Seguretat
Anàlisi de seguretat i detecció de vulnerabilitats
test-audit
juliomrqz
Audit test suites (unit, integration, feature/E2E) for correctness, quality, and best practices. Use when the user wants to review, audit, validate, or improve tests in any programming language or framework (Jest, pytest, RSpec, JUnit, PHPUnit, etc.). Triggers on requests like "audit my tests", "review test quality", "check my test coverage", "are my tests good", or any request to evaluate test effectiveness.
frontend-security
schalkneethling
Audit frontend codebases for security vulnerabilities and bad practices. Use when performing security reviews, auditing code for XSS/CSRF/DOM vulnerabilities, checking Content Security Policy configurations, validating input handling, reviewing file upload security, or examining Node.js/NPM dependencies. Target frameworks include web platform (vanilla HTML/CSS/JS), React, Astro, Twig templates, Node.js, and Bun. Based on OWASP security guidelines.
secure-mcp-install
HartreeWorks
'This skill should be used when the user asks to install or audit an MCP server, especially from third-party sources. Security-focused: clones at pinned commits, runs security scans.'
code-review
Nirav846
Use when code has been written and needs validation before committing, or when the user asks for a code review or security check.
pre-commit-review
ichuan
"Comprehensive code review for uncommitted changes before git commit. Use when users want to: (1) Review code changes before committing, (2) Check for security vulnerabilities, bugs, or performance issues, (3) Get feedback on code quality and best practices, (4) Identify issues by severity level. Triggered by phrases like 'review my changes', 'check my code', 'review before commit', 'code review', or similar requests for pre-commit validation."
post-quantum-shield
famaoai-creator
Output path for report
static-security-hardening
CMSForNerd
"Applies static security whitelisting, cryptographic CSP hashes, OWASP standard defensive headers, and static performance caching."
security-assessment
spjoshis
Master security assessments with vulnerability scanning, penetration testing, security testing, and security audits.
devcontainer-security
daaain
Guide for setting up secured VS Code dev containers for coding agents. Use when creating or hardening a DevContainer to sandbox Claude Code or other coding agents, configuring Docker socket proxies, handling VS Code IPC escape vectors, setting up git worktree support, or verifying security controls. Covers threat model, three-layer defence architecture, Node.js/pnpm setup, and verification testing.
security-auditor
jgarrison929
Use when reviewing code for security vulnerabilities, implementing authentication flows, auditing OWASP Top 10, configuring CORS/CSP headers, handling secrets, input validation, SQL injection prevention, XSS protection, or any security-related code review.
mcp-security-audit
adui-studio
Audit MCP (Model Context Protocol) server configurations for security issues. Use this skill when: - Reviewing .mcp.json files for security risks - Checking MCP server args for hardcoded secrets or shell injection patterns - Validating that MCP servers use pinned versions (not @latest) - Detecting unpinned dependencies in MCP server configurations - Auditing which MCP servers a project registers and whether they're on an approved list - Checking for environment variable usage vs. hardcoded credentials in MCP configs - Any request like "is my MCP config secure?", "audit my MCP servers", or "check .mcp.json" keywords: [mcp, security, audit, secrets, shell-injection, supply-chain, governance]
backend-principle-eng-java-pro-max
PrakharMNNIT
"Principal backend engineering intelligence for Java services and distributed systems. Actions: plan, design, build, implement, review, fix, optimize, refactor, debug, secure, scale backend code and architectures. Focus: correctness, reliability, performance, security, observability, scalability, operability, cost."
SakJules-claude-security
beer-sakthai
"The Claude Security menu — pick a job: scan the codebase (the whole repository or a scoped part of it), scan changes (this branchs or a pull requests diff, or one commit), or suggest patches (findings turned into targeted patch files, each verified b"
SakJules-devsecops
beer-sakthai
"Orchestrates static analysis, vulnerability scanning, and automated patching into a continuous security workflow."
openclaw-ops
ImL1s
OpenClaw 運維全指南 — 安裝設定、模型管理、遷移、cron 任務、安全檢查、除錯。當需要管理、遷移、排錯 OpenClaw 時使用此 skill。觸發關鍵字："OpenClaw 設定", "OpenClaw 遷移", "Gateway 管理", "cron 任務", "模型設定", "Telegram bot", "OpenClaw 安全檢查"。
compliance-officer
famaoai-creator
status: implemented
context
coreindustries
"Audit auto-loaded context budget, detect redundancy, and recommend optimizations."
agent-delegation
ichi-h
orchestratorが使用するサブエージェント選択ガイドと委譲パターンを定義します。エージェントカタログ、共通委譲指示、エラーハンドリングパターンを提供します。
dependency-updater
CuriousLearner
Smart dependency update checker with changelog summaries and breaking change detection.
code-reviewer
CuriousLearner
Automated code review with best practices, security checks, and quality standards.
compliance-checker
CuriousLearner
Check code against security compliance standards and best practices.
secret-scanner
CuriousLearner
Detect accidentally committed secrets, credentials, and sensitive information in code.
skill-registry
ismaelsuarez
"Trigger: update skills, skill registry, actualizar skills, after skill changes. Index available skills by trigger and path."
Security Validation
auldsyababua
Pre-merge security validation detecting secrets, user-specific paths, insecure SSH configurations, and security-weakening flags