jeremylongshore

@jeremylongshore source repo

3.8k skills
0 followers
1 day ago last updated

▌
Auditing Python Dependencies · jeremylongshore bundle
| Audit a Python project's installed dependencies for known CVEs by wrapping pip-audit (PyPA's official vulnerability auditor) and emitting findings in the canonical penetration-tester schema. Detects vulnerable direct AND transitive packages, normalizes pip-audit's severity output via OSV severity bands, falls back to pip list --outdated when pip-audit isn't installed, and supports requirements.txt, pyproject.toml (PEP 621), Pipfile.lock, and poetry.lock as input sources. Use when: pre-merge gate on a Python project, post-incident sweep after a PyPI compromise (e.g. ctx, request-toolbelt typosquats, ultralytics 8.3.42 compromise), SOC2 evidence collection, or inheriting an unfamiliar Python codebase. Threshold: any HIGH or CRITICAL CVE in the resolved dependency tree. MODERATE / LOW reported informationally. Trigger with: "audit python deps", "pip vulnerability scan", "check pypi...

1 install
▌
Coreweave Gpu Node Forensics · jeremylongshore bundle
| Triage a dead or degraded GPU on a CoreWeave node fast — decide reschedule vs GPU-reset vs node-reboot vs RMA from an Xid code or a pasted dmesg / nvidia-smi blob, so a bad card does not silently kill a multi-day training run. Use when a GPU throws an Xid error, a node "fell off the bus", a training run stalls or NCCL hangs on one rank, or you need to know whether to replace, reset, or just reschedule. Trigger with "xid error", "gpu fell off the bus", "coreweave gpu dead", "should I RMA this GPU", "gpu node triage".

1 install
▌
Databricks Cluster Forensics · jeremylongshore bundle
| Diagnose broken or unexplained Databricks compute — slow cold starts, failed cluster launches, Photon paying its premium without the speedup, DBR-upgrade landmines, and spot-interruption shuffle aborts — by correlating a cluster's live event stream across API surfaces. Use when a Databricks cluster won't start, died mid-run, is randomly slow to start, when planning a Databricks Runtime upgrade, or when a job keeps failing on spot loss. Trigger with "databricks cluster won't start", "cluster failed", "why is my cluster slow", "NPIP_TUNNEL_SETUP_FAILURE", "databricks runtime upgrade", "photon not helping".

1 install
▌
Openevidence Security Basics · jeremylongshore bundle
'Security Basics for OpenEvidence. Trigger: "openevidence security basics". '

1 install
▌
Openrouter Compliance Review · jeremylongshore bundle
'Review OpenRouter integration for regulatory compliance (SOC2, GDPR, HIPAA). Use when preparing for audits, evaluating data handling, or documenting compliance posture. Triggers: ''openrouter compliance'', ''openrouter gdpr'', ''openrouter soc2'', ''openrouter data residency''. '

1 install
▌
Podium Multi Location Router · jeremylongshore bundle
Route Podium API calls across multiple physical locations with strict per-location credential isolation, pre-flight location-ID verification, an immutable audit trail of every write, idempotent bulk onboarding, and per-location rate-limit budgets that cannot starve each other. Use when running Podium for more than one physical store (an agency operator managing 50+ accounts, a multi-store SMB with 2+ locations, or a compliance team that needs to prove which location received which write). Trigger with "podium multi-location", "podium location router", "podium per-location", "podium location audit", "podium bulk onboarding", "podium location_uid verification".

1 install
▌
Recording Pentest Engagement · jeremylongshore bundle
| Package an engagement's findings, scan outputs, evidence, and signed ROE into a timestamped archive with a SHA-256 manifest covering every file. Establishes chain of custody so legal counsel, internal audit, or an outside SOC can verify the archive hasn't been modified after closeout. Optionally signs the manifest with GPG for cryptographic attestation. Use when: closing an engagement, snapshotting evidence after each scan day, before handing artifacts to customer, or after an emergency-stop event. Threshold: file in tree without a manifest entry, hash mismatch, out-of-tree path referenced in findings, unsigned manifest when signing was requested. Trigger with: "record engagement", "archive evidence", "create chain of custody", "package pentest artifacts".

1 install
▌
Detecting Command Injection Patterns · jeremylongshore bundle
| Scan a source tree for command-injection vulnerable patterns: shell=True calls in Python subprocess, os.system / os.popen with interpolated strings, Node child_process.exec with template literals, Ruby backticks / Kernel#system / Kernel#exec with interpolation, Go exec.Command with shell wrapping, PHP system / passthru / shell_exec / backticks with $-interpolation, Java Runtime.exec with concatenated args. Use when: pre-commit gate on code that calls out to shell utilities, audit of file-processing / archive-handling / image-conversion code, post-bug-report investigation for "we shell out to a tool." Threshold: any shell-invocation API called with a string that contains a variable interpolation, OR shell=True with anything other than a fixed literal. Trigger with: "scan command injection", "shell=True audit", "find exec calls", "check os.system".

