Security

tomevault-io Bundle

Decide whether a finding's suggested fix is a breaking change for top dependents. Reads the unified-diff fix on the finding, identifies the public API surface that changes (signatures, exports, removed fields, renamed types), and lists which top dependents are most likely to break. Static analysis on the diff and the dependent metadata from the scrutineer API; never executes dependent code. Use when this capability is needed.

tomevault-io Bundle

Audit code for "vibe coding sins" — patterns that indicate AI-generated code was accepted without proper review. Produces a scored report card with fix suggestions. Use when this capability is needed.

tomevault-io Bundle

Security vulnerability detection patterns including OWASP Top 10, language-specific vulnerabilities, and remediation guidance. Load when reviewing code for security issues, conducting audits, or implementing authentication/authorization. Use when this capability is needed.

tomevault-io Bundle

Comprehensive verification for Rust projects. Runs cargo check, clippy, fmt, tests, coverage, and security audit in sequence. Use when this capability is needed.

tomevault-io Bundle

Emergency fix workflow that bypasses normal sprint processes with a full audit trail. Creates hotfix branch, tracks approvals, and ensures the fix is backported correctly. Use when this capability is needed.

tomevault-io Bundle

Structured visual design critique with specific actionable feedback Use when this capability is needed.

tomevault-io Bundle

Reviews code changes for quality, conventions compliance, performance, and security. Applies when the user asks to review code, check implementation quality, or validate changes against project standards. Read-only — never modifies source code. Use when this capability is needed.

tomevault-io Bundle

Activates when reviewing code to identify quality issues, security vulnerabilities, and suggest improvements Use when this capability is needed.

tomevault-io Bundle

Expert in application security, OWASP Top 10, security best practices, penetration testing, and secure coding. Use for security audits and hardening. Use when this capability is needed.

tomevault-io Bundle

Reviews code for quality, security, and maintainability. Use after implementing features, completing significant work, or when user asks for code review. Use when this capability is needed.

tomevault-io Bundle

Master smart contract security best practices to prevent common vulnerabilities and implement secure Solidity patterns. Use when writing smart contracts, auditing existing contracts, or implementing security measures for blockchain applications. Use when this capability is needed.

tomevault-io Bundle

Set up a brand-new greenfield Rust crate or workspace after base-repo-setup, using modern Cargo layout, Edition 2024 when supported, explicit MSRV, rustfmt, Clippy, tests/docs, cargo-nextest when approved, cargo-deny/audit gates, and local just check validation. Use only for new Rust scaffolding, not migrations. Use when this capability is needed.

tomevault-io Bundle

Validate Claude Code skills against Anthropic guidelines. Use when user says "check skill", "skillcheck", "validate SKILL.md", or asks to find issues in skill definitions. Covers structural and semantic validation. Do NOT use for anti-slop detection, security scanning, token analysis, enterprise checks, or Eval Kit generation; use skill-check-pro for those. Do NOT use for LinkedIn skill engagement; use skillcheck-engage for that. Use when this capability is needed.

tomevault-io Bundle

Expert-level code review focusing on quality, security, performance, and maintainability. Use this skill for conducting thorough code reviews, identifying issues, and providing constructive feedback. Use when this capability is needed.

tomevault-io Bundle

Idiomatic Go best practices for writing clean, performant, and maintainable Go code. Apply when writing, reviewing, or refactoring any Go code — including modules, packages, error handling, concurrency, CLI tools, file I/O, security, and tooling. Use when this capability is needed.

tomevault-io Bundle

Upgrade dependencies safely using pnpm catalog, checking for breaking changes, and testing upgrades. Use when updating packages, applying security patches, upgrading major versions, resolving dependency conflicts, or modernizing tech stack. Use when this capability is needed.

tomevault-io Bundle

Find bugs, security vulnerabilities, and code quality issues in local branch changes. Use when asked to review changes, find bugs, security review, or audit code on the current branch. Use when this capability is needed.

