aibot88
- 8.3k skills
- 0 followers
- 3 repo stars
- 2 weeks ago last updated
- ▌
- ▌ Healthcare Phi Compliance · aibot88 bundle中文优先：用于医疗PHI合规相关任务，帮助识别、设计、实现或验证对应工作流。English keywords: Protected Health Information (PHI) and Personally Identifiable Information (PII) compliance patterns for healthcare applications. Covers data classification, access control, audit trails, encryption, and common leak vectors.
- ▌ Job Description Framework · aibot88 bundleJob Description Framework — PT Hartono Istana Teknologi (Polytron)
- ▌
- ▌
- ▌ Patent Landscape Analyzer · aibot88 bundleSearches the USPTO PatentsView API and European Patent Office OPS (Open Patent Services) API for patent grants, applications, and family relationships. Generates technology landscape maps with IPC classification clustering.
- ▌ Serpapi Research Pipeline · aibot88 bundleBuilds structured research datasets by querying SerpAPI Google Search, Google Scholar, and Google News endpoints. Extracts entities via spaCy NER and stores results in SQLite with full-text search.
- ▌ Sonarqube Analysis Runner · aibot88 bundleRun SonarQube static analysis scans via the SonarQube Web API and sonar-scanner CLI. Detects code smells, bugs, and security vulnerabilities with configurable quality gates and branch analysis support.
- ▌ Swift Protocol Di Testing · aibot88 bundle中文优先：用于Swift协议依赖注入测试相关任务，帮助识别、设计、实现或验证对应工作流。English keywords: Protocol-based dependency injection for testable Swift code — mock file system, network, and external APIs using focused protocols and Swift Testing.
- ▌ Trivy Container Scanner 2 · aibot88 bundleWraps the Trivy CLI for comprehensive container image vulnerability scanning. Outputs results in SARIF format for GitHub Code Scanning API integration and generates OCI artifact attestations.
- ▌ Usql Universal SQL Client · aibot88 bundleusql is a universal command-line interface for SQL databases including PostgreSQL, MySQL, SQLite, Oracle, SQL Server, and dozens more. It provides a consistent psql-like experience with syntax highlighting, tab completion, and cross-database copying.
- ▌
- ▌ Coding Standards · aibot88 bundleComprehensive coding standards and best practices for maintainable, consistent software development across multiple languages and paradigms
- ▌
- ▌
- ▌ Dependency Audit Terraform · aibot88 bundleAudit a Terraform / OpenTofu codebase's provider, module, and backend dependencies for outdated versions, vulnerabilities, and duplicate version pins.
- ▌
- ▌
- ▌ Hashicorp Vault MCP Server · aibot88 bundleThe official HashiCorp Vault MCP server lets AI assistants read, write, list, and delete secrets in Vault's KV engine through a safe, auditable MCP interface. Supports both stdio and HTTP transports, TLS encryption, and CORS controls.
- ▌ LLM Trading Agent Security · aibot88 bundle中文优先：用于LLMtrading智能体安全相关任务，帮助识别、设计、实现或验证对应工作流。English keywords: Security patterns for autonomous trading agents with wallet or transaction authority. Covers prompt injection, spend limits, pre-send simulation, circuit breakers, MEV protection, and key handling.
- ▌ Nginx Config Linter Tester · aibot88 bundleValidates nginx.conf files using the gixy static analyzer and crossplane parser library. Tests configuration for security misconfigs, HTTP header issues, and performs dry-run validation via nginx -t subprocess invocation.
- ▌ NPM Package Audit Analyzer · aibot88 bundleAnalyzes npm package security advisories using npm audit, the npm Registry API, and the GitHub Advisory Database GraphQL API. Produces prioritized vulnerability reports with upgrade path recommendations.
- ▌ Post Milestone Audit Swift · aibot88 bundleAudit a Swift / Xcode codebase after a milestone tag is cut — drift, regressions, extraction signals, and convention compliance against documented rules.