1 install
▌
Openevidence Prod Checklist · jeremylongshore
'Prod Checklist for OpenEvidence. Trigger: "openevidence prod checklist". '

1 install
▌
Obsidian Project Documentation · jeremylongshore bundle
Document technical projects in Obsidian vault. Use when the User mentions "document this", "close out", "wrap up", "update notes", "track progress", "where are we at", or asks about project docs.

1 install
▌
Guidewire Webhooks Integrations · jeremylongshore bundle
Consume Guidewire App Events into downstream systems (SQS/SNS, Kafka, webhooks) and survive the event-side failures — events not firing because Gosu registration was missed, duplicates from queue redelivery, out-of-order arrival on the same resource, replay from a checkpoint for backfill, and back-pressure when consumers cannot keep up with producers. Use when registering App Events in Gosu, building an event-consumer service, or recovering from a missed-event window. Trigger with "guidewire app events", "guidewire webhooks", "guidewire event consumer", "guidewire event replay", "guidewire idempotent consumer".

1 install
▌
Notion Advanced Troubleshooting · jeremylongshore bundle
| Use when standard Notion troubleshooting fails or you are chasing intermittent API errors — deep debugging for response inspection, permission chain tracing, property type mismatches, pagination edge cases, and block nesting limits. Trigger with phrases like "notion deep debug", "notion permission trace", "notion property mismatch", "notion pagination bug", "notion nesting limit".

1 install
▌
Openevidence Deploy Integration · jeremylongshore bundle
'Deploy Integration for OpenEvidence. Trigger: "openevidence deploy integration". '

1 install
▌
Oraclecloud Prod Checklist · jeremylongshore bundle
"Pre-production readiness checklist for OCI \u2014 backup policies, security\ \ audit, key rotation, encryption, and Cloud Guard.\nUse when preparing an OCI environment\ \ for production workloads or auditing an existing deployment.\nTrigger with \"\ oraclecloud prod checklist\", \"oci production ready\", \"oci security audit\",\ \ \"oci well-architected\".\n"

1 install
▌
Schedule After Usage Reset · jeremylongshore
Schedule a task to run after the Claude usage limit resets. Use when the user says things like: schedule this after my usage resets, run this when my tokens refresh, queue this task for after the limit lifts, or any variation of wanting to defer a task until after a Claude usage/token limit reset. Finds the reset time from the Anthropic usage API and calls /schedule with that exact time. Trigger with phrases like \"schedule after my usage resets\" or \"run this when my limit lifts\".

1 install
▌
Salesforce Security Basics · jeremylongshore
'Apply Salesforce security best practices for Connected Apps, OAuth, and field-level security. Use when securing API credentials, implementing least privilege access, or auditing Salesforce security configuration. Trigger with phrases like "salesforce security", "salesforce secrets", "secure salesforce", "salesforce connected app security", "salesforce FLS". '

1 install
▌
Stackblitz Security Basics · jeremylongshore
'Secure WebContainer deployments: CSP headers, sandbox isolation, input validation. Use when working with WebContainers or StackBlitz SDK. Trigger: "stackblitz security". '

1 install
▌
Langchain Langgraph Subgraphs · jeremylongshore bundle
"Compose LangGraph 1.0 subgraphs correctly \u2014 shared state key propagation,\n\ Send / Command(graph=...) dispatch, callback scoping, per-subgraph recursion\nbudgets,\ \ and testing each subgraph in isolation. Use when building a planner +\nexecutor,\ \ a nested agent team, or a reusable subgraph library. Trigger with\n\"langgraph\ \ subgraph\", \"langgraph composition\", \"langgraph send\",\n\"nested agents\"\ , \"langgraph state propagation\", \"Command(graph=...)\",\n\"langgraph subgraph\ \ callbacks\".\n"

1 install
▌
Retellai Reliability Patterns · jeremylongshore bundle
"Retell AI reliability patterns \u2014 AI voice agent and phone call\ \ automation.\nUse when working with Retell AI for voice agents, phone calls, or\ \ telephony.\nTrigger with phrases like \"retell reliability patterns\", \"retellai-reliability-patterns\"\ , \"voice agent\".\n"

1 install
▌
Snowflake Advanced Troubleshooting · jeremylongshore
'Apply advanced Snowflake debugging with query profiling, spill analysis, lock contention, and performance deep-dives using ACCOUNT_USAGE views. Use when standard troubleshooting fails, investigating slow queries, or diagnosing warehouse performance issues. Trigger with phrases like "snowflake hard bug", "snowflake slow query debug", "snowflake query profile", "snowflake spilling", "snowflake deep debug". '

1 install
▌
Oraclecloud Reference Architecture · jeremylongshore bundle
'Standard 3-tier OCI reference architecture with VCN, subnets, gateways, load balancer, compute, and Autonomous DB. Use when designing a new OCI deployment, translating AWS/Azure patterns, or creating Terraform for OCI infrastructure. Trigger with "oraclecloud architecture", "oci reference design", "oci 3 tier", "oci vpc design". '

1 install
▌
Tracing Transitive Vulnerabilities · jeremylongshore bundle
| Build a dependency-tree map of a project (npm or Python) and trace the path from each known-vulnerable transitive package back to one or more direct dependencies. Identifies which direct-dep bump would clear the most findings at once (highest-leverage upgrade), which vulnerabilities are unreachable through any version bump and require overrides or vendor-patch, and which CVEs sit at deep transitive depth (3+ levels from a direct dep) where blast-radius triage is hardest. Use when: a multi-finding audit produces noise and you need to prioritize, when planning a major dependency refresh, after an upstream package compromise hits your tree (e.g. event-stream flatmap-stream), or when an audit shows findings that automated fix commands cannot auto-resolve. Threshold: any HIGH or CRITICAL CVE reachable only through transitive paths that no single direct-dep bump can clear. Trigger with:...

