Security
Security scanning and vulnerability detection
vibe-code-health-check
by FuzulsFriend
Scans any codebase and grades it A through F across 6 health dimensions (security, error handling, code structure, performance, deployment readiness, UX basics). Use when asked to "check my code", "audit my project", "is my code ready to ship", "review my codebase", "health check", "code quality check", "is my app secure", "vibe check my code", "scan my project", or "what is wrong with my code". Takes a codebase path and returns a scored report card with plain-English fixes.
pubnub-security
by pubnub
Secure PubNub applications with Access Manager, encryption, and TLS
code-review
by phodal
Perform comprehensive code review with best practices
healthcare-ui-design
by peterbamuhigire
Clinical-grade UI/UX patterns for healthcare applications across web (Bootstrap 5/Tabler + PHP) and Android (Jetpack Compose + Material 3). Covers patient records, vital signs, medication safety, care plans, scheduling, telemedicine, dashboards, patient portals, and clinical communication. Enforces HIPAA compliance, WCAG 2.2 AA accessibility, medical safety workflows, and role-based interfaces for clinicians, nurses, patients, and administrators. Use when building or reviewing EMR/EHR systems, hospital management, clinic apps, telemedicine platforms, patient portals, health dashboards, or any healthcare-related interface.
multi-tenant-saas-architecture
by peterbamuhigire
"Production-grade multi-tenant SaaS platform architecture with three-panel separation, zero-trust security, strict tenant isolation, and comprehensive audit trails. Use for designing multi-tenant systems, implementing tenant-scoped permissions, ensuring data isolation, and building scalable SaaS platforms."
sdlc-testing
by peterbamuhigire
"Generate Testing & Quality documentation for SDLC projects. Covers Software Test Plan (STP), Test Case Specifications, Software Validation & Verification Plan (SVVP), Validation Test Report (SVTR), and Peer Review/Inspection Reports. Use when establishing testing strategy, creating test documentation, or conducting quality validation."
ai-error-handling
by peterbamuhigire
Validation and error handling for AI-generated code. Use when verifying AI output, building production code, or ensuring code correctness. Enforces automatic quality checks and validation loops.
php-modern-standards
by peterbamuhigire
"Modern PHP development standards for maintainable, testable, object-oriented code. Use when writing PHP 8+ applications, implementing OOP patterns, ensuring security, following PSR standards, optimizing performance, or building Laravel applications. Covers strict typing, modern features, SOLID principles, security patterns, testing, and 2026 international programming standards."
skill-safety-audit
by peterbamuhigire
Scan new or updated skills for unsafe or malicious instructions (unknown tools, external installers, credential harvesting) before accepting them into the repository.
disk-cleaner
by gccszs
"High-performance cross-platform disk space monitoring, analysis, and cleaning toolkit with v2.0 optimization enhancements. Use when Claude needs to: (1) Analyze disk space usage and identify large files/directories consuming space, (2) Clean temporary files, caches, logs, and other junk files safely, (3) Monitor disk usage with configurable warning/critical thresholds, (4) Generate detailed reports on disk health and cleanup recommendations. Features advanced optimization: 3-5x faster scanning with os.scandir(), concurrent multi-threaded I/O, intelligent sampling for large directories, memory-adaptive processing, and cross-platform compatibility (Windows/macOS/Linux). Specializes in Windows C drive cleanup while maintaining full compatibility with Unix systems. Provides interactive CLI, automated scripts, detailed reporting modes, and comprehensive test coverage (244 tests). All operations prioritize safety with built-in protection for system files."