- ▌ REST API Changelog Tracker · aibot88 bundleTracks breaking changes across REST API versions by diffing OpenAPI specs with oasdiff and monitoring endpoint deprecation headers. Stores version history in SQLite via better-sqlite3.
- ▌ Sast Rule Compiler Semgrep · aibot88 bundleCompiles and validates custom Semgrep SAST rules using the semgrep-core engine. Tests pattern matching against sample codebases and generates rule performance benchmarks with p/ci rulesets.
- ▌ Sbom Generator Cve Matcher · aibot88 bundleGenerates Software Bill of Materials using Syft for container images and matches components against the NVD CVE database via OSV.dev API. Outputs CycloneDX and SPDX formats for supply chain compliance.
- ▌ Sbom Vulnerability Scanner · aibot88 bundleGenerates Software Bill of Materials using Syft and scans for CVEs with Grype. Cross-references findings against the NVD and OSV databases for comprehensive vulnerability detection.
- ▌
- ▌ Semgrep Sast Scanner Skill · aibot88 bundleRuns Semgrep static analysis with custom rule packs targeting OWASP Top 10 patterns. Uses semgrep CLI with --config=auto and --sarif output for GitHub Advanced Security integration and CWE-tagged finding reports.
- ▌ Semgrep Security Scanner 2 · aibot88 bundleScan codebases for security vulnerabilities and anti-patterns using Semgrep OSS rules and the Semgrep CLI. Supports custom YAML rule authoring and SARIF output for CI integration.
- ▌ Zola Static Site Generator · aibot88 bundleZola is a fast static site generator written in Rust that ships as a single binary with built-in Sass compilation, syntax highlighting, search indexing, image processing, and multilingual support. No dependencies required.
- ▌
- ▌
- ▌
- ▌
- ▌ Betterleaks Secrets Scanner · aibot88 bundleA fast, configurable secrets scanner built by the creator of Gitleaks and backed by Aikido Security. Betterleaks detects leaked passwords, API keys, and tokens in git repositories, directories, and stdin with CEL-based validation and parallelized scanning.
- ▌ Eza Modern File Listing CLI · aibot88 bundleA modern, maintained replacement for the ls command, written in Rust. eza provides colorized output, Git integration, tree views, symlink awareness, and extended attribute support in a single fast binary.
- ▌ Git Secret Scanner Gitleaks · aibot88 bundleScans Git repositories for leaked secrets using Gitleaks, TruffleHog, and custom regex patterns. Detects API keys, AWS credentials, private keys, and database connection strings across commit history.
- ▌ Gitleaks Git Secret Scanner · aibot88 bundleGitleaks is an open-source SAST tool for detecting hardcoded secrets like passwords, API keys, and tokens in Git repositories, files, and directories. With 24,000+ GitHub stars and 20 million Docker downloads, it is the most widely adopted open-source secret scanner.
- ▌ Jenkins Pipeline Lint Agent · aibot88 bundleValidates Jenkinsfile declarative and scripted pipelines using the Jenkins Pipeline Linter API endpoint. Checks for deprecated step usage, security anti-patterns, and Groovy sandbox violations.
- ▌ NPM Package Audit Reference · aibot88 bundleProvides deep dependency analysis using npm audit, socket.dev API for supply chain risk scoring, and bundlephobia API for bundle size impact assessment. Generates license compliance reports via license-checker.
- ▌ Outline Knowledge Base Wiki · aibot88 bundleOutline is a fast, collaborative knowledge base for teams built with React and Node.js. It provides real-time editing, Markdown support, and a rich API for integration with Slack, authentication providers, and custom workflows.
- ▌
- ▌ Owasp Zap Scan Orchestrator · aibot88 bundleOrchestrates OWASP ZAP active and passive scans via the ZAP API, automating spider crawls, AJAX spidering with Selenium, and generating SARIF-format vulnerability reports.
- ▌ Pdfcpu Go PDF Processor CLI · aibot88 bundlepdfcpu is a Go-based PDF processing library and CLI tool that handles validation, optimization, merging, splitting, watermarking, encryption, and form filling. It provides a complete PDF manipulation toolkit without external dependencies.