1 install
▌
Obsidian Deploy Integration · jeremylongshore bundle
'Publish Obsidian plugins to the community plugin directory. Use when releasing your first plugin, updating existing plugins, or managing the community plugin submission process. Trigger with phrases like "publish obsidian plugin", "obsidian community plugins", "submit obsidian plugin", "obsidian plugin directory". '

1 install
▌
Detecting Insecure Deserialization · jeremylongshore bundle
| Scan a source tree for unsafe-by-default deserialization APIs: Python pickle.loads / cPickle / shelve / dill, Ruby Marshal.load / YAML.load (pre-3.1 default), Java ObjectInputStream.readObject, PHP unserialize, .NET BinaryFormatter / NetDataContractSerializer, Node.js node-serialize, JavaScript JSON.parse with reviver containing eval. Use when: pre-commit gate on services that accept binary blobs, audit of legacy job-queue code (workers deserializing tasks), post-bug-report when "we accept user-uploaded archives." Threshold: any call to a known-unsafe deserialization API on data that originates from user input, network, file upload, or untrusted storage. Trigger with: "scan deserialization", "pickle audit", "java readObject scan", "yaml.load check".

1 install
▌
Firecrawl Reliability Patterns · jeremylongshore
'Implement Firecrawl reliability patterns: circuit breakers, crawl fallbacks, and content validation. Use when building fault-tolerant scraping pipelines, implementing crawl-to-scrape fallback, or adding content quality gates to Firecrawl integrations. Trigger with phrases like "firecrawl reliability", "firecrawl circuit breaker", "firecrawl fallback", "firecrawl resilience", "firecrawl fault tolerant". '

1 install
▌
Oraclecloud Deploy Integration · jeremylongshore bundle
'Deploy containers to OCI using OKE (Kubernetes) or Container Instances. Use when deploying applications to Oracle Cloud, pushing images to OCIR, or configuring OKE clusters. Trigger with "oraclecloud deploy", "oci kubernetes", "oke deploy", "oci container instances", "oracle cloud deploy integration". '

1 install
▌
Fireflies Core Workflow A · jeremylongshore
'Retrieve and process Fireflies.ai meeting transcripts with speaker diarization and summaries. Use when fetching transcripts, extracting action items, or building meeting intelligence pipelines. Trigger with phrases like "fireflies transcript", "get meeting notes", "fireflies meeting data", "fetch fireflies recording". '

1 install
▌
Lucidchart Prod Checklist · jeremylongshore
'Prod Checklist for Lucidchart. Trigger: "lucidchart prod checklist". '

1 install
▌
Mindtickle Prod Checklist · jeremylongshore
'Prod Checklist for MindTickle. Trigger: "mindtickle prod checklist". '

1 install
▌
Openrouter Prod Checklist · jeremylongshore bundle
'Validate production readiness of your OpenRouter integration. Use before launching to production or during operational reviews. Triggers: ''openrouter production'', ''openrouter launch'', ''production checklist openrouter'', ''openrouter deploy''. '

1 install
▌
Perplexity Prod Checklist · jeremylongshore
'Execute Perplexity production deployment checklist for Sonar API integrations. Use when deploying Perplexity integrations to production, preparing for launch, or implementing go-live procedures. Trigger with phrases like "perplexity production", "deploy perplexity", "perplexity go-live", "perplexity launch checklist". '

1 install
▌
Salesforce Prod Checklist · jeremylongshore
'Execute Salesforce production deployment checklist with sandbox testing and rollback. Use when deploying Salesforce integrations to production, preparing for launch, or implementing go-live procedures. Trigger with phrases like "salesforce production", "deploy salesforce", "salesforce go-live", "salesforce launch checklist", "salesforce sandbox to prod". '

1 install
▌
Stackblitz Prod Checklist · jeremylongshore
'Production checklist for WebContainer apps: headers, browser support, fallbacks. Use when working with WebContainers or StackBlitz SDK. Trigger: "stackblitz production". '

1 install
▌
Windsurf Flows Automation · jeremylongshore bundle
'Create and manage Windsurf Flows for repetitive tasks. Activate when users mention "windsurf flows", "task automation", "workflow automation", "repetitive tasks", or "process automation". Handles Flow creation and management. Use when working with windsurf flows automation functionality. Trigger with phrases like "windsurf flows automation", "windsurf automation", "windsurf". '

1 install
▌
Checking License Compliance · jeremylongshore bundle
| Audit a project's dependency licenses against an explicit policy (allow-list / deny-list / review-required) and flag incompatibilities before they ship to production. Reads SPDX license identifiers from npm package manifests, Python METADATA / PKG-INFO files, and pyproject.toml; classifies each license by family (permissive, weak-copyleft, strong-copyleft, proprietary, unknown); detects copyleft contamination and SPDX-incompatible license combinations. Use when: pre-release legal review, M&A code-audit due diligence, preparing an OSS attribution NOTICE file, or switching a project's own license. Threshold: any GPL-family license in a project declaring MIT or Apache-2.0; any UNKNOWN-license package; any metadata-vs-source license mismatch. Trigger with: "check licenses", "license compliance audit", "SPDX scan", "GPL contamination check".