tomevault-io Bundle

Perform enterprise security review of the codebase Use when this capability is needed.

tomevault-io Bundle

Keep documentation in sync with code changes. Use when implementing features, modifying APIs, changing architecture, adding configuration, updating security, or making any changes that affect user-facing or developer-facing documentation. Use when this capability is needed.

tomevault-io Bundle

Keep documentation in sync with code changes. Use when implementing features, modifying APIs, changing architecture, adding configuration, updating security, or making any changes that affect user-facing or developer-facing documentation. Use when this capability is needed.

tomevault-io Bundle

Use this skill when the user needs to choose a database, design a schema, set up Supabase or another database, write queries, handle migrations, or fix data-related issues. Covers database selection, schema design, Row Level Security, migrations, and common patterns for SaaS apps built by non-technical founders.

tomevault-io Bundle

Master authentication and authorization patterns including JWT, OAuth2, session management, and RBAC to build secure, scalable access control systems. Use when implementing auth systems, securing APIs, or debugging security issues. Use when this capability is needed.

tomevault-io Bundle

Web application testing principles. E2E, Playwright, deep audit strategies. Use when this capability is needed.

tomevault-io Bundle

Use when performing security audits, reviewing code for vulnerabilities, checking auth flows, or validating OWASP compliance — before any approval or merge

tomevault-io Bundle

综合代码审查 skill，覆盖安全、性能、代码质量和可维护性。Use when users ask to review code, analyze code quality, evaluate pull requests, or mention code review, security analysis, or performance optimization. Use when this capability is needed.

tomevault-io Bundle

Secure dependency upgrades with supply chain protection, cooldowns, and staged rollout. Use when upgrading deps, configuring security policies, or preventing supply chain attacks. Use when this capability is needed.

tomevault-io Bundle

Elite Tier Backend standards, including Vertical Slice Architecture, Zero Trust Security, and High-Performance API protocols. Use when this capability is needed.

tomevault-io Bundle

Run code review against design documents, checking acceptance criteria, security, performance, and test coverage. Use when reviewing implementation quality or running /review. Use when this capability is needed.

tomevault-io Bundle

Apply modern web development best practices for security, compatibility, and code quality. Use when asked to "apply best practices", "security audit", "modernize code", "code quality review", or "check for vulnerabilities". Use when this capability is needed.

tomevault-io Bundle

Comprehensive backend development skill for building scalable backend systems using NodeJS, Express, Go, Python, Postgres, GraphQL, REST APIs. Includes API scaffolding, database optimization, security implementation, and performance tuning. Use when designing APIs, optimizing database queries, implementing business logic, handling authentication/authorization, or reviewing backend code. Use when this capability is needed.

tomevault-io Bundle

Application security best practices and patterns Use when this capability is needed.

tomevault-io Bundle

This skill should be used when the user asks to "verify code", "run verification", "check quality", "validate changes", or before creating a PR. Provides comprehensive verification including build, type check, lint, tests, security scan, and diff review. Use when this capability is needed.

tomevault-io Bundle

Use when working with an advanced security auditing skill focusing on project-specific vulnerabilities, dependency risks, and CSP misconfigurations.

tomevault-io Bundle

Audit and improve SwiftUI runtime performance from code review and architecture. Use for requests to diagnose slow rendering, janky scrolling, high CPU/memory usage, excessive view updates, or layout thrash in SwiftUI apps, and to provide guidance for user-run Instruments profiling when code review alone is insufficient. Use when this capability is needed.

tomevault-io Bundle

Comprehensive security audit for authentication, input validation, secrets, and API security. Use for pre-deployment audits or targeted security analysis. Use when this capability is needed.

tomevault-io Bundle

Audit and refactor an entity's UI for table column density, icon overuse, form dropdown opportunities, validation patterns, status color consistency, loading/empty states, and shared config reusability. Use when this capability is needed.