Corey Haines
- 73 skills
- 0 followers
- 36k repo stars
- 2 weeks ago last updated
- ▌ Owasp Audit 2 · coreyhaines31Audit application source code against the OWASP Top 10 vulnerability categories. Use when the user mentions 'OWASP,' 'security audit,' 'code security review,' 'vulnerability audit,' 'find vulnerabilities,' 'secure code review,' 'security review,' or wants to check their codebase for common security weaknesses.
- ▌ Incident Triage 2 · coreyhaines31Guide rapid triage and initial response to security incidents following NIST SP 800-61 methodology. Use when the user mentions 'incident response,' 'security incident,' 'triage,' 'we've been hacked,' 'breach,' 'compromised,' 'malware detected,' 'suspicious activity,' 'IOC,' 'indicators of compromise,' or needs help handling a security event.
- ▌ Dependency Audit 2 · coreyhaines31Audit project dependencies, frameworks, languages, and dev tools for known vulnerabilities, CVEs, and security anti-patterns. Use when the user mentions 'dependency audit,' 'npm audit,' 'CVE,' 'vulnerable packages,' 'supply chain security,' 'outdated dependencies,' 'known vulnerabilities,' 'security advisory,' 'package security,' 'framework vulnerability,' 'is this package safe,' or needs to check whether their stack has known security issues.
- ▌ Prompt Injection 2 · coreyhaines31Audit applications for AI prompt injection, agent security, and LLM permission boundary vulnerabilities. Use when the user mentions 'prompt injection,' 'LLM security,' 'AI security,' 'jailbreak,' 'indirect prompt injection,' 'prompt leaking,' 'AI red team,' 'LLM vulnerabilities,' 'AI input validation,' 'system prompt extraction,' 'agent security,' 'MCP security,' 'AI permissions,' 'AI privilege escalation,' or needs to secure any application with AI features, AI agents, or LLM integrations.
- ▌ Owasp Audit · coreyhaines31Audit application source code against the OWASP Top 10 vulnerability categories. Use when the user mentions 'OWASP,' 'security audit,' 'code security review,' 'vulnerability audit,' 'find vulnerabilities,' 'secure code review,' 'security review,' or wants to check their codebase for common security weaknesses.
- ▌ Incident Triage · coreyhaines31Guide rapid triage and initial response to security incidents following NIST SP 800-61 methodology. Use when the user mentions 'incident response,' 'security incident,' 'triage,' 'we've been hacked,' 'breach,' 'compromised,' 'malware detected,' 'suspicious activity,' 'IOC,' 'indicators of compromise,' or needs help handling a security event.
- ▌ Dependency Audit · coreyhaines31Audit project dependencies, frameworks, languages, and dev tools for known vulnerabilities, CVEs, and security anti-patterns. Use when the user mentions 'dependency audit,' 'npm audit,' 'CVE,' 'vulnerable packages,' 'supply chain security,' 'outdated dependencies,' 'known vulnerabilities,' 'security advisory,' 'package security,' 'framework vulnerability,' 'is this package safe,' or needs to check whether their stack has known security issues.
- ▌ Prompt Injection · coreyhaines31Audit applications for AI prompt injection, agent security, and LLM permission boundary vulnerabilities. Use when the user mentions 'prompt injection,' 'LLM security,' 'AI security,' 'jailbreak,' 'indirect prompt injection,' 'prompt leaking,' 'AI red team,' 'LLM vulnerabilities,' 'AI input validation,' 'system prompt extraction,' 'agent security,' 'MCP security,' 'AI permissions,' 'AI privilege escalation,' or needs to secure any application with AI features, AI agents, or LLM integrations.
- ▌ Recon · coreyhaines31Perform structured reconnaissance and attack surface enumeration for authorized penetration tests, CTF challenges, and bug bounty programs. Use when the user mentions 'recon,' 'reconnaissance,' 'enumerate,' 'attack surface,' 'subdomain enumeration,' 'port scan,' 'fingerprint,' 'asset discovery,' or needs to map a target's external footprint.
- ▌ Cloud Audit · coreyhaines31Audit cloud infrastructure (AWS, GCP, Azure) for misconfigurations, excessive permissions, and security gaps. Use when the user mentions 'cloud security,' 'cloud audit,' 'AWS security,' 'GCP security,' 'Azure security,' 'IAM audit,' 'S3 bucket,' 'cloud misconfiguration,' 'cloud hardening,' or needs to review cloud infrastructure security.
