← all publishers

majiayu000

@majiayu000 source repo

Report this profile Claim this profile

• 75k skills
• 0 followers
• 567 repo stars
• 3 weeks ago last updated

1. ▌
   Code Conventions · majiayu000 bundle

   Defines project-wide code conventions for magic number elimination, constant usage, performance optimization, and coordinate system separation. Use when implementing, testing, or reviewing code to ensure consistency across the codebase.
   567 repo stars
2. ▌
   Code Review Repo · majiayu000 bundle

   Review local codebase for bugs and CLAUDE.md compliance using multi-agent analysis
   567 repo stars
3. ▌
   Code Simplifying · majiayu000 bundle

   Simplify and refine code for clarity, consistency, and maintainability. Use when asked to simplify code, reduce complexity, remove duplication, improve readability, refactor for clarity, or clean up messy code. Triggers on requests like "simplify this", "clean up this code", "make this more readable", "reduce complexity", or "refactor for clarity".
   567 repo stars
4. ▌
   Codebase Quality · majiayu000 bundle

   Codebase quality orchestration for maintaining high-quality, secure, well-documented code. Use when completing features, running quality audits, checking security, updating documentation, or before merging PRs. Triggers on quality check, code review, security scan, documentation update, codebase audit, pre-merge check, bd close, feature complete. Sub-skills available via Skill("codebase-quality", args="security|code-quality|documentation|post-push|full-audit").
   567 repo stars
5. ▌
   Critical Partner · majiayu000 bundle

   Rigorous, constructive, and analytical partner for code generation, review, and improvement. Provides counterarguments, identifies issues, ensures best practices. Trigger: When validating code quality, reviewing implementations, or providing critical feedback before finalizing changes.
   567 repo stars
6. ▌
   Dev Audio Review · majiayu000 bundle

   Code quality, correctness, and documentation review for audio lessons — run before dev-final-pass
   567 repo stars
7. ▌
   Dev Buddy Review · majiayu000 bundle

   Review a plan or implementation. Dispatches review executors, validates outputs, owns the review→repair→re-review loop. Appends Review Record to plan file. Use --plan for plan review, --code for code review.
   567 repo stars
8. ▌
   Dev Local Review · majiayu000 bundle

   Run a local code review using the CodeRabbit agent before pushing to catch issues early
   567 repo stars
9. ▌
   Ds Plan Reviewer · majiayu000 bundle

   Internal skill used by ds-plan at Phase 2 exit gate. Dispatches a reviewer subagent to verify PLAN.md quality before implementation. NOT user-facing.
   567 repo stars
10. ▌
    Ds Spec Reviewer · majiayu000 bundle

    Internal skill used by ds-brainstorm at Phase 1 exit gate. Dispatches a reviewer subagent to verify SPEC.md completeness before planning. NOT user-facing.
    567 repo stars
11. ▌
    Engagement Retro · majiayu000 bundle

    Run a close-out retrospective on a client engagement — capture lessons, results, and the renewal/referral path. Use when asked to wrap up a client project, run an engagement retro, write a project close-out, or plan the follow-on. Produces a close-out — outcomes vs. goals, what worked / what didn't, profitability/scope reality, a reusable lessons log, and the next-engagement or referral ask.
    567 repo stars
12. ▌
    Enterprise Forge · majiayu000 bundle

    Adversarial code review with mechanical checks, contract probing, and 5 adversarial lenses. Bugs recycle to contract for full TDD treatment. 3-fail circuit breaker prevents infinite loops. Use after enterprise-review.
    567 repo stars
13. ▌
    Entity Validator · majiayu000 bundle

    Validation rules for extracted entities. Checks required fields, data types, cross-references, duplicates, enum values, and domain constraints.
    567 repo stars
14. ▌
    Experiment Audit · majiayu000 bundle

    Audit experiment integrity before claiming results. Uses cross-model review (external reviewer backend) to check for fake ground truth, score normalization fraud, phantom results, and insufficient scope. Use when user says "审计实验", "check experiment integrity", "audit results", "实验诚实度", or after experiments complete before writing claims.
    567 repo stars
15. ▌
    Framework Health · majiayu000 bundle

    Evaluate Mycelium's own process effectiveness. Measures cycle velocity, discard trends, confidence calibration, gate effectiveness, regression rate. Run quarterly or every 20 cycles.
    567 repo stars
16. ▌
    Github Review Pr · majiayu000 bundle