1 install
▌
Detecting Directory Listing · jeremylongshore bundle
| Probe a target for directories that return auto-generated index listings instead of denying or serving a specific file — exposes the full file tree under any reachable directory, including files the application never linked to. Use when: post-deploy verification on a static-asset host, security audit before SOC2, or following up on a finding from skill #6 (exposed-files) where a backup-file path returned 200 with HTML body instead of the expected file content (suggests autoindex serving a directory listing). Threshold: any directory-shaped path returns 200 with HTML body matching the framework-specific autoindex fingerprint (nginx fancyindex, Apache mod_autoindex Index of/, Caddy browse, Lighttpd mod_dirlisting, etc.). Trigger with: "directory listing check", "autoindex detection", "open directory scan".

1 install
▌
Detecting Weak Cryptography · jeremylongshore bundle
| Scan a source tree for weak cryptographic primitives: MD5 / SHA-1 used for security purposes, DES / 3DES / RC4 ciphers, ECB block mode, custom-built crypto (XOR loops, hand-rolled HMAC), hardcoded IVs, predictable random (Math.random / java.util.Random for crypto seeds), missing certificate verification (verify=False, rejectUnauthorized: false). Use when: pre-merge gate on crypto-touching code, audit before SOC2 / PCI assessment, post-incident review when "we found a weakness in our token signing." Threshold: any call to a known-weak algorithm with non-test context, OR cert verification explicitly disabled, OR a custom crypto loop pattern. Trigger with: "scan weak crypto", "find MD5 usage", "check ECB mode", "audit ssl verify", "weak random".

1 install
▌
Guidewire Security And Rbac · jeremylongshore bundle
Lock down a Guidewire Cloud API integration so it survives a SOC 2 audit, an NAIC Model Audit Rule review, and a real-world incident — least-privilege role design, encrypted committed secrets via SOPS+age, PII redaction in logs (SSN/DOB/claim narrative), audit-trail capture, cross-tenant isolation for multi-carrier integrations, and detect-and-rotate response to token leaks. Use when designing the security posture for a new integration, hardening an existing one before audit, or responding to a leaked credential. Trigger with "guidewire security", "guidewire rbac", "guidewire pii redaction", "guidewire audit trail", "guidewire secret leak".

1 install
▌
Hubspot Agency Multi Portal · jeremylongshore bundle
| Manage 10-100 HubSpot portals for agency clients with credential isolation that prevents cross-portal data contamination, per-portal audit trails for billing and GDPR/CCPA attribution, and a scriptable bulk-onboarding workflow that eliminates one-at-a-time credential setup. Use when onboarding new client portals, building a compliant per-client API call log, rotating tokens across a full agency fleet, or generating per-client compliance reports. Trigger with "hubspot agency", "multi-portal management", "hubspot credential isolation", "per-portal audit log", "hubspot compliance report", "bulk portal onboarding", "token rotation cascade", "hubspot client portals".

1 install
▌
Oraclecloud Security Basics · jeremylongshore bundle
'Master OCI IAM policy syntax, common policy patterns, and API key management. Use when writing IAM policies, granting access to compartments, or managing API keys. Trigger with "oraclecloud security basics", "oci iam policy", "oci policy syntax", "oci api key setup". '

1 install
▌
Oraclecloud Webhooks Events · jeremylongshore bundle
'Wire up event-driven workflows with OCI Events, Notifications, and Functions. Use when building serverless event processing, subscribing to instance lifecycle changes, or routing audit events to alerting systems. Trigger with "oraclecloud webhooks events", "oci events rules", "oci notifications", "oci ons topics". '

1 install
▌
Supabase Auth Storage Realtime Core · jeremylongshore bundle
'Implement Supabase Auth (signUp, signIn, OAuth, session management), Storage (upload, download, signed URLs, bucket policies), and Realtime (Postgres changes, broadcast, presence). Use when building user auth flows, file upload features, or live-updating UIs with Supabase. Trigger with phrases like "supabase auth", "supabase storage upload", "supabase realtime subscribe", "supabase oauth", "supabase file upload", "supabase presence", "supabase rls storage". '

1 install
▌
Openevidence Reference Architecture · jeremylongshore bundle
'Reference Architecture for OpenEvidence. Trigger: "openevidence reference architecture". '