- ▌ Osint Recon · coreyhaines31Gather and correlate open source intelligence from public sources for authorized investigations, threat intelligence, and attack surface assessment. Use when the user mentions 'OSINT,' 'open source intelligence,' 'digital footprint,' 'public records,' 'threat intelligence,' 'investigate a domain,' or needs to research a target using publicly available data.
- ▌ Disk Forensics · coreyhaines31Analyze disk images and file systems for digital evidence recovery in forensic investigations and CTF challenges. Use when the user mentions 'disk forensics,' 'forensic analysis,' 'disk image,' 'file carving,' 'deleted files,' 'evidence recovery,' 'autopsy,' 'sleuthkit,' or needs to examine a forensic image.
- ▌ Domain · coreyhaines31When you want to brainstorm and check available .com domains for a new project — brand naming, aftermarket pricing (HugeDomains / Afternic / Sedo / Dan), USPTO trademark screening, and social handle availability. Built on Laura Roeder's "work backwards from availability, not from a name you fell in love with" methodology. Uses Vercel CLI + whois + Domainr API + Namecheap API + agent-browser for the pieces each tool actually reliably supports (multi-tool ensemble because no single tool covers everything cleanly). 11-step workflow: budget → brainstorm → primary availability check → whois cross-check → Domainr aggregation → Namecheap price → aftermarket sweep (+ liveness probe for parked/dead domains, drop-watch for expiring ones) → bucket → negotiate → NAME research (trademark + socials) → buy. Triggers on "/domain," "find a domain," "check domain availability," "brainstorm a domain," "what .com is available for X," "domain hunt," "name my project," "is X.com available," "aftermarket price on X.com," "trademark
- ▌ Second Brain · coreyhaines31 bundleWhen you want to capture into, compile, query, lint, or connect your personal Second Brain. Wraps the Karpathy LLM Wiki schema (Obsidian or any markdown vault) — raw/ (unprocessed sources), wiki/ (AI-compiled interlinked topic pages), outputs/ (generated artifacts). Tool-agnostic in design but defaults to a vault at ${SECOND_BRAIN_VAULT:-$HOME/Documents/SecondBrain}/. Six modes — capture (drop something into raw/), compile (process unprocessed raw files into wiki pages, update INDEX.md), query (answer a question from the wiki, save to outputs/), lint (orphans / contradictions / stale / unprocessed raw / topic gaps), connect (suggest new wikilinks between pages), search (quick lookup). Triggers on "/second-brain," "/sb," "capture this," "save this to my brain," "compile the wiki," "process raw notes," "query my wiki," "ask my brain," "lint the wiki," "find connections," "search my notes." Complements deep-research (external corpus) — this is the internal corpus.
- ▌ Company Brain · coreyhaines31 bundleYour team's shared, AI-ready knowledge base — people, companies, meetings, SOPs, and decisions structured so Claude can answer questions on your team's behalf. Team-scope sibling to second-brain (which is personal-scope). Seven modes — capture (drop something into the right structured dir), compile (process into wiki pages, update INDEX.md), query (answer from the corpus with trust weighting, save to outputs/), review (triage queue — verify / deprecate / supersede unreviewed and stale captures so wrong info never becomes context), lint (orphans / stale / contradictions / gaps), connect (suggest new wikilinks), search (quick lookup). Structured raw dirs (people/, companies/, meetings/, sops/, decisions/, customer-language/, recurring-questions/, sales-objections/) instead of second-brain's flat type-prefixed raw/. Multi-author aware — every capture stamps author + timestamp + trust status. Optional auto-sync from Fathom/Gong/Granola call transcripts, Slack/email exports, CRM. Defaults to a vault at ${COMPANY_B
- ▌ Events · coreyhaines31 bundleWhen the user wants to plan, run, sponsor, speak at, or get pipeline from events — webinars, conferences, trade shows, meetups, dinners, workshops, virtual summits, or user conferences. Also use when the user mentions 'event marketing,' 'field marketing,' 'run a webinar,' 'webinar funnel,' 'show-up rate,' 'should we sponsor,' 'sponsor a conference,' 'trade show booth,' 'booth strategy,' 'event ROI,' 'badge scans,' 'event follow-up,' 'speaking slot,' 'CFP,' 'conference talk,' 'host a dinner,' 'user conference,' or 'virtual summit.' Covers all four roles: hosting, sponsoring/exhibiting, speaking, and attending. For product launch moments, see launch. For the partnership side of joint webinars, see co-marketing. For ongoing community programs, see community-marketing. For podcast appearances, see public-relations. For the email sequences themselves, see emails.