- ▌ Post Milestone Audit Dotnet · aibot88 bundleAudit a .NET / C# codebase after a milestone tag is cut — drift, regressions, extraction signals, and convention compliance against documented rules.
- ▌ Post Milestone Audit Nestjs · aibot88 bundleAudit a NestJS (TypeScript) codebase after a milestone tag is cut — drift, regressions, extraction signals, and convention compliance against documented rules.
- ▌ Post Milestone Audit Nextjs · aibot88 bundleAudit a Next.js (App Router) + TypeScript codebase after a milestone tag is cut — drift, regressions, extraction signals, and convention compliance.
- ▌ Post Milestone Audit Python · aibot88 bundleAudit a Python codebase after a milestone tag is cut — drift, regressions, extraction signals, and convention compliance against documented rules.
- ▌ Snyk Dependency Audit Skill · aibot88 bundleUses the Snyk CLI and REST API v1 to scan package manifests for known CVEs. Cross-references findings with the GitHub Advisory Database and produces SBOM documents in CycloneDX format.
- ▌ Wikijs Wiki Platform Nodejs · aibot88 bundleWiki.js is a powerful open-source wiki app built on Node.js with support for Markdown, visual editing, Git-backed storage, and a GraphQL API. It provides multi-language content, granular access controls, and integrations with major authentication providers.
- ▌ Woocommerce REST Sync Agent · aibot88 bundleSynchronizes WooCommerce product data bidirectionally using the WC REST API v3 and wc/v3/products endpoints. Handles batch create/update/delete with OAuth 1.0a authentication and rate-limit backoff.
- ▌ XML Xslt Transform Pipeline · aibot88 bundleApplies chained XSLT transformations to XML documents using lxml and Saxon-JS. Supports XSLT 3.0 streaming, XPath parameter injection, and multi-stage transform pipelines with intermediate validation.
- ▌ Zapmail Domain Setup Public · aibot88 bundlePublic guide: Generate short domain names, check availability, purchase on Dynadot, switch nameservers, set up on Zapmail, create inboxes, and export to your email sending platform. Requires your own Dynadot and Zapmail API keys. Use when someone wants to set up cold email domains end-to-end.
- ▌
- ▌
- ▌
- ▌
- ▌ Gitlab CI Template Generator · aibot88 bundleCreates GitLab CI/CD pipeline templates using Auto DevOps components, Kaniko for container builds, and SAST/DAST security scanning. Supports multi-project pipelines with trigger and bridge jobs.
- ▌ Google Calendar Sync Agent 2 · aibot88 bundleSynchronizes events across multiple Google Calendar accounts using the Calendar API v3 and OAuth 2.0. Handles recurring events, timezone conversions, and conflict resolution.
- ▌ Jinja2 Template Engine Agent · aibot88 bundleRenders Jinja2 templates with variable injection, macro expansion, and template inheritance. Integrates with the Jinja2 Environment API for sandboxed execution and custom filter registration.
- ▌ NPM Dependency Audit Scanner · aibot88 bundleScans Node.js projects for vulnerable dependencies using npm audit and the OSV.dev REST API. Cross-references CVE databases via the National Vulnerability Database API v2.0 and generates SBOM documents in CycloneDX format.
- ▌ Package Vuln Scanner Osv API · aibot88 bundleScans npm, PyPI, and Go module dependencies for known vulnerabilities using the OSV.dev API and GitHub Advisory Database. Generates SBOM reports in CycloneDX format.
- ▌ Restic Encrypted Backup Tool · aibot88 bundleRestic is a fast, secure, and efficient backup program supporting local, SFTP, S3, Azure, GCS, and many other storage backends. Written in Go with 32k+ GitHub stars, it features deduplication, encryption, and snapshot-based incremental backups.