    Review GitHub pull requests with detailed, multi-perspective code analysis using parallel subagents. Use this skill whenever the user wants to review a PR, asks for code review on a pull request, mentions "review PR", "check this PR", "look at pull request", or references a PR number or GitHub PR URL. Also trigger when the user wants feedback on code changes, wants to approve or request changes on a PR, or asks to review someone's contribution.
    567 repo stars
17. ▌
    Harness Validate · majiayu000 bundle

    Use when user invokes /harness-validate or wants to check whether a harness.yaml file is valid according to the Harness Protocol v1 JSON Schema. Reports validation errors with field paths and helpful fix suggestions.
    567 repo stars
18. ▌
    Hipaa Safeguards · majiayu000 bundle

    Map HIPAA Security Rule safeguards and run a risk analysis for systems handling PHI. Use when asked to become HIPAA-compliant, assess HIPAA safeguards, prepare for handling PHI/ePHI, or scope a BAA. Produces a HIPAA assessment — the administrative/physical/technical safeguards with required-vs-addressable status, a risk analysis, BAA scope, and a prioritised remediation plan.
    567 repo stars
19. ▌
    Iep Goal Support · majiayu000 bundle

    Draft SMART IEP goals, accommodations, and present-levels statements that are measurable and compliant in spirit. Use when asked to write an IEP goal, draft special-education goals, list accommodations, or write a present-levels (PLAAFP) statement. Produces measurable annual goals with baselines, criteria, and measurement methods, plus matched accommodations. A drafting aid for educators — not legal advice; the IEP team and local requirements govern.
    567 repo stars
20. ▌
    Vibe Iteration Review · majiayu000 bundle

    Performs end-of-iteration review with quality grading, metrics, and trend analysis. Use at the end of each development iteration or sprint.
    567 repo stars
21. ▌
    Java Code Review · majiayu000 bundle

    Systematic code review for Java with null safety, exception handling, concurrency, and performance checks. Use when user says "review code", "check this PR", "code review", or before merging changes.
    567 repo stars
22. ▌
    Refactor Lexical Ontology · majiayu000 bundle

    Audit identifiers and namespaces for lexical-semantic and ontological correctness. Detect semantic role misalignment (agent/tool/process/artifact), derivational misuse (e.g., -er agent nouns), and category errors between modules, packages, classes, functions, and data artifacts. Output a single Markdown report with actionable fixes.
    567 repo stars
23. ▌
    Logic Gatekeeper · majiayu000 bundle

    Validates requirements for ambiguity and physical hardware constraints. Use this after requirements are generated but before code/hardware synthesis begins.
    567 repo stars
24. ▌
    Lp Do Data Audit · majiayu000 bundle

    Data hardening audit for Next.js and web apps in this monorepo. Checks schema validation coverage, TypeScript strictness, environment variable safety, database type safety, client-side response validation, error handling, and unsafe cast patterns. Emits a structured audit report and a PASS/FAIL verdict. Run before site launch and periodically thereafter.
    567 repo stars
25. ▌
    Manage Tech Debt · majiayu000 bundle

    Track, categorize, and prioritize technical debt when the user asks to manage tech debt, create a tech debt register, assess code quality, or plan refactoring work
    567 repo stars
26. ▌
    Memory Debugging · majiayu000 bundle

    This skill should be used when debugging memory-related issues in the Breenix kernel including page faults, double faults, frame allocation problems, page table issues, heap allocation failures, stack overflows, and virtual memory mapping errors.
    567 repo stars
27. ▌
    Mern Code Review · majiayu000 bundle

    Review MERN code for compliance with standards, NFRs, and security policy.
    567 repo stars
28. ▌
    Monitor Taxonomy · majiayu000 bundle

    Taxonomy quality monitor that assesses correctness of bridgeattributes and
    567 repo stars
29. ▌
    Nean Code Review · majiayu000 bundle

    Review NEAN code for compliance with standards, NFRs, and security policy.
    567 repo stars
30. ▌
    Nw Brainstorming · majiayu000 bundle

    Structured divergent thinking techniques — HMW framing, SCAMPER, Crazy 8s mechanics, and option diversity guarantees. Enforces strict separation of generation and evaluation phases.
    567 repo stars
31. ▌
    Onboarding Audit · majiayu000 bundle

