← all publishers

ChaosChild

@chaoschild source repo

Report this profile Claim this profile

• 7 skills
• 0 followers
• 14 hours ago last updated

1. ▌
   Cavet Design · chaoschild bundle

   Surface the security consequence of design decisions while they are being made — architecture, new features, integrations, data flows, storage, authentication, authorisation, APIs, webhooks, background jobs, file handling, third-party or LLM services, multi-tenancy. Use this whenever the operator is brainstorming, planning, sketching, or deciding how something will be built, even if security is never mentioned and even if the discussion is casual. Fires on design activity, not on security words.
   0
   installs
2. ▌
   Cavet Triage · chaoschild bundle

   Interpret security scan findings, separate false positives from real issues, and surface only what matters. Use after code is written or changed, before a commit, whenever scan output appears in context (including pre-commit hook output), when the operator asks to check for vulnerabilities, "is this safe", "run a scan", or asks what to do about a finding. Covers both the isolated triage subagent and the parent session that reconciles its results.
   0
   installs
3. ▌
   Cavet Install · chaoschild

   Install the cavet CLI when a cavet skill needs it and the binary is missing. Does nothing when cavet already works.
   0
   installs
4. ▌
   Cavet Deployment · chaoschild bundle

   Infrastructure and deployment work — Terraform, CloudFormation, Pulumi, Bicep, Kubernetes manifests, Helm charts, Dockerfiles, Compose files, CI/CD pipelines and workflows, environment and runtime configuration, secrets management, TLS, networking and exposure, deploy scripts. Use whenever such files are written or changed and whenever how something will be deployed or hosted is being decided.
   0
   installs
5. ▌
   Cavet Supply Chain · chaoschild

   Adding, upgrading, replacing, or removing dependencies — packages, libraries, plugins, SDKs, GitHub Actions and other CI steps, container base images, lockfiles, package manifests. Use whenever a manifest or lockfile changes, whenever a library is proposed or compared, whenever `install`/`add`/`update` is about to run, and when the operator asks which library to use.
   0
   installs
6. ▌
   Cavet Design Review · chaoschild bundle

   Full security sweep of a design at the moment it is being finalised, agreed, written up, or handed to build — "let's go with this", "write the design doc", "ready to implement", an ADR or spec being completed, a plan being approved. Use even if security was discussed during the design conversation; the review exists because conversational flags are probabilistic and things get deprioritised mid-flow. Produces the threat model and decision records.
   0
   installs
7. ▌
   Cavet Secure Coding · chaoschild bundle

   Secure-by-default construction while writing or modifying any code — functions, endpoints, queries, file and path handling, shell calls, serialisation, auth, tokens, config, scripts, tests, migrations. Use on every code-writing or code-editing task, regardless of whether it appears security-relevant; recognising what is security-relevant is exactly what this skill supplies, so it cannot be gated on that recognition.
   0
   installs