Plugins

12 plugins

Privacy Data Protection Skills

Privacy Data Protection Skills from mukul975/Privacy-Data-Protection-Skills.

100 skills · plugin

@snoodleboot-io

Prompticorn from snoodleboot-io/prompticorn.

2 skills · plugin

Produkthaftung und Produktrecht: Produktsicherheit, GPSR, ProdHaftG, deliktische Produzentenhaftung, Right to Repair, Software-/OTA-Updates, digitale Produktlebenszyklen, Rückruf, Marktüberwachung und Launch-Review.

3 skills · plugin

Planning & Product

PRDs, roadmaps, OKRs, discovery and product strategy.

23 skills · plugin

Product Idea to PRD

For product managers to structure and validate a new product concept.

11 skills · plugin

Product Manager Skills

Product Manager Skills from deanpeters/Product-Manager-Skills.

56 skills · plugin

Praxis from ConcertoNotes/codex-plugins.

7 skills · plugin

@alirezarezvani

13 product skills with 17 Python tools: product manager toolkit (RICE, PRDs), agile product owner, product strategist, UX researcher, UI design system, competitive teardown, landing page generator, SaaS scaffolder, product analytics, experiment designer, product discovery, roadmap communicator, code-to-prd, research summarizer, apple-hig-expert.

10 skills · plugin

Launch on Product Hunt

Launch a product on Product Hunt by researching, preparing assets, and executing the launch playbook.

3 skills · plugin

Presets from amplifthq/oh-my-dsh.

4 skills · plugin

Execution and product management skills: PRDs, OKRs, roadmaps, sprints, pre-mortems, stakeholder maps, user stories, prioritization frameworks, and more.

16 skills · plugin

Prediction Market Arbitrage

Compare Polymarket probabilities with options-implied probabilities to find arbitrage opportunities.

4 skills · plugin

Results for “pr”

168 skills

Vikingo Szabvany

Enforces the Vikingo Studio standard for WordPress plugins and repos: naming taxonomy, plugin headers, folder structure, versioning, release flow, private update channel, admin UI rules, security baseline, and pre-release checklist.

Implementing End To End Encryption For Messaging

Implements a simplified version of the Signal Protocol's Double Ratchet algorithm using X25519, HKDF, and AES-256-GCM for end-to-end encrypted messaging.

24.6k · bundle

Securing Github Actions Workflows

Hardens GitHub Actions workflows against supply chain attacks, credential theft, and privilege escalation by pinning actions to SHA digests, minimizing GITHUB_TOKEN permissions, preventing script injection, and implementing workflow change controls.

24.6k · bundle

Implementing Browser Isolation For Zero Trust

Deploys remote browser isolation (RBI) as a core component of a Zero Trust architecture, implementing isolation policies with URL categorization, risk-based routing, content disarming and reconstruction (CDR), and data loss prevention controls.

24.6k · bundle

Performs a static-analysis penetration test to find exploitable vulnerabilities, providing proof-of-concept payloads and fixes. Covers injection, XSS, authentication bypass, authorization flaws, path traversal, command injection, CSRF, SSRF, hardcoded secrets, and insecure deserialization, with a full attack surface.

Review pull requests following Sentry engineering practices, covering security, performance, testing, and design.

Fuzz Rust projects with libFuzzer using cargo-fuzz, including harness writing, sanitizer integration, and coverage analysis.

Android Intent Security

Audit Android component configurations and Intent handling to prevent Intent Redirection and unauthorized access.

Verifies that fix commits properly address security audit findings without introducing new bugs or vulnerabilities.

Applies the DevSecOps framework to structure analysis, guide decision-making, and produce actionable recommendations for engineering and operations contexts.

nimoqup046-collab

Guides Firebase development with best practices for security rules, data modeling, and avoiding common pitfalls.

Guides building secure admin panels with RBAC, audit logging, and step-up controls for privileged actions.

lucaspmarie-a11y

Guides Firebase development with best practices for security rules, data modeling, and avoiding common pitfalls.

Fuzz C/C++ projects with multi-core support using AFL++, a fork of AFL with better performance and advanced features.

sakamoto-family-smile

Quarkus Security

Secure Quarkus applications with authentication, authorization, input validation, and secrets management best practices.

Senior Fullstack

Scaffolds fullstack projects (Next.js, FastAPI, MERN, Django) and analyzes code quality with security and complexity scoring.

20.4k · bundle

Audit Claude Code configuration files for security vulnerabilities, misconfigurations, and injection risks using AgentShield.

Review local branch changes for bugs, security vulnerabilities, and code quality issues using a structured checklist-driven process.

Provides expert patterns for implementing Clerk authentication in Next.js, including middleware, server components, client hooks, organizations, and webhooks.

Coverage-guided fuzzer built into LLVM for C/C++ projects. Use for fuzzing C/C++ code that can be compiled with Clang.

Implements secure API design patterns including authentication, authorization, input validation, rate limiting, and protection against common vulnerabilities.

Backend Mindset

Guides backend development across API design, authentication, security, performance, architecture, and testing, with decision guides and defaults for production-ready systems.

Solana Vulnerability Scanner

Scans Solana programs for 6 critical vulnerabilities including arbitrary CPI, improper PDA validation, missing signer/ownership checks, and sysvar spoofing.

Secure Code Guardian

Guides implementing authentication, authorization, input validation, and OWASP Top 10 prevention with secure code patterns and validation checkpoints.

10.4k · bundle

Systematically audits a web application against the OWASP 2021 Top 10, producing severity-rated, file-level findings with fixes for each category.

Reviews pull request diffs for correctness, security, maintainability, and test coverage, providing severity-ranked findings and a close-out recommendation.

Create and manage Hookify rules that define patterns to watch for and messages to display when those patterns match.

Set up Cloudflare Turnstile end-to-end: create a widget, deploy a managed siteverify Worker, insert frontend snippets, and validate the integration.

Semgrep Rule Creator

Creates custom Semgrep rules for detecting security vulnerabilities, bug patterns, and code patterns with proper testing and validation.

Guides secure design and review of Lightning Web Components, covering DOM safety, Apex data exposure, and Lightning Web Security.

Manage AWS API Gateway for creating, publishing, and securing REST, HTTP, and WebSocket APIs using CLI commands, SAM templates, and best practices.

Fuzzing Obstacles

Patch code to bypass checksums, global state, and validation checks that block fuzzer progress, using conditional compilation for C/C++ and Rust.

Token Integration Analyzer

Analyzes token implementations and integrations for ERC20/ERC721 conformity, weird token patterns, contract composition, owner privileges, and on-chain scarcity.

Security Reviewer

Identifies security vulnerabilities, generates structured audit reports with severity ratings, and provides actionable remediation guidance for code, infrastructure, and cloud environments.

10.4k · bundle

Backend Mindset

Guides backend development across API design, authentication, databases, performance, security, scalability, and testing, with quick decision guides and defaults for production-ready systems.

Container Security

Implements container security with image scanning, runtime protection, image signing, and security policies using tools like Falco, Trivy, and Notary.