    Zero-knowledge onboarding audit. Pretends to be a new developer who has never seen this repo. Tries to get it running. Documents every friction point. Every Google search is a documentation failure.
    567 repo stars
32. ▌
    Peer Review Code · majiayu000 bundle

    Run code review using the codex CLI as an independent reviewer. Returns structured findings without applying fixes. Use when the user asks to "peer review code", "peer review my code", "get a second opinion on my code", "run codex review", "codex peer review", "run codex on my diff", or "review against main".
    567 repo stars
33. ▌
    Peer Review Plan · majiayu000 bundle

    Run plan review using the codex CLI as an independent reviewer. Returns structured findings without applying fixes. Use when the user asks to "peer review my plan", "get a second opinion on my plan", "codex review my plan", or "run codex on my plan".
    567 repo stars
34. ▌
    Peer Review Spec · majiayu000 bundle

    Run spec review using the codex CLI as an independent reviewer. Returns structured findings without applying fixes. Use when the user asks to "peer review my spec", "get a second opinion on my spec", "codex review my spec", or "run codex on my spec".
    567 repo stars
35. ▌
    Phase Checkpoint · majiayu000 bundle

    Run checkpoint criteria after completing a phase. Use after /phase-start completes all tasks to verify quality gates before proceeding.
    567 repo stars
36. ▌
    Plan Review Gate · majiayu000 bundle

    Adversarial plan review by 3 independent reviewers (Feasibility, Completeness, Scope & Alignment) before presenting to user.
    567 repo stars
37. ▌
    Vibe Pre Commit Audit · majiayu000 bundle

    Scans staged changes for secrets, debug statements, TODOs without references, and other common commit mistakes. Use before creating any commit.
    567 repo stars
38. ▌
    Pre Quality Gate · majiayu000 bundle

    プロジェクト プロジェクトの品質検証スキル。MakefileのSSOT q.checkを実行し結果を解釈する。
    567 repo stars
39. ▌
    Qodo Pr Resolver · majiayu000 bundle

    Review and resolve PR issues with Qodo - get AI-powered code review issues and fix them interactively (GitHub, GitLab, Bitbucket, Azure DevOps)
    567 repo stars
40. ▌
    Quality Checking · majiayu000 bundle

    Validate API documentation against quality standards. Use when you need to verify generated docs are complete and correct.
    567 repo stars
41. ▌
    Project Orchestrator Quality Reviewer · majiayu000 bundle

    Reviews code quality after spec compliance passes. Focuses on clean code, test coverage, security, and project-specific patterns. Uses git diff to scope review.
    567 repo stars
42. ▌
    Refactor Planner · majiayu000 bundle

    Skill de planification de refactoring. Analyse un codebase ou un domaine specifique pour identifier la dette technique, les violations de patterns evan-workflow, les duplications, et les complexites excessives. Produit un plan de refactoring priorise et progressif (pas de big bang). Ce skill devrait etre utilise quand l'utilisateur veut ameliorer la qualite du code, avant un gros chantier, ou periodiquement pour la maintenance.
    567 repo stars
43. ▌
    Review API Usage · majiayu000 bundle

    Check API, library, and framework usage in code against official documentation and installed skill knowledge. Flags deprecated APIs, incorrect method signatures, wrong parameter types, version-incompatible patterns, and best-practice violations. Use when the user asks to "review API usage", "check API usage", "verify against docs", "check library usage", "validate API calls", "check against documentation", or "check for deprecated APIs".
    567 repo stars
44. ▌
    Review Dead Code · majiayu000 bundle

    Find and plan removal of dead code (unused functions, variables, unreachable paths)
    567 repo stars
45. ▌
    Review Post Task · majiayu000 bundle

    [Code Quality] Two-pass code review for task completion
    567 repo stars
46. ▌
    Review Rust Code · majiayu000 bundle

    Review and enforce Rust best practices, clean code principles, and idiomatic patterns. Use when reviewing code, writing new Rust code, or refactoring existing implementations. Covers type-driven design, error handling, async patterns, testing, and project-specific standards.
    567 repo stars
47. ▌
    Review Structure · majiayu000 bundle

    Repo-wide structural-maintainability review — code-judo restructurings, 1k-line file guard, anti-spaghetti branching, canonical-layer enforcement, anti-magic abstractions, explicit type/boundary contracts.
    567 repo stars
48. ▌
    Rules Generation · majiayu000 bundle

