← all publishers

diegocconsolini

@diegocconsolini source repo

Report this profile Claim this profile

• 12 skills
• 0 followers
• 1 week ago last updated

1. ▌
   Security Report Builder · diegocconsolini bundle

   Use this skill to build professional security reports (HTML, PDF, DOCX) from plugin-security-checker scan results. Reduces false positives through context-aware analysis and maps findings to MITRE ATT&CK/ATLAS, OWASP, and CWE. Use when turning raw scan output into executive-ready, technical, or compliance reports.
   1 install
2. ▌
   Batch Security Migration · diegocconsolini bundle

   Use when applying the same security fix across many files or repos at once — large-scale vulnerability remediation. Provides 7 copy-paste /batch recipes (XSS, HTTPS, SQLi, input validation, log PII, secret rotation, CVE patches) each with a safety tier and false-positive trap, plus scan_diff.py to prove the migration introduced no new HIGH/CRITICAL findings.
   1 install
3. ▌
   Chrome Devtools Optimizer · diegocconsolini bundle

   Use this skill to reduce token consumption by 70-80% when using the Chrome DevTools MCP. Applies a snapshot-first strategy (text over images) with decision trees and pattern guides for navigation, forms, debugging, and visual checks, plus optional Gemini Flash vision processing for the cases that genuinely need an image.
   3 installs
4. ▌
   Security Memory Templates · diegocconsolini bundle

   Use this skill to seed Claude Code's auto-memory with pre-built security/compliance patterns — known-safe code patterns, false-positive suppressions for the plugin-security-checker, org compliance rules, and supply-chain best practices. Helps Claude apply consistent security judgment across sessions.
   1 install
5. ▌
   Incident Response Playbook Creator · diegocconsolini bundle

   Use this skill to generate comprehensive incident response playbooks from authoritative templates (NIST SP 800-61r3, CISA, NIST SP 800-161r1). Creates customized IR documentation for 11 incident scenarios — ransomware, data breach, phishing, supply-chain, cloud, API, container/K8s, IoT/OT, insider threat, AI/ML, and DDoS — with GDPR Article 33/34 and HIPAA breach-notification guidance.
   1 install
6. ▌
   Claude Guide · diegocconsolini bundle

   Navigate Claude Code documentation and get quick answers about configuration, MCP, plugins, and best practices.
   1 install
7. ▌
   Sbom · diegocconsolini bundle

   Generate standards-compliant SBOMs (CycloneDX 1.6 + SPDX 2.3) for a project across stacks (npm, Python, Go, Rust, Java, containers), with optional quality scoring, vulnerability scan, VEX, and signing. Adds zero dependencies to the target project. Use when the user asks for a software bill of materials, dependency inventory, supply-chain manifest, or CycloneDX/SPDX output.
   1 install
8. ▌
   Security Hooks · diegocconsolini bundle

   Use this skill to install ready-made Claude Code hooks for security — a ConfigChange compliance audit trail (logs every settings/skill change), plus PreToolUse guards and optional HTTP notifications for security-relevant events. Covers command, http, and prompt hook types.
   1 install
9. ▌
   PDF Smart Extractor · diegocconsolini bundle

   Use this skill to extract and analyze large PDFs (3MB-10MB+) with minimal token usage. Preserves ~100% of content while achieving 12-103x token reduction through local extraction, semantic chunking, and intelligent caching. Use when a PDF is too large for the context window, or for technical/compliance documentation (NIST, ISO, AWS) and research papers.
   1 install
10. ▌
    DOCX Smart Extractor · diegocconsolini bundle

    Use this skill to extract and analyze large Word documents (1MB-50MB+) with minimal token usage. Losslessly extracts text, tables, formatting, and structure while achieving 10-50x token reduction through local extraction, semantic chunking by headings, and intelligent caching. Use when a .docx is too large for the context window (policies, contracts, technical reports).
    1 install
11. ▌
    XLSX Smart Extractor · diegocconsolini bundle

    Use this skill to extract and analyze large Excel workbooks (1MB-50MB+) with minimal token usage. Losslessly extracts formulas, cell formatting, and complex tables while achieving 20-100x token reduction through local extraction, semantic chunking, and intelligent caching. Use when an .xlsx is too large for the context window (compliance matrices, financial models, audit logs).
    1 install
12. ▌
    Plugin Security Checker · diegocconsolini bundle

    Use this skill to scan a Claude Code plugin (or any npm/PyPI package tree) for security issues before installation. Detects dangerous functions, code obfuscation, hardcoded credentials, schema problems, and known 2024-2026 supply-chain attack IOCs (Shai-Hulud, Nx s1ngularity, chalk/debug clipper, Axios RAT, litellm/.pth), mapped to MITRE ATT&CK/ATLAS, CVE, and OWASP.
    2 installs