- ▌ Marketing Psychology 2 · coreyhaines31 bundleWhen the user wants to apply psychological principles, mental models, or behavioral science to marketing. Also use when the user mentions 'psychology,' 'mental models,' 'cognitive bias,' 'persuasion,' 'behavioral science,' 'why people buy,' 'decision-making,' 'consumer behavior,' 'anchoring,' 'social proof,' 'scarcity,' 'loss aversion,' 'framing,' or 'nudge.' Use this whenever someone wants to understand or leverage how people think and make decisions in a marketing context. For applying psychology to specific pages, see cro; for pricing tactics, see pricing; for copy framing, see copywriting.
- ▌ Programmatic SEO 2 · coreyhaines31 bundleWhen the user wants to create SEO-driven pages at scale using templates and data. Also use when the user mentions "programmatic SEO," "template pages," "pages at scale," "directory pages," "location pages," "[keyword] + [city] pages," "comparison pages," "integration pages," "building many pages for SEO," "pSEO," "generate 100 pages," "data-driven pages," or "templated landing pages." Use this whenever someone wants to create many similar pages targeting different keywords or locations. For auditing existing SEO issues, see seo-audit. For content strategy planning, see content-strategy.
- ▌ Marketing Ideas 3 · coreyhaines31 bundleWhen the user needs marketing ideas, inspiration, or strategies for their SaaS or software product. Also use when the user asks for 'marketing ideas,' 'growth ideas,' 'how to market,' 'marketing strategies,' 'marketing tactics,' 'ways to promote,' 'ideas to grow,' 'what else can I try,' 'I don't know how to market this,' 'brainstorm marketing,' or 'what marketing should I do.' Use this as a starting point whenever someone is stuck or looking for inspiration on how to grow. For specific channel execution, see the relevant skill (ads, social, emails, etc.).
- ▌ SEO Audit 4 · coreyhaines31 bundleWhen the user wants to audit, review, or diagnose SEO issues on their site. Also use when the user mentions "SEO audit," "technical SEO," "why am I not ranking," "SEO issues," "on-page SEO," "meta tags review," "SEO health check," "my traffic dropped," "lost rankings," "not showing up in Google," "site isn't ranking," "Google update hit me," "page speed," "core web vitals," "crawl errors," or "indexing issues." Use this even if the user just says something vague like "my SEO is bad" or "help with SEO" — start with an audit. For building pages at scale to target keywords, see programmatic-seo. For adding structured data, see schema. For AI search optimization, see ai-seo.
- ▌ Copywriting 2 · coreyhaines31 bundleWhen the user wants to write, rewrite, or improve marketing copy for any page — including homepage, landing pages, pricing pages, feature pages, about pages, or product pages. Also use when the user says "write copy for," "improve this copy," "rewrite this page," "marketing copy," "headline help," "CTA copy," "value proposition," "tagline," "subheadline," "hero section copy," "above the fold," "this copy is weak," "make this more compelling," or "help me describe my product." Use this whenever someone is working on website text that needs to persuade or convert. For email copy, see emails. For popup copy, see popups. For editing existing copy, see copy-editing. For the offer underneath the copy (bonuses, guarantees, value framing), see offers.
- ▌ AI SEO 2 · coreyhaines31 bundleWhen the user wants to optimize content for AI search engines, get cited by LLMs, or appear in AI-generated answers. Also use when the user mentions 'AI SEO,' 'AEO,' 'GEO,' 'LLMO,' 'answer engine optimization,' 'generative engine optimization,' 'LLM optimization,' 'AI Overviews,' 'optimize for ChatGPT,' 'optimize for Perplexity,' 'AI citations,' 'AI visibility,' 'zero-click search,' 'how do I show up in AI answers,' 'LLM mentions,' 'optimize for Claude/Gemini,' 'llms.txt,' 'OKF,' 'Open Knowledge Format,' 'knowledge bundle,' or 'agent-readable site.' Use this whenever someone wants their content to be cited or surfaced by AI assistants and AI search engines. For traditional technical and on-page SEO audits, see seo-audit. For structured data implementation, see schema.
- ▌ Competitors 2 · coreyhaines31 bundleWhen the user wants to create competitor comparison or alternative pages for SEO and sales enablement. Also use when the user mentions 'alternative page,' 'vs page,' 'competitor comparison,' 'comparison page,' '[Product] vs [Product],' '[Product] alternative,' 'competitive landing pages,' 'how do we compare to X,' 'battle card,' or 'competitor teardown.' Use this for any content that positions your product against competitors. Covers four formats: singular alternative, plural alternatives, you vs competitor, and competitor vs competitor. For sales-specific competitor docs, see sales-enablement.
