Security
Security scanning and vulnerability detection
pentest-mobile-app
by jd-opensource
OWASP Mobile Top 10 security testing for Android and iOS — local storage, certificate pinning bypass, IPC abuse, and binary protections.
hooks-eval
by athola
'Use this skill BEFORE deploying hooks to production. Use when auditing
oracle-family-scan
by Soul-Brews-Studio
Manage Oracle family - scan, track, welcome new Oracles. Use when user says "family scan", "oracle registry", "welcome new oracles", or needs to check Oracle population.
release-checklist
by yonatangross
Walks through the OrchestKit release checklist — build, test, validate counts, changelog, version bump, commit, tag, push. Use when preparing a release, cutting a version tag, or verifying release readiness before pushing to main.
audit-full
by yonatangross
"Full-codebase audit using 1M context window. Security, architecture, and dependency analysis in a single pass. Use when you need whole-project analysis."
chrome-extension-development
by Mindrally
Expert guidelines for Chrome extension development with Manifest V3, covering security, performance, and best practices
bash-scripting
by Mindrally
Bash scripting guidelines covering security, portability, error handling, and automation best practices for DevOps.
docker
by Mindrally
Docker containerization best practices for building, securing, and deploying containers.
gemini-peer-review
by jezweb
"Get a second opinion from Gemini on code, architecture, debugging, or security. Uses gemini-coach CLI with AI-to-AI prompting for clear, actionable analysis. Trigger with 'ask gemini', 'gemini review', 'second opinion', 'peer review', or 'consult gemini'."
electron-skills
by llama-farm
Electron patterns for LlamaFarm Desktop. Covers main/renderer processes, IPC, security, and packaging.
typescript-skills
by llama-farm
Shared TypeScript best practices for Designer and Electron subsystems.
python-skills
by llama-farm
Shared Python best practices for LlamaFarm. Covers patterns, async, typing, testing, error handling, and security.
v4-security-foundations
by Uniswap
Security-first Uniswap v4 hook development. Use when user mentions "v4 hooks", "hook security", "PoolManager", "beforeSwap", "afterSwap", or asks about V4 hook best practices, vulnerabilities, or audit requirements.
domain-authority-auditor
by aaron-he-zhu
'Use when the user asks to "audit domain authority", "domain trust score", "CITE audit", "how authoritative is my site", "domain credibility check", "is my domain trustworthy", or "domain credibility score". Runs a full CITE 40-item domain authority audit, scoring domains across 4 dimensions with weighted scoring by domain type. Produces a detailed report with per-item scores, dimension analysis, veto checks, and a prioritized action plan. For content-level assessment, see content-quality-auditor. For link profile details, see backlink-analyzer.'
code-review
by tao12345666333
Provides expert code review guidelines and best practices
capacitor-security
by Cap-go
Comprehensive security guide for Capacitor apps using Capsec scanner. Covers 63+ security rules across secrets, storage, network, authentication, cryptography, and platform-specific vulnerabilities. Use this skill when users need to secure their mobile app or run security audits.
code-review-playbook
by yonatangross
Use this skill when conducting or improving code reviews. Provides structured review processes, conventional comments patterns, language-specific checklists, and feedback templates. Use when reviewing PRs or standardizing review practices.
assess
by yonatangross
"Assesses and rates quality 0-10 with pros/cons analysis. Use when evaluating code, designs, or approaches."
audit-skills
by yonatangross
Audits all OrchestKit skills for quality, completeness, and compliance with authoring standards. Use when checking skill health, before releases, or after bulk skill edits to surface SKILL.md files that are too long, have missing frontmatter, lack rules/references, or are unregistered in manifests.
mcp-patterns
by yonatangross
MCP server building, advanced patterns, and security hardening. Use when building MCP servers, implementing tool handlers, adding authentication, creating interactive UIs, hardening MCP security, or debugging MCP integrations.
onvifscan
by BrownFineSecurity
ONVIF device security scanner for testing authentication and brute-forcing credentials. Use when you need to assess security of IP cameras or ONVIF-enabled devices.
nmap
by BrownFineSecurity
Professional network reconnaissance and port scanning using nmap. Supports various scan types (quick, full, UDP, stealth), service detection, vulnerability scanning, and NSE scripts. Use when you need to enumerate network services, detect versions, or perform network reconnaissance.
security
by alinaqi
OWASP security patterns, secrets management, security testing
agent-teams
by alinaqi
Claude Code Agent Teams - default team-based development with strict TDD pipeline enforcement