- ▌ Sonarqube Code Scanner Agent · aibot88 bundleAutomated code quality scanning using SonarQube REST API and SonarScanner CLI. Detects code smells, bugs, and vulnerabilities across 30+ languages with configurable quality gates.
- ▌ Terraform Plan Diff Reviewer · aibot88 bundleParses terraform plan JSON output to identify destructive changes, security group modifications, and IAM policy drift. Uses the Terraform Cloud API for workspace state comparison.
- ▌ Testcafe E2e Browser Testing · aibot88 bundleTestCafe is a Node.js-based end-to-end browser testing framework by DevExpress that requires no WebDriver installation. It supports all major browsers, automatic waiting, live mode for rapid development, and both JavaScript and TypeScript test authoring.
- ▌
- ▌
- ▌
- ▌ Ansible Playbook Vault Runner · aibot88 bundleExecutes Ansible playbooks against dynamic inventories from AWS EC2 or Azure, decrypting Ansible Vault secrets via HashiCorp Vault KV v2 API. Streams task output in real time and posts a per-host pass/fail summary to Slack. Supports --check mode for dry-run validation before live runs.
- ▌ AWS Cloudtrail Log Normalizer · aibot88 bundleNormalizes and enriches AWS CloudTrail JSON logs into OCSF (Open Cybersecurity Schema Framework) format. Maps eventSource/eventName pairs to MITRE ATT&CK technique IDs using the MITRE ATT&CK STIX API.
- ▌ Censys Attack Surface Monitor · aibot88 bundleMonitors internet-facing assets using Censys Search API v2 for host discovery and certificate enumeration. Tracks exposed services, TLS configurations, and new asset appearances with delta alerting via webhook integrations.
- ▌ Cheerio Product Price Tracker · aibot88 bundleMonitors e-commerce product prices using Cheerio.js for server-side DOM parsing with got-scraping for stealth HTTP requests. Tracks price history in SQLite and triggers alerts via nodemailer when prices drop below thresholds.
- ▌
- ▌ Cookiecutter Project Scaffold · aibot88 bundleGenerates project boilerplate from Cookiecutter templates with Jinja2 variable injection. Supports custom hooks for post-generation linting via Ruff and pre-commit framework setup.
- ▌ Dalle 3 Batch Asset Generator · aibot88 bundleGenerates multiple image variations from a single brief using the OpenAI Images API (POST /v1/images/generations) with DALL-E 3, applying brand guidelines via structured prompt templates. Handles concurrent generation requests with retry logic for rate limit compliance.
- ▌ Docker Compose Health Checker · aibot88 bundleValidates docker-compose.yml files against the Compose Specification, checks image vulnerability status via Docker Scout API, and verifies healthcheck configurations.
- ▌ Docker Compose Stack Analyzer · aibot88 bundleAnalyzes Docker Compose configurations for security, networking, and resource optimization using the Docker Engine API and Compose specification parser. Detects misconfigurations and dependency issues.
- ▌ Elastic Net Feature Selection · aibot88 bundle> **Source**: [https://github.com/aipoch/medical-research-skills](https://github.com/aipoch/medical-research-skills)
- ▌ Git Secrets Precommit Scanner · aibot88 bundleScans git diffs for exposed secrets using truffleHog entropy detection and custom regex patterns. Integrates with pre-commit hooks and GitHub push protection API for real-time blocking.
- ▌ Audit Linux Host Hardening Drift Before Exposing Ssh Or Roll · aibot88 bundleUses Lynis to run an on-host security audit and turn the findings into a prioritized hardening checklist for an agent or operator. Invoke it when a machine is about to become internet-facing, after base image changes, or whenever you need a quick read on hardening drift instead of a generic vulnerability scan.
- ▌ Block Agent Egress MCP Prompt Injection And Secret Exfiltrat · aibot88 bundlePut an inline firewall and containment layer in front of agent network traffic, tool calls, and MCP traffic before you trust an agent with local secrets.
