SecurityMindedSolutions
- 11 skills
- 0 followers
- 9 hours ago last updated
- ▌ Huh · securitymindedsolutionsNow, next, you. Wait, where were we? Say the last message again as three labelled lines - where it stands, what happens without me, and what you need from me. For picking a thread back up.
- ▌ Ugh · securitymindedsolutionsOne breath, the tldr. Say the last message in a single sentence, plus a You line only when something actually needs me. The shortest summary, for when I am tired.
- ▌ Elim · securitymindedsolutionsExplain the last message like I am a manager. Plain English, no code names and no shop talk.
- ▌ Again · securitymindedsolutionsSay the last message again in plain English, keeping every name and number exact.
- ▌ Audit Backend · securitymindedsolutions bundleBackend application architecture audit. Checks handler hygiene, service layer patterns, data access, data contracts, error handling, code quality, testing, observability, and security against enterprise standards. Use this skill whenever the user wants to review backend code quality, check API patterns, validate architecture, or assess whether their backend follows best practices - even if they don't explicitly say 'audit'.
- ▌ Audit Frontend · securitymindedsolutions bundleComprehensive front-end architecture audit with parallel sub-agents. Checks design tokens, components, accessibility, performance, security, and best practices against enterprise standards. Use this skill whenever the user wants to review their frontend, check UI quality, assess component patterns, verify accessibility, or improve their web app - even if they don't explicitly say 'audit'.
- ▌ Audit Security · securitymindedsolutions bundleComprehensive security audit with parallel sub-agents. Runs code, API, frontend, multi-tenancy (tenant-isolation), secrets, dependencies, terraform, and CI/CD modules against a target directory. Use this skill whenever the user asks to check for vulnerabilities, do a security review, pen test prep, compliance check, or wants to know if their code is secure - even if they don't say 'audit' explicitly.
- ▌ Built With · securitymindedsolutions bundlePassive, headless recon of a web app's frontend to infer its backend and tech stack - API endpoints, third-party vendors, CSP allow-lists, auth provider, framework/build tooling, and public config tokens - then produce a plain-English vendor dossier (Artifact + landscape PDF). Use this whenever the user wants to know what a web app is "built on", "runs on", or "uses under the hood", asks you to fingerprint / profile / tear down / map a competitor's or vendor's stack, wants to enumerate a site's APIs, endpoints, or third-party services from its JavaScript, or asks "what's their backend / what platforms do they use" for a URL like app.example.com - even if they don't say "recon" or "platform analysis". Everything runs via curl/Python and headless Chrome; no browser window opens.
- ▌ Ralph Loop · securitymindedsolutions bundleAutonomous task runner that works through a PRD one task at a time. Launches ralph.sh in the background and monitors progress.
- ▌ Ralph Plan · securitymindedsolutionsInteractive PRD builder for the Ralph autonomous coding loop. Guides users through creating structured plans with explicit file paths.
- ▌ Github Remediate Vulns · securitymindedsolutions bundleScan GitHub org for Dependabot, code scanning, and secret scanning alerts. Classify findings as auto-fixable, assisted, or manual. Apply fixes with test validation, then create PRs on approval. Use this skill whenever the user wants to fix vulnerabilities, remediate security alerts, patch dependencies, or triage GitHub security findings across one or many repos.