    Use after the tech-stack-confirmation skill has been completed and a confirmed tech stack document exists. This skill reads the confirmed tech stack, ADRs, and NFR documents, then generates project-specific coding rules (.claude/rules/*.md files) with YAML frontmatter `paths` scoping, based on the best practices of each selected technology. It produces 4–5 consolidated rule files focused on code quality and best practices. It should be triggered when a user asks to 'generate project rules', 'create coding standards', 'set up code quality rules', 'generate rules from tech stack', or 'create best-practice rules'. It should NOT be used for technology selection (use tech-stack-confirmation instead) or for detailed system design.
    567 repo stars
49. ▌
    Rust Code Review · majiayu000 bundle

    Reviews Rust code for ownership, borrowing, lifetime, error handling, trait design, unsafe usage, and common mistakes. Use when reviewing .rs files, checking borrow checker issues, error handling patterns, or trait implementations. Covers Rust 2024 edition patterns and modern idioms.
    567 repo stars
50. ▌
    Skeptical Triage · majiayu000 bundle

    Reusable 3-round self-challenge + arbiter pattern for filtering false positives from findings/verdicts. Use when the cost of a false-positive gate block exceeds the cost of ~4 extra LLM turns.
    567 repo stars
51. ▌
    Spec Kit Analyze · majiayu000 bundle

    Use when `spec.md`, `plan.md`, and `tasks.md` exist and you need a read-only Spec Kit audit for consistency, requirement-to-task coverage, ambiguity, duplication, or constitution conflicts before implementation.
    567 repo stars
52. ▌
    Sqlx Code Review · majiayu000 bundle

    Reviews sqlx database code for compile-time query checking, connection pool management, migration patterns, and PostgreSQL-specific usage. Use when reviewing Rust code that uses sqlx, database queries, connection pools, or migrations. Covers offline mode, type mapping, and transaction patterns.
    567 repo stars
53. ▌
    Task Quality Kpi · majiayu000 bundle

    Objective task quality evaluation framework using quantitative KPIs. KPIs are automatically calculated by a hook when task files are modified and saved to TASK-XXX--kpi.json. Use when: reading KPI data for task evaluation, understanding quality metrics, deciding whether to iterate or approve based on data.
    567 repo stars
54. ▌
    Validate Adapter · majiayu000 bundle

    Validates adapter files against live platform documentation to detect stale mappings,missing features, and outdated version information
    567 repo stars
55. ▌
    Validate Coaches · majiayu000 bundle

    Validates coach markdown files for required frontmatter fields, sections, and naming conventions
    567 repo stars
56. ▌
    Verify Comm Tabs · majiayu000 bundle

    소통 그룹(공지사항/학부모포털/알림센터) 탭의 핵심 기능을 검증합니다. 소통 관련 컴포넌트 수정 후 사용.
    567 repo stars
57. ▌
    Well Architected · majiayu000 bundle

    6-pillar architecture review framework. Adapted from AWS Well-Architected for use by great_cto's architect agent on every non-nano ARCH document. Forces explicit answers across operational excellence, security, reliability, performance, cost, and sustainability — not just feature design.
    567 repo stars
58. ▌
    Writing Validate · majiayu000 bundle

    Validate draft sections cover all PRECIS claims before review.
    567 repo stars
59. ▌
    Idor Hunting · majiayu000 bundle

    Hunt Insecure Direct Object Reference (IDOR) — test horizontal and vertical privilege escalation across user IDs, org IDs, tenant boundaries, and unguessable identifiers. Use when the user has an API endpoint with an identifier in the path/body that may be tested for unauthorized cross-user access.
    567 repo stars
60. ▌
    Aspnet Identity · majiayu000 bundle

    Guidance for ASP.NET Core Identity authentication and user management. USE FOR: user registration, login/logout flows, password management, two-factor authentication, role-based authorization, external login providers, account confirmation, token generation. DO NOT USE FOR: fine-grained policy-based authorization (use Enforcer/Casbin), API key management, OAuth2 server implementation (use Duende IdentityServer), or cryptographic operations (use CryptoNet).
    567 repo stars
61. ▌
    Ca Threat Model · majiayu000 bundle

