Packs
3 packs@saranskumar
Anti Slop
Anti Slop from saranskumar/anti-slop.
72 skills · pack
@trailofbits
Static Analysis
Static analysis toolkit with CodeQL, Semgrep, and SARIF parsing for security vulnerability detection
3 skills · pack
@dataroaring
Dataroaring Skills
A writing coach for technical articles based on 'Writing for Developers' by Piotr Sarna & Cynthia Dunlop
3 skills · pack
Results for “sar”
124 skillssarif-parsing
Parse, analyze, and process SARIF files from static analysis tools like CodeQL and Semgrep, including filtering, deduplication, aggregation, and CI/CD integration.
6k · bundle
sox-sarbanes-oxley-act
Applies the Sarbanes-Oxley Act to assess financial-reporting integrity and IT general controls, mapping executive certification and internal-control areas to auditable evidence for public companies.
2
gsd-execute
GSD Execute — Get Shit Done
0
semgrep
Run Semgrep static analysis scans with automatic language detection, parallel subagent execution, and merged SARIF output. Supports full ruleset coverage or high-confidence security vulnerability filtering.
6k · bundle
auth
Use when implementing login, registration, session handling, protected routes, or role-based access.
0
eslint-auto-fixer
Automatically applies ESLint fixes using the ESLint Node.js API with flat config support, handling rule conflicts across TypeScript-ESLint and eslint-plugin-react, and generating fix reports in SARIF format.
28
More results
sar-filing
Drafts FinCEN Suspicious Activity Reports (Form 111) for BSA/AML regulatory filing. Compiles subject identification, transaction timelines, red-flag analysis, and activity classifications. Use when a financial institution detects suspicious transactions requiring mandatory SAR filing, continuing activity reports, or BSA compliance documentation.
34
audit-augmentation
Projects external audit findings from SARIF static analysis results and weAudit annotation files onto Trailmark code graphs as annotations and subgraphs, enabling cross-referencing with pre-analysis data like blast radius and taint.
6k · bundle
security
Use this skill when implementing any feature that touches user data, auth, APIs, file uploads, pe...
0
integrating-sast-into-github-actions-pipeline
Integrates Static Application Security Testing (SAST) tools—CodeQL and Semgrep—into GitHub Actions CI/CD pipelines, configuring automated code scanning, tuning rules, uploading SARIF results, and establishing quality gates that block merges on high-severity vulnerabilities.
24.6k · bundle
python-package-structure-planner
Use this when a Python repository needs package-level planning, import boundaries, module naming, reusable library extraction, or distribution-friendly structure.
0 · bundle
code-reviewer
Use this when reviewing code changes for correctness, maintainability, security-sensitive logic, boundary separation, and likely regressions across any supported runtime or framework.
0
system-reviewer
Use this when reviewing a full system design, architecture plan, or cross-service implementation for operational risk, boundary clarity, security posture, deployability, and maintainability.
0
design-system-enforcer
Use this when a codebase or design effort needs consistency enforcement for tokens, spacing, typography, color usage, component variants, and reusable interaction patterns.
0
python-cli-tool-builder
Use this when building or planning a Python command-line tool, command surface, argument model, package entrypoint, or automation-oriented CLI workflow.
0
migration-safety-reviewer
Use this when reviewing database, storage, config, queue, or integration migrations for rollout safety, rollback feasibility, data correctness, and environment-specific deployment risk.
0 · bundle
environment-config-planner
Use this when planning environment variables, config files, secrets, flags, and provider settings across local, CI, staging, production, serverless, or multi-runtime systems.
0 · bundle
accessibility-reviewer
Use this when reviewing or designing UI for keyboard access, semantic structure, focus handling, labels, contrast, error communication, motion sensitivity, or screen-reader-friendly behavior.
0
typescript-backend-architect
Use this when the backend is TypeScript-first and needs architecture for services, APIs, workers, serverless handlers, validation boundaries, and runtime-aware module design.
0
frontend-expert
Use when creating React/TypeScript components, pages, or features. For modern patterns including Suspense, useSuspenseQuery, lazy loading, MUI v7 styling, TanStack Router, and performance optimization.
0
observability-planner
Use this when the system needs logging, metrics, tracing, alerting, or operator-visible runtime signals for APIs, workers, integrations, serverless functions, or local-to-production supportability.
0
sox
Sarbanes-Oxley Act compliance reference — SOX sections, internal controls, audit requirements, and IT governance. Use when evaluating SOX compliance, designing internal controls, or preparing for financial audits.
12 · bundle
performance-optimizer
Use this when the team needs to improve latency, throughput, render performance, query speed, worker throughput, or resource usage across frontend, backend, database, or background systems.
0
codeql
Configure and run CodeQL code scanning through GitHub Actions workflows or the standalone CLI for security analysis.
36.2k · bundle
digital-health-clinical-asr-eval
Score a clinical ASR manifest against a chosen NIM, produce a five-section KER leaderboard, and route the user via a post-eval decision tree.
2.2k · bundle
arr-cli
Manage your Radarr (movies) and Sonarr (TV series) media library from the terminal. Search and browse movies/series, add new content, check calendars, view queue and download history, inspect quality profiles, and trigger searches. Use when the user mentions Radarr, Sonarr, the *arr stack, adding a movie or series, checking the library, finding something to watch, what's in the queue, download history, upcoming releases, media server setup, or movie/TV automation.
28 · bundle
asr
Comprehensive guide to asr. Master the concepts, implementation, best practices, and real-world applications of asr in professional environments.
1
dsar-processing
Guides AI agents through the complete GDPR Data Subject Access Request (DSAR) workflow under Article 15, including identity verification, 30-day deadline calculation with extensions, response formatting, exemptions, and fee provisions. Activate when handling DSAR, access request, subject access, Art. 15, or SAR queries.
228 · bundle
esa-pa-interpret-sit
Interprets the saline infusion test (SIT) to assess the probability of primary aldosteronism when a patient has a positive aldosterone-to-renin ratio (ARR) and requires confirmatory testing. Triggers include evaluating post‑infusion plasma aldosterone concentration (PAC) after a positive ARR, hypertension work‑up, or when deciding whether to proceed to adrenal venous sampling (AVS).
10
frontend-data-fetching-planner
Use this when a frontend feature needs a clear plan for server data fetching, caching, invalidation, mutations, optimistic UI, or auth-aware data loading.
0
building-soc-escalation-matrix
Build a structured SOC escalation matrix defining severity tiers, response SLAs, escalation paths, and notification procedures for security incidents.
24.6k · bundle
sr-validate
Validates generated SRS documents against IEEE 830-1998, fixing errors and reporting warnings.
1 · bundle
zarr-python
Store and process large N-dimensional arrays with chunking, compression, and parallel I/O, integrating with NumPy, Dask, and Xarray for cloud-native scientific computing.
30.2k · bundle
security-reviewer
Use this when reviewing a feature, service, API, auth design, integration, job system, or deployment plan for security weaknesses, unsafe trust assumptions, input risks, or privilege issues.
0
implementing-gdpr-data-subject-access-request
Automates GDPR Data Subject Access Request (DSAR) workflows including identity verification, PII discovery across databases and files using regex and NER, data mapping, response templating per Article 15 requirements, deadline tracking, and audit logging.
24.6k · bundle
adr-fleet
ADR Fleet
18 · bundle