1 install
▌
Perplexity Advanced Troubleshooting · jeremylongshore
'Apply advanced debugging techniques for hard-to-diagnose Perplexity Sonar API issues. Use when standard troubleshooting fails, investigating inconsistent citations, or preparing evidence for support escalation. Trigger with phrases like "perplexity hard bug", "perplexity mystery error", "perplexity inconsistent results", "difficult perplexity issue", "perplexity deep debug". '

1 install
▌
Salesforce Advanced Troubleshooting · jeremylongshore
'Apply Salesforce advanced debugging with debug logs, SOQL query plans, and EventLogFile analysis. Use when standard troubleshooting fails, investigating SOQL performance issues, or analyzing Apex governor limit violations. Trigger with phrases like "salesforce hard bug", "salesforce debug log", "salesforce governor limit", "salesforce query plan", "salesforce deep debug", "SOQL slow". '

1 install
▌
Lucidchart Deploy Integration · jeremylongshore
'Deploy Integration for Lucidchart. Trigger: "lucidchart deploy integration". '

1 install
▌
Mindtickle Deploy Integration · jeremylongshore
'Deploy Integration for MindTickle. Trigger: "mindtickle deploy integration". '

1 install
▌
Perplexity Deploy Integration · jeremylongshore
'Deploy Perplexity Sonar API integrations to Vercel, Cloud Run, and Docker. Use when deploying Perplexity-powered applications to production, configuring platform-specific secrets, or setting up edge functions. Trigger with phrases like "deploy perplexity", "perplexity Vercel", "perplexity production deploy", "perplexity Cloud Run", "perplexity Docker". '

1 install
▌
Salesforce Deploy Integration · jeremylongshore
'Deploy Salesforce-connected applications to Heroku, Vercel, and Cloud Run with proper credential management. Use when deploying Salesforce-powered applications to production, configuring platform-specific secrets, or setting up Heroku Connect. Trigger with phrases like "deploy salesforce app", "salesforce Heroku", "salesforce production deploy", "salesforce Cloud Run", "Heroku Connect". '

1 install
▌
Stackblitz Deploy Integration · jeremylongshore
'Deploy WebContainer apps to Vercel, Netlify with proper COOP/COEP headers. Use when working with WebContainers or StackBlitz SDK. Trigger: "deploy stackblitz". '

1 install
▌
Fireflies Prod Checklist · jeremylongshore
'Execute Fireflies.ai production deployment checklist with health checks and rollback. Use when deploying Fireflies.ai integrations to production, preparing for launch, or implementing go-live procedures. Trigger with phrases like "fireflies production", "deploy fireflies", "fireflies go-live", "fireflies launch checklist". '

1 install
▌
Grammarly Prod Checklist · jeremylongshore
'Production readiness checklist for Grammarly API integrations. Use when preparing a Grammarly integration for production deployment. '

1 install
▌
Hootsuite Prod Checklist · jeremylongshore
'Execute Hootsuite production deployment checklist and rollback procedures. Use when deploying Hootsuite integrations to production, preparing for launch, or implementing go-live procedures. Trigger with phrases like "hootsuite production", "deploy hootsuite", "hootsuite go-live", "hootsuite launch checklist". '

1 install
▌
Instantly Prod Checklist · jeremylongshore
'Execute Instantly.ai production launch checklist and pre-flight validation. Use when deploying Instantly integrations to production, launching first campaign, or auditing production readiness. Trigger with phrases like "instantly production", "instantly launch checklist", "instantly go-live", "instantly pre-flight", "instantly prod ready". '

1 install
▌
Intercom Core Workflow B · jeremylongshore bundle
'Manage Intercom conversations: create, reply, close, snooze, assign, and tag. Use when building conversation management features, automating replies, or implementing support workflow automation. Trigger with phrases like "intercom conversations", "intercom reply", "intercom assign conversation", "intercom close conversation", "intercom snooze", "manage intercom conversations". '

1 install
▌
Maintainx Prod Checklist · jeremylongshore bundle
'Production deployment checklist for MaintainX integrations. Use when preparing to deploy a MaintainX integration to production, verifying production readiness, or auditing existing deployments. Trigger with phrases like "maintainx production", "deploy maintainx", "maintainx go-live", "maintainx production checklist", "maintainx launch". '

1 install
▌
Quicknode Prod Checklist · jeremylongshore
"QuickNode prod checklist \u2014 blockchain RPC and Web3 infrastructure\ \ integration.\nUse when working with QuickNode for blockchain development.\nTrigger\ \ with phrases like \"quicknode prod checklist\", \"quicknode-prod-checklist\",\ \ \"blockchain RPC\".\n"

1 install
▌
Remofirst Prod Checklist · jeremylongshore
"RemoFirst prod checklist \u2014 global HR, EOR, and payroll platform\ \ integration.\nUse when working with RemoFirst for global employment, payroll,\ \ or compliance.\nTrigger with phrases like \"remofirst prod checklist\", \"remofirst-prod-checklist\"\ , \"global HR API\".\n"

1 install
▌
Salesloft Prod Checklist · jeremylongshore
'Production readiness checklist for SalesLoft API integrations. Use when deploying SalesLoft integrations to production, preparing for launch, or validating go-live requirements. Trigger: "salesloft production", "deploy salesloft", "salesloft go-live checklist". '

