Results for “audit”

Scan Model Context Protocol servers and tool metadata for poisoning, SSRF, and unauthenticated exposure.

Configure and manage Harbor container registry with security features including vulnerability scanning, image signing, RBAC, content trust, and audit logging.

Hardens Windows endpoints using CIS Benchmark recommendations to reduce attack surface, enforce security baselines, and meet compliance requirements.

Guides through implementing application whitelisting on Windows using AppLocker, from inventory and rule creation to audit-mode deployment and enforcement.

Provides expert guidance for using n8n-mcp MCP server tools to build, validate, and manage n8n workflows efficiently.

Maps a codebase into feature-grouped flowcharts, identifies duplicated concerns across features, and proposes a unified architecture with handoff prompts for refactoring.

Provides a CTO-level framework for architecting, auditing, and scaling AI-native systems, focusing on state management, observability, and blast radius analysis.

Audits and optimizes conversion points across the funnel, applying behavioral science to produce prioritized, testable hypotheses.

Design, implement, and audit inclusive digital products using WCAG 2.2 Level AA standards, generating semantic ARIA for web and accessibility traits for iOS and Android.

25 advanced engineering agent skills and plugins for Claude Code, Codex, Gemini CLI, Cursor, OpenClaw. Agent design, RAG, MCP servers, CI/CD, database design, observability, security auditing, release management, platform ops.

Code review skill — auto-scopes from git changes, reads DOJO.md for project conventions, and produces structured findings with priority levels. Supports quick single-pass review and deep 3-agent parallel audit.

Use this skill for removing accidental complexity, reducing duplication, clarifying boundaries, preserving behavior. Trigger when the task involves programming work related to Code Simplification, production implementation, audits, debugging, strategy, or validation.

Use this skill for dependency upgrades, SDK migrations, breaking changes, compatibility plans, rollback. Trigger when the task involves programming work related to Deprecation Migration, production implementation, audits, debugging, strategy, or validation.

Use this skill for performance, reliability, observability, SLO risk, production diagnostics. Trigger when the task involves agent profile work related to Performance SRE Agent, implementation, audits, debugging, strategy, or validation.

25 advanced engineering agent skills and plugins for Claude Code, Codex, Gemini CLI, Cursor, OpenClaw. Agent design, RAG, MCP servers, CI/CD, database design, observability, security auditing, release management, platform ops.

Content quality and E-E-A-T analysis with AI citation readiness assessment. Use when user says "content quality", "E-E-A-T", "content analysis", "readability check", "thin content", or "content audit".

Audit all git worktrees in the current project. Use when the user asks about worktree status, which branches are merged, which have uncommitted changes, or which worktrees can be safely cleaned up.

Survey a codebase's animation and motion code as a senior motion advisor, then produce a prioritized audit and self-contained implementation plans for other agents (or cheaper models) to execute. Read-only on source code — it plans improvements, it does not apply them. Use when the user asks to "improve the animations", "audit the motion", "make this app feel better", or wants a roadmap of animation fixes rather than a review of a single diff. Source: github.com/emilkowalski/skills.

Server-side tracking pipeline audit covering server-side Google Tag Manager (sGTM), Meta CAPI Gateway, Conversions API health, event deduplication via event_id, server-side hit ratio targets, pixel debugging, and PII hashing discipline. Use when user says server-side tracking, sGTM, server-side GTM, server-side tagging, CAPI, Conversions API, CAPI Gateway, Meta Conversions API, event deduplication, event_id, pixel debug, pixel health, Pixel/CAPI audit, first-party tracking, iOS 14.5 recovery, or server-side hit ratio.

Audit and fix visual hierarchy, spacing, color, and depth in web UIs. Use when the user mentions "my UI looks off", "fix the design", "Tailwind styling", "color palette", "visual hierarchy", "design system", "spacing scale", or "component styling". Also trigger when building consistent design tokens, creating dark mode themes, improving data visualization clarity, or polishing UI details before launch. Covers grayscale-first workflow, constrained design scales, shadows, and component styling. For typeface selection, see web-typography. For usability audits, see ux-heuristics.

Manage production secret infrastructure with HashiCorp Vault, cloud secret stores, automated rotation, and audit logging.

Perform language and framework-specific security best-practice reviews, write secure-by-default code, and generate prioritized vulnerability reports with suggested fixes.

Scan C# source files for hard-to-test static dependencies and produce a ranked report of static call sites by frequency.

Scans agent skills for security issues including prompt injection, malicious scripts, excessive permissions, secret exposure, and supply chain risks.

Find and own a defensible market position by testing positioning claims, running crawl-walk-run rollouts, and auditing competitor messaging.

Prüft Preisangaben nach PAngV 2022 auf Gesamtpreis, Grundpreis, Versandkosten und Streichpreis mit 30-Tage-Regel; liefert Checkliste, Prüfmemo und Musterauszeichnung.

Validates CircleCI configuration files and custom Orbs using the CircleCI CLI and Orb Development Kit, checking for deprecated images, inefficient caching, and security anti-patterns.

Audits and rewrites user-facing copy across web and mobile codebases, improving clarity, tone, and actionability of labels, errors, CTAs, and empty states.

Performs structured code reviews of git branches, tracking findings in a living document and optionally running deep architectural analysis with subagents.

Provides JPA/Hibernate patterns for Spring Boot data modeling, including entity design, relationships, query optimization, transactions, auditing, indexing, pagination, and connection pooling.

Improves search engine visibility through technical SEO, on-page optimization, and structured data, following Lighthouse audits and Google guidelines.

Manages Chef infrastructure by inspecting cookbooks, nodes, roles, environments, data bags, and compliance profiles, and provides guidance for debugging convergence failures and auditing compliance.

Scaffolds and reviews custom WordPress REST API endpoints, covering registration, authorization, input validation, response shaping, and security best practices.

Reviews local branch changes for bugs, security vulnerabilities, and code quality issues, producing a prioritized report with severity ratings and concrete fixes.

Session-end memory garbage collector. Promotes valuable L2 session facts to L1 atomic memory, wipes L2, and rotates oversized audit logs. Run at end of session to prevent context inflation and storage bloat.

Use this skill for content decay analysis, pruning, merging, updating, redirecting, recovery prioritization. Trigger when the task involves seo work related to Content Decay Pruning, implementation, audits, debugging, strategy, or validation.