- ▌ Attribution · coreyhaines31 bundleWhen the user wants to figure out which marketing actually drives conversions and revenue, choose or interpret an attribution model, or reconcile conflicting numbers across tools. Also use when the user mentions "attribution," "attribution model," "first-touch vs last-touch," "multi-touch," "which channel drives revenue," "what's my real CAC," "my dashboards disagree," "Google/Meta says X but GA says Y," "media mix model," "MMM," "incrementality," "geo lift," "holdout test," "how did you hear about us," "self-reported attribution," "dark social," or wants to instrument attribution themselves — "stitch my bookings to their source," "SavvyCal/Calendly attribution," "close the identify gap," "track conversions on a third-party domain," "first-party / self-hosted attribution." For event tracking setup and UTMs, see analytics. For ad-platform pixels/CAPI, see ads. For pipeline and CRM...
- ▌ Product Marketing Context · coreyhaines31 bundleCreate or update a reusable product marketing context document with positioning, audience, ICP, use cases, and messaging. Use at the start of a project to avoid repeating core marketing context across tasks.
- ▌ Influencer Marketing · coreyhaines31 bundleWhen the user wants to run influencer, creator, or ambassador partnerships to promote their product — finding and vetting partners, structuring deals, briefing creators, disclosure compliance, and measuring ROI. Also use when the user mentions 'influencer marketing,' 'creator partnerships,' 'sponsorships,' 'YouTube sponsorships,' 'podcast sponsorships,' 'brand ambassador,' 'ambassador program,' 'creator program,' 'UGC creators,' 'B2B influencers,' 'thought leader ads,' 'gifting,' 'product seeding,' 'whitelisting creator content,' 'how much to pay an influencer,' or 'FTC disclosure.' For affiliate/referral payout mechanics, see referrals. For community-led advocacy, see community-marketing. For turning creator content into paid ads, see ad-creative.
- ▌ Marketing Council · coreyhaines31 bundleSimulates a board of legendary marketing advisors to provide multiple expert perspectives on marketing questions, highlighting disagreements and synthesizing recommendations.
- ▌ Marketing Loops · coreyhaines31 bundleSet up recurring, self-running marketing workflows that an AI agent executes on a cadence—weekly, daily, or on trigger—to maintain and optimize marketing operations.
- ▌ Sms · coreyhaines31 bundlePlan and optimize SMS and MMS marketing programs, from welcome flows to promotions, while ensuring TCPA and carrier compliance.
- ▌ AI SEO · coreyhaines31 bundleOptimize content to get cited by AI search engines and rank in LLM-generated answers.
- ▌ Launch · coreyhaines31 bundlePlan and execute product launches and feature announcements that build momentum and convert interest into users.
- ▌ Offers · coreyhaines31 bundleDesign and sharpen offers to improve conversion rates by diagnosing and strengthening the core offer structure.
- ▌ Popups · coreyhaines31 bundleDesign and optimize popups, modals, and banners that convert visitors without damaging brand perception.
- ▌ Revops · coreyhaines31 bundleDesign and optimize revenue operations systems that connect marketing, sales, and customer success into a unified revenue engine.
- ▌ Schema · coreyhaines31 bundleImplement schema.org structured data markup to help search engines understand content and enable rich results in search.
- ▌ Signup · coreyhaines31 bundleOptimize signup, registration, and trial activation flows to increase conversion rates.
- ▌ Social · coreyhaines31 bundleCreate, schedule, and optimize social media content for LinkedIn, X, Instagram, TikTok, and Facebook with platform-specific strategies, content pillars, hooks, repurposing workflows, and engagement routines.
- ▌ Pricing · coreyhaines31 bundleDesign pricing, packaging, and monetization strategies that capture value and align with customer willingness to pay.
- ▌ Paywalls · coreyhaines31 bundleDesign and optimize in-app paywalls, upgrade screens, and upsell modals to convert free users to paid or upgrade to higher tiers.
- ▌ Analytics · coreyhaines31 bundleSet up, audit, and improve analytics tracking so marketing data is trustworthy.
- ▌ Referrals · coreyhaines31 bundleDesign referral and affiliate programs that drive word-of-mouth growth.
- ▌
- ▌ Ab Testing · coreyhaines31 bundlePlan, design, and analyze A/B tests and growth experiments, from hypothesis to statistically sound results.