1 install
▌
Techsmith Prod Checklist · jeremylongshore
'TechSmith prod checklist for Snagit COM API and Camtasia automation. Use when working with TechSmith screen capture and video editing automation. Trigger: "techsmith prod checklist". '

1 install
▌
Twinmind Webhooks Events · jeremylongshore bundle
'Handle TwinMind meeting events including transcription completion, action item extraction, and calendar sync notifications. Use when implementing webhooks events, or managing TwinMind meeting AI operations. Trigger with phrases like "twinmind webhooks events", "twinmind webhooks events". '

1 install
▌
Windsurf Usage Analytics · jeremylongshore bundle
'Analyze team AI usage patterns and productivity metrics. Activate when users mention "usage analytics", "ai metrics", "productivity tracking", "usage reports", or "roi analysis". Handles analytics and reporting configuration. Use when working with windsurf usage analytics functionality. Trigger with phrases like "windsurf usage analytics", "windsurf analytics", "windsurf". '

1 install
▌
Workhuman Prod Checklist · jeremylongshore
'Workhuman prod checklist for employee recognition and rewards API. Use when integrating Workhuman Social Recognition, or building recognition workflows with HRIS systems. Trigger: "workhuman prod checklist". '

1 install
▌
Openevidence Core Workflow A · jeremylongshore
'Execute OpenEvidence primary workflow: Clinical Query & Decision Support. Trigger: "openevidence clinical query & decision support", "primary openevidence workflow". '

1 install
▌
Openevidence Core Workflow B · jeremylongshore
'Execute OpenEvidence secondary workflow: DeepConsult Research Synthesis. Trigger: "openevidence deepconsult research synthesis", "secondary openevidence workflow". '

1 install
▌
Lucidchart Security Basics · jeremylongshore
'Security Basics for Lucidchart. Trigger: "lucidchart security basics". '

1 install
▌
Mindtickle Security Basics · jeremylongshore
'Security Basics for MindTickle. Trigger: "mindtickle security basics". '

1 install
▌
Perplexity Security Basics · jeremylongshore
'Apply Perplexity security best practices for API key management and query safety. Use when securing API keys, implementing query sanitization, or auditing Perplexity security configuration. Trigger with phrases like "perplexity security", "perplexity secrets", "secure perplexity", "perplexity API key security", "perplexity PII". '

1 install
▌
Salesforce Multi Env Setup · jeremylongshore
'Configure Salesforce across Developer, Sandbox, and Production environments with proper org management. Use when setting up multi-environment deployments, configuring per-environment credentials, or implementing sandbox-to-production promotion flows. Trigger with phrases like "salesforce environments", "salesforce sandbox", "salesforce dev prod", "salesforce org management", "salesforce sandbox types". '

1 install
▌
Auditing NPM Dependencies · jeremylongshore bundle
| Audit a Node.js project's installed npm dependency tree for known CVEs by wrapping the npm audit JSON output and emitting findings in the canonical penetration-tester schema. Detects direct AND transitive vulnerabilities, normalizes npm's severity scale (info/low/moderate/ high/critical) to the shared Severity enum, and parses both v1 and v2 audit output formats so the skill works against npm 6 and npm 7+ lockfiles. Use when: pre-merge gate on a Node project, post-incident sweep after a transitive package compromise (e.g. event-stream, ua-parser, node-ipc, color.js), SOC2 vendor-management evidence collection, or auditing an inherited or acquired Node codebase. Threshold: any HIGH or CRITICAL CVE in the resolved dependency tree. MODERATE / LOW reported informationally. Trigger with: "audit npm deps", "npm vulnerability scan", "check node packages for CVEs", "npm audit".

1 install
▌
Csrf Protection Validator · jeremylongshore
'Validate csrf protection validator operations. Auto-activating skill for Security Fundamentals. Triggers on: csrf protection validator, csrf protection validator Part of the Security Fundamentals skill category. Use when working with csrf protection validator functionality. Trigger with phrases like "csrf protection validator", "csrf validator", "csrf". '

1 install
▌
Detecting Ssl Cert Issues · jeremylongshore bundle
| Audit a target's TLS certificate beyond protocol/expiry — chain ordering, OCSP stapling, revocation status, Certificate Transparency presence, key-usage flags, and over-broad wildcards. Use when: TLS handshake already passes (skill #1 analyzing-tls-config cleared) but you suspect the cert posture is fragile. Auditors flag this during SOC2 readiness when a renewal slipped or an intermediate was rotated. Threshold: missing OCSP stapling on production, fewer than 2 SCTs in the cert, intermediate served out of order, key usage missing digitalSignature/keyEncipherment, revoked cert presented, or wildcard scope of 2-level (e.g., *.com is rejection; *.api.example.com is fine). Trigger with: "check cert revocation", "audit ocsp", "ct log check", "cert chain audit".