    Opt-in lightweight STRIDE pass for a sensitive feature before implementation. Not a routine gate — invoke it when a change warrants security thought.
    567 repo stars
62. ▌
    Coding Security · majiayu000 bundle

    Coding and security standards. Apply when writing code, handling comments, error handling, API keys, database connections, user input, or file uploads.
    567 repo stars
63. ▌
    Convex Patterns · majiayu000 bundle

    Convex backend patterns with security, validation, and performance best practices
    567 repo stars
64. ▌
    Crypto Analysis · majiayu000 bundle

    Cryptographic assessment — cipher identification, TLS auditing, hash analysis, key strength evaluation, side-channel detection, crypto implementation review
    567 repo stars
65. ▌
    Docusaurus Auth · majiayu000 bundle

    Expert skill for implementing authentication in Docusaurus static sites. Handles FastAPI backend setup for authentication, JWT token management, and secure API communication. Includes setup for static site generation, client-side authentication, and user data protection. Use when adding authentication to Docusaurus static sites, implementing FastAPI backend for authentication services, or securing API routes with JWT tokens in static site context.
    567 repo stars
66. ▌
    Dsfa Erstellung · majiayu000 bundle

    Datenschutz-Folgenabschätzung (DSFA) nach Art. 35 DSGVO erstellen: Schwellwertanalyse, BfDI-Blacklist-/Whitelist-Abgleich, strukturierte DSFA im eigenen Hausformat. Auslöser: Neues Verarbeitungsvorhaben, Systemeinführung, oder Ergebnis aus anwendungsfall-triage.
    567 repo stars
67. ▌
    Firewall Config · majiayu000 bundle

    Configure iptables, nftables, and cloud firewalls. Implement network segmentation and traffic filtering. Use when securing network perimeters or implementing security zones.
    567 repo stars
68. ▌
    Hunt Mfa Bypass · majiayu000 bundle

    Hunt MFA / 2FA bypass — 7 distinct patterns. (1) MFA not enforced on sensitive endpoints (password change, email change accept without MFA challenge), (2) MFA-step skip via direct navigation to post-login URL, (3) MFA-token replay (same code accepted twice), (4) brute-force the 6-digit OTP without rate limit (10^6 attempts at server speed), (5) race condition on OTP validation, (6) recovery-code dump via /api/me, (7) backup factor downgrade (SMS factor with no rate limit). Plus the chain: cookie theft + password oracle + no step-up = ATO without MFA challenge. Detection: trace auth flow in Burp, find every state transition, check if MFA is middleware-gated vs per-endpoint, check OTP entropy and rate limit on OTP-validate. Validate: attacker session reaching post-MFA state. Use when hunting auth bypass, MFA flows, chaining primitives toward ATO.
    567 repo stars
69. ▌
    Hunt Sharepoint · majiayu000 bundle

    Hunt Microsoft SharePoint Server (2013/2016/2019/Subscription Edition) on-prem farms — anonymous endpoint enumeration, version disclosure, legacy SOAP login bypass (Authentication.asmx), ToolShell precondition chain (CVE-2025-53770), SafeControl reflection enumeration via Picker.aspx, NTLM Type-2 AD topology disclosure, custom-branding module discovery, EoL farm permanent-CVE-window exploitation, FormDigest anonymous issuance, file-extension blocklist NOT-an-oracle pattern, custom-zone Forms auth bridging on-prem AD. Use when target has SharePoint headers (SPRequestGuid, X-MS-InvokeApp, X-SharePointHealthScore, MicrosoftSharePointTeamServices) or paths (/_layouts/15/, /_vti_bin/, /_api/, /_catalogs/).
    567 repo stars
70. ▌
    Identity Review · majiayu000 bundle

    Review identity and access management across all platforms
    567 repo stars
71. ▌
    Kvkk Compliance · majiayu000 bundle

    KVKK and GDPR compliance patterns - consent management, right to erasure, breach notification, audit logging, cookie consent, and data classification.
    567 repo stars
72. ▌
    Linux Hardening · majiayu000 bundle

    Apply CIS benchmarks and secure Linux servers. Configure SSH, manage users, implement firewall rules, and enable security features. Use when hardening Linux systems for production or meeting security compliance requirements.
    567 repo stars
73. ▌
    Manage Firewall · majiayu000 bundle

