scope to security-audit. Use when this capability is needed.

tomevault-io Bundle

When coding is done and changes need review → multi-dimensional code review (SOLID, security, quality, edge cases), outputs structured report. Use when this capability is needed.

tomevault-io Bundle

Automated code review with focus on security, performance, and maintainability. Use when reviewing code changes, PRs, or performing scheduled audits. Use when this capability is needed.

tomevault-io Bundle

Code quality, commit standards, quality gates, PR standards, documentation, performance, security, and output character hygiene (gremlin characters). Use when writing code, committing, creating PRs, generating any text, or when the user runs /gremlin-clean. Use when this capability is needed.

tomevault-io Bundle

Review a PR diff for code-level defects — security, correctness, performance, and maintainability — and post a severity-tagged review comment. Runs at the PR stage AFTER implementation, complementing verify-pr (which checks contract/AC conformance). Invoked by /code-review or the pr-verify.yml workflow. Stack-agnostic. Use when this capability is needed.

tomevault-io Bundle

Runs production readiness validation checks. Includes type checking, linting, tests, coverage, security, and dead code detection. Stack-agnostic.

tomevault-io Bundle

Security checklist for code changes Use when this capability is needed.

tomevault-io Bundle

Reviews code for best practices, security issues, and performance. Use when user asks to review, analyze, or audit code. Use when this capability is needed.

tomevault-io Bundle

Security best practices, OWASP Top 10, input validation, and secure coding patterns. Use when implementing authentication, authorization, input validation, or when addressing security vulnerabilities in any language. Use when this capability is needed.

tomevault-io Bundle

This skill should be used when the user asks about "security", "vulnerability scanning", "dependency audit", "supply chain security", "license compliance", "security audit", "CVE", "OWASP", "secrets scanning", "cargo-deny", "npm audit", or needs guidance on security requirements and vulnerability management. Use when this capability is needed.

tomevault-io Bundle

review code quality, architecture, design patterns, security, algorithmic flow and maintainability Use when this capability is needed.

tomevault-io Bundle

Security assessment workflow. Use when reviewing code for vulnerabilities, performing OWASP checks, auditing authentication/authorization logic, or validating security controls before deployment. Use when this capability is needed.

tomevault-io Bundle

Go development patterns, idioms, and conventions. Use when writing Go code, structuring Go modules, implementing error handling, writing tests, or building network and security tools in Go. Use when this capability is needed.

tomevault-io Bundle

Add entries to the hyAway changelog at docs/changelog.md. Use when documenting new features, changes, bug fixes, deprecations, or security updates. Triggers when user mentions "changelog", "document changes", "release notes", or asks to record what changed. Use when this capability is needed.

tomevault-io Bundle

Reviews code for quality, best practices, and potential issues. Use when asked to review, audit, or check code for problems. Use when this capability is needed.

tomevault-io Bundle

Avalia a documentação (README, CONTRIBUTING, etc.) para encontrar lacunas de clareza e onboarding. Use when this capability is needed.

tomevault-io Bundle

Security audit of current changes for iOS/Swift vulnerabilities and best practices Use when this capability is needed.

tomevault-io Bundle

Conduct a comprehensive code review and security audit. Use when this capability is needed.

tomevault-io Bundle

Use this skill to perform in-depth code reviews focusing on security, performance, and best practices.

tomevault-io Bundle

Comma-separated list of audit types (e.g., 'dead-code,pii,soc2') or 'all'. If omitted, you will be asked. Use when this capability is needed.

tomevault-io Bundle

Proactive security scanning. Triggers when modifying auth, API endpoints, user data, or sensitive operations. Use when this capability is needed.

tomevault-io Bundle

This skill should be used when the user asks to "review code", "review PR", "code review", "audit code", "check for bugs", "security review", "review my changes", "find issues in this code", "review the diff", or asks for pull request review or code audit. Use when this capability is needed.

tomevault-io Bundle

Comprehensive code review with security, performance, and maintainability focus. Produces structured review with APPROVE, NEEDS WORK, or BLOCK verdict. Use when this capability is needed.

tomevault-io Bundle

Optimize web performance for faster loading and better user experience. Use when asked to "speed up my site", "optimize performance", "reduce load time", "fix slow loading", "improve page speed", or "performance audit". Use when this capability is needed.

tomevault-io Bundle

General guidelines for Commits, formatting, CI, dependencies, security Use when this capability is needed.

tomevault-io Bundle

Perform thorough pull request reviews covering correctness, security, performance, observability, backward compatibility, data migrations, and developer ergonomics. Use when the user asks to review a PR, examine a pull request, or requests a code review of a branch or GitHub PR link. Use when this capability is needed.

tomevault-io Bundle

Ship current branch — CI, SonarCloud, code review, security review, fix all issues, merge. Assumes code is already committed and pushed. Use when this capability is needed.

tomevault-io Bundle

Conduct a full review of a pending GitHub PR by reading all PR comments, inline review threads, and attached/subordinate PRs; validate expected behavior from code and PR text; and post severity-tagged security/functionality/code-smell issues as comments on the PR. Use when this capability is needed.

tomevault-io Bundle

Setup, audit, and modernize Go projects with 2025 best practices. Startup-friendly with two tiers - quick start (5 minutes, minimal friction) or full setup (production-ready). Use when creating new Go projects or improving existing ones. Use when this capability is needed.

tomevault-io Bundle

Setup, configure, audit, and modernize Vitest testing in projects. Use when creating new test configs, auditing existing Vitest implementations for v4.0+ best practices, fixing deprecated patterns, migrating from Jest, or configuring test environments (Node.js, browser, monorepo). Checks for breaking changes, outdated configs, missing coverage settings, and performance issues. Covers browser mode, visual regression testing, and CI integration. Use when this capability is needed.

tomevault-io Bundle

Host security hardening and risk-tolerance configuration for MagmaBot deployments. Use when a user asks for security audits, firewall/SSH/update hardening, risk posture, exposure review, MagmaBot cron scheduling for periodic checks, or version status checks on a machine running MagmaBot (laptop, workstation, Pi, VPS). Use when this capability is needed.