1 install
▌
Firecrawl Security Basics · jeremylongshore
'Apply Firecrawl security best practices for API key management and webhook verification. Use when securing API keys, implementing webhook signature validation, or auditing Firecrawl security configuration. Trigger with phrases like "firecrawl security", "firecrawl secrets", "secure firecrawl", "firecrawl API key security", "firecrawl webhook signature". '

1 install
▌
Fireflies Enterprise Rbac · jeremylongshore
'Configure Fireflies.ai workspace roles, channels, privacy controls, and meeting sharing. Use when managing team access, setting up channels, or configuring transcript visibility and sharing rules. Trigger with phrases like "fireflies roles", "fireflies permissions", "fireflies channels", "fireflies privacy", "fireflies sharing", "fireflies RBAC". '

1 install
▌
Fireflies Multi Env Setup · jeremylongshore
'Configure Fireflies.ai across dev, staging, and production with isolated API keys. Use when setting up multi-environment deployments, managing per-env secrets, or implementing environment-specific Fireflies configurations. Trigger with phrases like "fireflies environments", "fireflies staging", "fireflies dev prod", "fireflies environment setup", "fireflies config by env". '

1 install
▌
Fireflies Security Basics · jeremylongshore
'Apply Fireflies.ai security best practices for API keys and webhook verification. Use when securing API keys, verifying webhook signatures, or auditing Fireflies.ai security configuration. Trigger with phrases like "fireflies security", "fireflies secrets", "secure fireflies", "fireflies webhook signature", "fireflies HMAC". '

1 install
▌
Grammarly Security Basics · jeremylongshore
'Security fundamentals for Grammarly API credential management. Use when setting up secure authentication and token handling for Grammarly integrations. '

1 install
▌
Guidewire Core Workflow B · jeremylongshore bundle
Automate the ClaimCenter FNOL→investigation→reserve→payment→settlement→close pipeline including the failure paths — duplicate FNOL from multi-source intake, reserve-must-precede-payment ordering, supervisor-authorization tiers, premature settlement, and reopen-vs-new-claim ambiguity. Use when building claim intake from caller portals, IVR, or partner systems; automating reserve-setting jobs; or integrating settlement events with finance. Trigger with "claimcenter automation", "FNOL", "claim reserve", "claim payment", "claim settlement", "claim reopen".

1 install
▌
Hootsuite Security Basics · jeremylongshore
'Apply Hootsuite security best practices for secrets and access control. Use when securing API keys, implementing least privilege access, or auditing Hootsuite security configuration. Trigger with phrases like "hootsuite security", "hootsuite secrets", "secure hootsuite", "hootsuite API key security". '

1 install
▌
Instantly Security Basics · jeremylongshore
'Apply Instantly.ai security best practices for API keys, scopes, and access control. Use when securing API keys, implementing least-privilege access, or auditing Instantly workspace permissions. Trigger with phrases like "instantly security", "instantly api key safety", "instantly least privilege", "secure instantly", "instantly access control". '

0 installs
▌
Klingai Compliance Review · jeremylongshore bundle
'Security and compliance review framework for Kling AI integrations. Use when preparing for audits or reviewing security posture. Trigger with phrases like ''klingai compliance'', ''kling ai security review'', ''klingai audit prep'', ''video generation compliance''. '

1 install
▌
Langchain Enterprise Rbac · jeremylongshore bundle
"Enforce tenant isolation and role-based access across LangChain 1.0\ \ chains and\nLangGraph 1.0 agents \u2014 per-request retriever construction, tenant-scoped\ \ rate\nlimits, role-scoped tool allowlists, and structured audit logs. Use when\n\ building multi-tenant saas, passing soc2 review, or debugging cross-tenant\nleak.\ \ Trigger with \"langchain multi-tenant\", \"langchain tenant isolation\",\n\"langchain\ \ rbac\", \"langchain row-level security\", \"langchain audit log\".\n"

1 install
▌
Langchain Security Basics · jeremylongshore bundle
"Harden a LangChain 1.0 chain or LangGraph agent against prompt injection,\ \ tool\nabuse, PII leakage in traces, and secrets exfiltration \u2014 wrap user\ \ content in\nXML tags, enforce the tool allowlist via provider-native tool calling,\ \ redact\nPII in middleware upstream of cache and tracing, validate outputs with\ \ Pydantic,\nand lock down secrets behind a secret manager. Use when prepping for\ \ a security\nreview, responding to an incident, building a multi-tenant SaaS, or\ \ writing a\nthreat model.\nTrigger with \"langchain security\", \"prompt injection\ \ defense\",\n\"langchain tool allowlist\", \"langchain PII redaction\",\n\"langchain\ \ secrets management\".\n"

1 install
▌
Maintainx Security Basics · jeremylongshore bundle
'Configure MaintainX API security, credential management, and access control. Use when securing API keys, implementing access controls, or hardening your MaintainX integration. Trigger with phrases like "maintainx security", "maintainx api key security", "secure maintainx", "maintainx credentials", "maintainx access control". '

1 install
▌
Openevidence Install Auth · jeremylongshore
'Install and configure OpenEvidence SDK/API authentication. Use when setting up a new OpenEvidence integration. Trigger: "install openevidence", "setup openevidence", "openevidence auth". '