    Inspects and configures the web application firewall (WAF) in front of a Power Pages production site. Lists the current state, recommends enabling protection when it is off, and walks the user through adding, updating, or removing custom rules — IP blocks, country blocks, path blocks, and rate limits. Use when the user wants to turn on WAF, block traffic by IP or country, rate-limit login or signup pages, protect pages from brute-force attempts, restrict access to specific paths, review the current firewall configuration, or asks "is my site protected against bots / common web attacks?" — even if they say "add rate limit" or "protect login page" without mentioning "firewall" or "WAF".
    567 repo stars
74. ▌
    Meme Coin Audit · majiayu000 bundle

    Meme coin and token security audit — rug pull detection (honeypot, hidden mint, fee manipulation, LP lock bypass), Solana SPL token analysis (freeze authority, mint authority, metadata mutability), Token-2022 extension risks (transfer hooks, permanent delegate), DEX liquidity pool attacks (sandwich amplification, LP drain, bonding curve exploits), pump.fun/Raydium/Jupiter integration risks, token_scanner.py automation, and real exploit examples from 2024-2025. Use for any token audit, rug pull assessment, meme coin security review, or pre-investment due diligence.
    567 repo stars
75. ▌
    Memory Sanitize · majiayu000 bundle

    Produce share-safe copies of memory files under /tmp with PII redacted (paths, emails, session IDs, dates) and credentials scanned (tokens, keys); never mutates originals. Use when the user says "sanitize memory for sharing", "redact memory PII", or "scan memory for credentials".
    567 repo stars
76. ▌
    Mobile Security · majiayu000 bundle

    Reverses and exploits mobile applications. Use when working with Android APK files, iOS IPA files, mobile app reversing, Frida hooking, or app security analysis challenges.
    567 repo stars
77. ▌
    Model Inversion · majiayu000 bundle

    Privacy attacks to extract training data and sensitive information from AI models
    567 repo stars
78. ▌
    Offensive Osint · majiayu000 bundle

    Operational arsenal for authorized external red-team and bug-bounty recon. Concrete probes, wordlists, regexes, dorks, curl one-liners for: subdomain enum, GraphQL/Swagger/REST discovery, identity fabric (Entra/Okta/ADFS/Google/SAML/M365 deep — Teams/SharePoint/OneDrive), cloud bucket enum (S3/GCS/Azure), CDN/WAF bypass, origin discovery, vendor fingerprinting (Citrix/F5/Pulse/Fortinet/PaloAlto/Cisco/VMware), CI/CD exposure, 48-pattern secret-scan catalog (AWS/GCP/GitHub/Stripe/Slack/Anthropic/OpenAI/Atlassian/DataDog/npm/PyPI), Postman workspaces, breach correlation (HudsonRock/HIBP/DeHashed/IntelX), TLS/JA3 audit, certificate transparency, JS endpoint extraction, package registry leaks, mobile/APK recon, sat imagery, sector-specific recon (healthcare DICOM, finance SWIFT, ICS/SCADA Modbus/BACnet). Detail content in 15 modular reference files, loaded on demand. Use for any authorized recon: scoping, asset discovery, attack-path mapping, secret triage, severity scoring.
    567 repo stars
79. ▌
    Pdpa Compliance · majiayu000 bundle

    PDPA (Personal Data Protection Act) is Thailand's comprehensive data protection law that regulates how organizations collect, use, and store personal data. This skill provides patterns for implementin
    567 repo stars
80. ▌
    Privesc Windows · majiayu000 bundle

    Windows privilege escalation — token abuse, service exploitation, UAC bypass, credential harvesting, AD escalation paths
    567 repo stars
81. ▌
    Promptinjection · majiayu000 bundle

    Prompt injection testing. USE WHEN prompt injection, jailbreak, LLM security, AI security assessment, pentest AI application, test chatbot vulnerabilities.
    567 repo stars
82. ▌
    Redteam Mindset · majiayu000 bundle

    Red-team operator discipline — the mindset corrections that separate offensive testing from defensive WAPT. Built from authorized red-team work where conservative defaults caused multiple findings to be missed and one to be incorrectly retracted. Use at the START of any red-team engagement and again whenever feeling stuck or considering "stopping" on a defended target. The single most important skill to load when scope is "external red team" not "bug bounty / WAPT".
    567 repo stars
83. ▌
    Resemble Detect · majiayu000 bundle