- ▌ Cold Email · coreyhaines31 bundleWrite B2B cold emails and follow-up sequences that get replies, with guidance on personalization, structure, and voice.
- ▌ Free Tools · coreyhaines31 bundlePlan and build free tools that capture leads and drive top-of-funnel growth.
- ▌ Onboarding · coreyhaines31 bundleOptimize post-signup onboarding and activation to turn signups into active users.
- ▌ Ad Creative · coreyhaines31 bundleGenerate and iterate ad creative at scale, including headlines, hooks, and angles for paid campaigns across multiple platforms.
- ▌ Competitors · coreyhaines31 bundleCreate competitor comparison and alternative pages that win SEO traffic and sales.
- ▌ Copywriting · coreyhaines31 bundleWrite and improve high-converting marketing copy for landing pages, ads, and emails using proven frameworks and principles.
- ▌ Prospecting · coreyhaines31 bundleBuild qualified prospect lists for B2B SaaS, general B2B, or local small businesses by defining an ICP, sourcing candidates, qualifying with evidence, scoring, and outputting a lead sheet.
- ▌ Co Marketing · coreyhaines31 bundleIdentify co-marketing partners and plan joint campaigns that grow both audiences.
- ▌ Copy Editing · coreyhaines31 bundleEdit and refresh existing marketing copy through seven focused editing sweeps to improve clarity, voice, and conversion impact.
- ▌ Lead Magnets · coreyhaines31 bundlePlan and create lead magnets that capture emails, generate qualified leads, and drive product adoption.
- ▌ Marketing Plan · coreyhaines31 bundleProduces a comprehensive, executable 12-month marketing plan structured by AARRR, customized to budget, team, and stage, with cross-references to marketing ideas and current-state audit.
- ▌ Marketing Ideas · coreyhaines31 bundleGenerates tailored marketing ideas and growth strategies for SaaS products based on stage, budget, and goals.
- ▌ Churn Prevention · coreyhaines31 bundleReduce churn with cancellation flows, save offers, and win-back campaigns.
- ▌ Content Strategy · coreyhaines31 bundlePlan a content strategy that drives traffic, builds authority, and generates leads by creating searchable or shareable content.
- ▌ Programmatic SEO · coreyhaines31 bundleGenerate SEO-optimized pages at scale using templates and data to capture long-tail search traffic.
- ▌ Public Relations · coreyhaines31 bundleEarn press coverage and media mentions through PR outreach, newsjacking, and journalist pitching.
- ▌ Sales Enablement · coreyhaines31 bundleCreate sales collateral that reps actually use — decks, one-pagers, objection docs, demo scripts, and playbooks to help close deals.
- ▌ Customer Research · coreyhaines31 bundleConduct and synthesize customer research into actionable insights from interviews, surveys, reviews, and online communities.
- ▌ Product Marketing · coreyhaines31 bundleCreates and maintains a product marketing context document that captures positioning, messaging, and audience insights for consistent marketing execution.
- ▌ Site Architecture · coreyhaines31 bundlePlan website page hierarchy, navigation, URL patterns, and internal linking for improved SEO and user experience.
- ▌ Community Marketing · coreyhaines31 bundleDesign, launch, and grow online communities that drive business outcomes through member value and shared identity.
- ▌ Competitor Profiling · coreyhaines31 bundleResearch and profile competitors from their URLs into actionable intelligence.
- ▌ Marketing Psychology · coreyhaines31 bundleApply behavioral science and persuasion principles to make marketing more convincing.
- ▌ Directory Submissions · coreyhaines31 bundleSubmit products to startup, SaaS, and AI directories to build backlinks and drive discovery traffic.
- ▌ Ads · coreyhaines31 bundlePlan, create, optimize, and scale paid ad campaigns across Google Ads, Meta, LinkedIn, Twitter, and TikTok.
- ▌ Aso · coreyhaines31 bundleAudit and optimize App Store and Google Play listings to lift installs and conversion.
- ▌ Cro · coreyhaines31 bundleAnalyze landing pages and funnels to identify conversion barriers and deliver actionable, prioritized recommendations for improvement.
- ▌ Image · coreyhaines31 bundleCreate and optimize marketing images including blog heroes, social graphics, and ad visuals using AI generation and design tools.
- ▌ Video · coreyhaines31 bundleCreate marketing videos using AI generation models, AI avatars, and programmatic workflows.
- ▌ Emails · coreyhaines31 bundleDesign and optimize email sequences, drip campaigns, and lifecycle automations for marketing and product teams.