1 install
▌
Quicknode Security Basics · jeremylongshore
"QuickNode security basics \u2014 blockchain RPC and Web3 infrastructure\ \ integration.\nUse when working with QuickNode for blockchain development.\nTrigger\ \ with phrases like \"quicknode security basics\", \"quicknode-security-basics\"\ , \"blockchain RPC\".\n"

1 install
▌
Remofirst Core Workflow A · jeremylongshore
"RemoFirst core workflow a \u2014 global HR, EOR, and payroll platform\ \ integration.\nUse when working with RemoFirst for global employment, payroll,\ \ or compliance.\nTrigger with phrases like \"remofirst core workflow a\", \"remofirst-core-workflow-a\"\ , \"global HR API\".\n"

1 install
▌
Remofirst Core Workflow B · jeremylongshore
"RemoFirst core workflow b \u2014 global HR, EOR, and payroll platform\ \ integration.\nUse when working with RemoFirst for global employment, payroll,\ \ or compliance.\nTrigger with phrases like \"remofirst core workflow b\", \"remofirst-core-workflow-b\"\ , \"global HR API\".\n"

1 install
▌
Remofirst Security Basics · jeremylongshore
"RemoFirst security basics \u2014 global HR, EOR, and payroll platform\ \ integration.\nUse when working with RemoFirst for global employment, payroll,\ \ or compliance.\nTrigger with phrases like \"remofirst security basics\", \"remofirst-security-basics\"\ , \"global HR API\".\n"

1 install
▌
Salesloft Security Basics · jeremylongshore
'Secure SalesLoft OAuth tokens, API keys, and webhook signatures. Use when implementing token rotation, securing webhook endpoints, or auditing SalesLoft API access controls. Trigger: "salesloft security", "salesloft secrets", "secure salesloft", "salesloft token rotation". '

1 install
▌
Snowflake Security Basics · jeremylongshore
'Apply Snowflake security best practices: network policies, key rotation, MFA, encryption, and least-privilege access. Use when securing Snowflake access, implementing network policies, or auditing security configuration. Trigger with phrases like "snowflake security", "snowflake network policy", "secure snowflake", "snowflake MFA", "snowflake encryption". '

1 install
▌
Techsmith Security Basics · jeremylongshore
'TechSmith security basics for Snagit COM API and Camtasia automation. Use when working with TechSmith screen capture and video editing automation. Trigger: "techsmith security basics". '

1 install
▌
Workhuman Security Basics · jeremylongshore
'Workhuman security basics for employee recognition and rewards API. Use when integrating Workhuman Social Recognition, or building recognition workflows with HRIS systems. Trigger: "workhuman security basics". '

1 install
▌
Xss Vulnerability Scanner · jeremylongshore
'Scan xss vulnerability scanner operations. Auto-activating skill for Security Fundamentals. Triggers on: xss vulnerability scanner, xss vulnerability scanner Part of the Security Fundamentals skill category. Use when working with xss vulnerability scanner functionality. Trigger with phrases like "xss vulnerability scanner", "xss scanner", "xss". '

0 installs
▌
Supabase Advanced Troubleshooting · jeremylongshore bundle
| Deep Supabase diagnostics: pg_stat_statements for slow queries, lock debugging with pg_locks, connection leak detection, RLS policy conflicts, Edge Function cold starts, and Realtime connection drop analysis. Use when standard troubleshooting fails, when investigating performance regressions, when debugging race conditions, or when building evidence for a Supabase support escalation. Trigger with "supabase deep debug", "supabase slow query", "supabase lock contention", "supabase connection leak", "supabase RLS conflict", "supabase cold start".

1 install
▌
Supabase Schema From Requirements · jeremylongshore bundle
'Design Supabase Postgres schema from business requirements with migrations, RLS, and types. Use when translating specifications into database tables, creating migration files, adding Row Level Security policies, or generating TypeScript types from schema. Trigger with phrases like "supabase schema", "design database supabase", "schema from requirements", "supabase migration", "supabase tables from spec". '

1 install
▌
Langchain Langgraph Checkpointing · jeremylongshore bundle
"Persist LangGraph agent state correctly with MemorySaver and PostgresSaver\ \ \u2014\nthread_id discipline, JSON-serializable state rules, time-travel, schema\n\ migration. Use when adding chat memory, migrating from ConversationBufferMemory,\n\ or time-traveling an agent state to debug an incident.\nTrigger with \"langgraph\ \ checkpointer\", \"MemorySaver\", \"PostgresSaver\",\n\"thread_id\", \"langgraph\ \ time travel\", \"langgraph state persistence\".\n"

1 install
▌
Lucidchart Reference Architecture · jeremylongshore
'Reference Architecture for Lucidchart. Trigger: "lucidchart reference architecture". '

1 install
▌
Mindtickle Reference Architecture · jeremylongshore
'Reference Architecture for MindTickle. Trigger: "mindtickle reference architecture". '

1 install
▌
Openrouter Reference Architecture · jeremylongshore bundle
'Design production architectures using OpenRouter as the LLM gateway. Use when planning system design, reviewing architecture, or scaling AI applications. Triggers: ''openrouter architecture'', ''openrouter system design'', ''openrouter at scale'', ''llm gateway architecture''. '

0 installs

3825 published skills · page 3 of 39