Seguretat
Anàlisi de seguretat i detecció de vulnerabilitats
policy-radar
thiguchi125-debug
"政策発掘・蓄積・議会論点化の統合スキル。5モード（A朝スキャン/Bテーマ深掘り/C週次差分/D月次棚卸し/Eオンデマンド）→🎯政策・質問ネタDBへ承認後保存。Triggers: 政策レーダー/政策アップデート/最新政策動向/〇〇の他自治体事例/政策ネタ拾って/policy-update。NOT: 日次ニュース→news-briefing"
ek-skill-audit-acceptance
GamalElwazeery
"Loads canonical ExecutionKit skill skill.audit-acceptance; follow its declared task scope sequentially."
emergency-change
tigger-developer
Execute an operator-authorized BYPASS-GATE-7 emergency change and reconcile durable evidence afterwards.
bezaleel-stack
christopheraaronhogg
Provides comprehensive technology stack auditing with LIVE RESEARCH capability. Analyzes version currency, code patterns, conventions, anti-patterns, and security advisories for ANY framework (Laravel, React, Vue, Symfony, etc.). Use this skill when the user needs technology stack audit, framework best practices review, or package analysis. Produces detailed consultant-style reports with findings and prioritized recommendations — does NOT write implementation code.
SKILL.md — Web Research
iamthetonyb
Never present speculation as fact
general-frontend-security
lenneTech
Framework-agnostic frontend security guide based on OWASP Secure Coding Practices. Covers XSS prevention, CSRF protection, Content Security Policy (CSP), secure cookie configuration, client-side authentication patterns, input validation, secure storage, and security headers. Activates for security audits, vulnerability reviews, or browser security questions in any web application. NOT for backend/NestJS security (use generating-nest-servers). NOT for Nuxt-specific implementation (use developing-lt-frontend).
SQL Injection Testing
jcastillotx
This skill should be used when the user asks to "test for SQL injection vulnerabilities", "perform SQLi attacks", "bypass authentication using SQL injection", "extract database information through injection", "detect SQL injection flaws", or "exploit database query vulnerabilities". It provides comprehensive techniques for identifying, exploiting, and understanding SQL injection attack vectors across different database systems.
variant-analysis
aleister1102
Find similar vulnerabilities and bugs across codebases using pattern-based analysis. Use when hunting bug variants, building CodeQL/Semgrep queries, analyzing security vulnerabilities, or performing systematic code audits after finding an initial issue.
External Research
MaizeCobra
"Comprehensive external research methodology using web search, URL fetching, and documentation APIs for authoritative, version-aware documentation gathering"
high-risk-review
janjaszczak
Apply enhanced verification (CoVe-like review, security/arch/perf checks, targeted web research) for high-risk tasks or uncertainty. Use for security, infra, data loss risk, major refactors, or when facts may be outdated.
dependency-update
IHKREDDY
Check for outdated packages and create update PRs
kubernetes
kprsnt2
Kubernetes deployment best practices including resource management, security, and observability.
rumble-conversation
sethmblack
Structure and facilitate a difficult conversation using Brene Brown's rumbling methodology - leaning into vulnerability, staying curious and generous, owning your part, and achieving clarity withou...
isms-audit-expert
nimeshgurung
Senior ISMS Audit Expert for internal and external information security management system auditing. Provides ISO 27001 audit expertise, security audit program management, security control assessment, and compliance verification. Use for ISMS internal auditing, external audit preparation, security control testing, and ISO 27001 certification support.
httpsdocsbaseorgbase-chainllmstxt
hk-vk
Base is a fast, low-cost Ethereum L2 for building global onchain apps; start here to deploy, connect, and operate reliably.
security-review
flext-sh
'security findings, attack surfaces, dependency risk'
defi-protocol-templates
TriNgo0108
Implement DeFi protocols with production-ready templates for staking, AMMs, governance, and lending systems. Use when building decentralized finance applications or smart contract protocols.
lighthouse-cli
leobrival
Lighthouse CLI expert for web performance auditing. Use when users need to audit performance, accessibility, SEO, best practices, or generate audit reports.
sec
8-Sync-Dev
Quét bảo mật diff hoặc repo hiện tại — secret (không in giá trị), file nhạy cảm đang track/trong history, dependency audit, guard/hook/deny rule của kit, rồi review code đổi theo OWASP. Dùng khi user gõ /sec, trước commit/PR/release, hoặc sau khi diff đụng auth, input, file credential, dependency.
security-review
saajunaid
"Security review workflow — OWASP, code scanning, cloud infrastructure"
dep-check
ronyparra
Auditoría avanzada de dependencias con métricas técnicas centralizadas
nsauditor-ai
nsasoft
Use this skill whenever the user wants network security scanning, auditing, vulnerability assessment, host reconnaissance, or cloud-account security/compliance auditing with NSAuditor AI (via the nsauditor-ai MCP server: scan_host, scan_cloud, get_findings, probe_service, get_vulnerabilities, list_plugins). Triggers include 'scan', 'audit', 'vulnerability', 'CVE', 'network security', 'port scan', 'service detection', 'OS fingerprinting', 'penetration test', 'TLS/cipher audit', 'certificate check', 'DNS security', 'SPF/DKIM/DMARC/DNSSEC', 'SNMP/SMB/NetBIOS', 'CTEM', 'continuous monitoring', or 'audit my AWS/GCP/Azure account' / 'cloud compliance'. Also use it when the user asks to check if a host is up, enumerate services, find open ports, look up CVEs for a version, audit DNS records, or audit a cloud account — even if they don't say NSAuditor, as long as the nsauditor-ai MCP tools are available. Do NOT use for general coding, web development, or non-security topics.
django
Olino3
Expert-level Django development patterns and best practices for building secure, scalable web apps and APIs with Django and Django REST Framework. Guides architecture decisions, data modeling, API design, security, performance, and deployment.
smart-commit
TheWatcher01
Automates intelligent Git commits by analyzing unstaged/staged changes, grouping files by logical development concern, and committing sequentially with descriptive Conventional Commit messages. Includes pre-commit security audit protecting against credential leaks and large binary commits. Use when the user says "commit", "smart commit", "save changes", "push", "git commit", or similar.