- ▌ Build And Debug Custom Wordpress REST API Endpoints With Sch · aibot88 bundleUses the WordPress wp-rest-api skill to help an agent design, register, validate, and troubleshoot custom REST routes without skipping schema, auth, or permission_callback details. This is for agent-led endpoint work in plugins, themes, or core-adjacent codebases, not for browsing the WordPress REST API as a product catalog.
- ▌ Filter Prompts And Model Outputs For Injection Secrets Toxic · aibot88 bundleScreen prompts and responses with input and output scanners before an LLM interaction reaches production users or downstream systems.
- ▌ Inject Sops Managed Secrets Into Nixos And Home Manager Conf · aibot88 bundleMaterialize age or PGP encrypted SOPS secrets inside declarative NixOS and Home Manager systems during activation without hand-copying values.
- ▌ Mirror And Back Up Openclaw Workspaces To Your Own Storage W · aibot88 bundleLets an OpenClaw agent sync its workspace to cloud storage in mailbox, mirror, or bisync mode, and optionally push encrypted full-system backups to an rclone backend.
- ▌ Probe Kubernetes Clusters With Kube Hunter For Exposed Servi · aibot88 bundleRun a focused exposure probe against a Kubernetes environment before deeper pentest work or remediation planning starts.
- ▌ Reproduce SQL Injection Paths And Map Database Takeover Opti · aibot88 bundleTake a suspected injectable request, replay it on an authorized target, confirm the finding, and enumerate reachable database actions before manual follow-up.
- ▌ Scan Python Code For Risky Security Patterns With Bandit Bef · aibot88 bundleCatch insecure Python calls, weak crypto usage, shell injection risks, and similar patterns before merge or release.
- ▌ Statically Scan Agent Repos For Prompt Injection And Unsafe · aibot88 bundleAudit agent code, prompts, and MCP configuration for prompt-injection surfaces, taint issues, and unsafe tool exposure before shipping.
- ▌ Triage Active Security Incidents With AI Augmented Workflows · aibot88 bundleGuide live digital-forensics and incident-response work with human approval gates when the job is evidence review and triage, not general MCP setup.
- ▌ Address Github Pr Review Comments From The Current Branch Wi · aibot88 bundleFind the open PR for the current branch, gather unresolved review comments, and drive a focused comment-resolution workflow with gh-authenticated context.
- ▌ Analyze Memory Images For Processes Modules And Malware Indi · aibot88 bundleInspect captured RAM images to enumerate processes, modules, handles, and suspicious in-memory behavior before escalation or evidence handoff.
- ▌ Audit And Normalize Spdx License Headers Before Releasing Or · aibot88 bundleUse REUSE when an agent needs file-level licensing clarity instead of guessing from a single top-level LICENSE file. The agent checks compliance, adds or verifies SPDX headers, pulls missing license texts into LICENSES/, and produces a concrete remediation list or SPDX export.
- ▌ Audit Cloud Accounts For Security Misconfigurations With Pro · aibot88 bundleRun targeted AWS, Azure, or GCP security and compliance audits when an agent needs actionable cloud findings instead of a generic cloud-security platform overview.
- ▌ Audit Github Actions For Privilege And Supply Chain Risks Wi · aibot88 bundleRun a focused security pass on GitHub Actions workflows before merge so token misuse, dangerous permissions, and unpinned actions are caught early.
- ▌ Audit Github Actions Workflows For Insecure Permissions And · aibot88 bundleThis ASE skill uses zizmor to audit GitHub Actions workflows and composite actions for security mistakes before they ship. An agent can scan local repos or remote GitHub repositories, flag risky permission scopes and unsafe workflow patterns, and return plain output, GitHub-native findings, or SARIF for follow-up automation.
- ▌ Audit Python Dependency Sets For Known Vulnerabilities Befor · aibot88 bundleScan Python requirements and environments for known vulnerable or malicious packages before they move further through delivery or promotion workflows.
- ▌ Audit Python Environments And Requirements Files For Known V · aibot88 bundleCheck Python environments and requirements files for published vulnerabilities before shipping, upgrading, or approving dependency changes.