    Deepfake detection and media safety — detect AI-generated audio, images, video, and text, trace synthesis sources, apply watermarks, verify speaker identity, and analyze media intelligence using Resemble AI
    567 repo stars
84. ▌
    Respond Malware · majiayu000 bundle

    Respond to a malware incident following PICERL methodology. Use when malware is detected on endpoints. Orchestrates triage, containment, eradication, and recovery. Works with triage-malware skill for analysis.
    567 repo stars
85. ▌
    Review Contract · majiayu000 bundle

    Review Aztec smart contracts for correctness, security, and best practices. Use proactively after writing or modifying Aztec contracts.
    567 repo stars
86. ▌
    Safety Protocol · majiayu000 bundle

    This skill provides mandatory safety guidelines for coding agents. It should be used at the start of any coding session and whenever performing file operations, executing code, handling credentials, or interacting with external systems. The protocol defines what actions are permitted, restricted, or prohibited to ensure secure, reliable, and ethical agent behavior.
    567 repo stars
87. ▌
    Secret Handling · majiayu000 bundle

    The secret-source gate. Routed to when changed code reads, writes, or passes a secret — API key, token, password, connection string, signing key, certificate, or any value that grants access. Validates that every secret comes from the approved store and never lands in source, log, test fixture, error response, image, or LLM prompt. The auth-crypto-reviewer agent is dispatched as the reviewer.
    567 repo stars
88. ▌
    Secret Rotation · majiayu000 bundle

    Validate secret storage practices and rotation policies. Check for secrets in code, Vault usage, and rotation schedules.
    567 repo stars
89. ▌
    Security Report · majiayu000 bundle

    Generate a comprehensive security report for stakeholders
    567 repo stars
90. ▌
    Security Skills Guide · majiayu000 bundle

    Guide for security-related Agent Skills including penetration testing, code auditing, threat hunting, and forensics skills.
    567 repo stars
91. ▌
    Server Security · majiayu000 bundle

    服务器安全审计与加固。扫描 SSH、防火墙、端口暴露、文件权限、暴力破解等安全问题，生成报告并提供一键修复。当用户说服务器安全、安全审计、安全检查、安全加固时使用
    567 repo stars
92. ▌
    Site To IOS App · majiayu000 bundle

    Turn a website, PWA, dashboard, or marketplace into an iOS app with App Store strategy, screenshots, metadata, and release gates.
    567 repo stars
93. ▌
    Soc2 Compliance · majiayu000 bundle

    Implement SOC 2 Trust Services Criteria. Configure security, availability, and processing integrity controls. Use when achieving SOC 2 certification.
    567 repo stars
94. ▌
    Sops Encryption · majiayu000 bundle

    Encrypt files and configs with Mozilla SOPS. Integrate with AWS KMS, GCP KMS, or PGP for key management. Use when encrypting configuration files, Kubernetes secrets, or implementing GitOps with encrypted secrets.
    567 repo stars
95. ▌
    Spring Security · majiayu000 bundle

    Secure Spring Boot applications - authentication, authorization, OAuth2, JWT, CORS/CSRF protection
    567 repo stars
96. ▌
    Suede SEO Audit · majiayu000 bundle

    Run a nine-lane evidence-based SEO and generative-search audit: access, intent, metadata, structure, supported schema, E-E-A-T, clusters, and exact rewrite fixes.
    567 repo stars
97. ▌
    X9 Inspect Cert · majiayu000 bundle

    You inspect JWKS files and certificate chains for X9.150 implementations. You wrap the project's opencert.py and validatepair.py utilities and interpret their output.
    567 repo stars
98. ▌
    X9 Troubleshoot · majiayu000 bundle

    You diagnose common issues with X9.150 implementations. You check the environment, validate key/cert setup, test server connectivity, and explain error messages.
    567 repo stars
99. ▌
    Add New Opc Skill · majiayu000 bundle

    Checklist and automation guide for adding a new skill to the OPC Skills project. Ensures all required files, metadata, logos, and listings are created before release. Use when adding a new skill, publishing a skill, or preparing a skill for release.
    567 repo stars
100. ▌
     Aget Create Skill · majiayu000 bundle

     Create new AGET skills following S-V-O naming and standard templates. Use when developing new /aget-* skills with proper vocabulary, specs, and traceability.
     567 repo stars