Technology Assessment
by zircote
This skill should be used when the user asks to "assess technology", "technology evaluation", "tech stack analysis", "technical feasibility", "technology trends", "build vs buy", "technology roadmap", "architecture assessment", or needs guidance on evaluating technologies, technical due diligence, or technology strategy decisions.
legacy-bridge
by williamzujkowski
Backward compatibility bridge that translates legacy @load patterns to new Skills format. Enables seamless migration with zero breaking changes during 6-month transition period.
testing
by williamzujkowski
Comprehensive testing standards including unit, integration, security, and property-based testing with TDD methodology
iso-17025
by cleverlab-ai
"Expert consultant for ISO/IEC 17025:2017 — the international standard for testing and calibration laboratory competence. Use when: (1) preparing for accreditation or surveillance audits, (2) building or reviewing quality management systems for laboratories, (3) writing procedures, policies or work instructions aligned with 17025, (4) generating audit checklists or gap analyses, (5) answering questions about laboratory requirements (impartiality, confidentiality, structure, resources, processes, management), (6) designing LIMS systems or laboratory software that must comply with 17025, (7) evaluating method validation, measurement uncertainty, metrological traceability, (8) handling nonconforming work, complaints, corrective actions, (9) preparing management reviews or internal audits. Supports both Polish (PL) and English (EN) languages."
iso-17025-pl
by cleverlab-ai
"Ekspert-konsultant ISO/IEC 17025:2017 — międzynarodowa norma dotycząca kompetencji laboratoriów badawczych i wzorcujących. Używaj gdy: (1) przygotowujesz się do audytu akredytacyjnego lub nadzoru PCA, (2) budujesz lub przeglądasz system zarządzania jakością w laboratorium, (3) piszesz procedury, polityki lub instrukcje zgodne z 17025, (4) tworzysz checklisty audytowe lub analizy luk, (5) odpowiadasz na pytania o wymagania laboratoryjne (bezstronność, poufność, struktura, zasoby, procesy, zarządzanie), (6) projektujesz systemy LIMS lub oprogramowanie laboratoryjne zgodne z 17025, (7) oceniasz walidację metod, niepewność pomiaru, spójność pomiarową, (8) obsługujesz pracę niezgodną z wymaganiami, skargi, działania korygujące, (9) przygotowujesz przeglądy zarządzania lub audyty wewnętrzne. Wersja polska (PL)."
iso-17025-de
by cleverlab-ai
"Fachberater für DIN EN ISO/IEC 17025:2018 — die internationale Norm für die Kompetenz von Prüf- und Kalibrierlaboratorien. Verwenden Sie diesen Skill wenn: (1) Vorbereitung auf Akkreditierungs- oder Überwachungsaudits der DAkkS, (2) Aufbau oder Überprüfung von Qualitätsmanagementsystemen für Laboratorien, (3) Erstellung von Verfahren, Richtlinien oder Arbeitsanweisungen gemäß 17025, (4) Erstellung von Audit-Checklisten oder Gap-Analysen, (5) Beantwortung von Fragen zu Laboranforderungen (Unparteilichkeit, Vertraulichkeit, Struktur, Ressourcen, Prozesse, Management), (6) Entwurf von LIMS-Systemen oder Laborsoftware, die 17025-konform sein muss, (7) Bewertung von Methodenvalidierung, Messunsicherheit, metrologischer Rückverfolgbarkeit, (8) Umgang mit fehlerhafter Arbeit, Beschwerden, Korrekturmaßnahmen, (9) Vorbereitung von Managementbewertungen oder internen Audits. Deutsche Version (DE)."
IaC Architecture - Cross-Cutting Concerns Skill
by markus41
Audit trails are complete and immutable
Container Security
by markus41
Comprehensive container security guidance including vulnerability scanning with Trivy, image hardening, secrets management, and CIS benchmark compliance. Activates when working with "container security", "image scanning", "CVE", "vulnerability", "docker security", "hardening", or "CIS benchmark".
harden
by dshakes
Run the toolkit's security commands in order to surface secrets, MCP supply-chain issues, install drift, release provenance gaps, and untrusted-code risks before shipping. Use before opening a PR, after adding a dependency, or whenever the security posture needs a fresh check.
feature-radar-scan
by runkids
Discover new feature opportunities from creative brainstorming, user feedback, ecosystem trends, and cross-project research. Writes results to .feature-radar/opportunities/. MUST use this skill when the user wants to GENERATE new ideas — not evaluate existing ones. Trigger on any request to brainstorm, explore, discover, or find new feature ideas, even casual ones like "I wonder what else we could do" or "give me ideas". Use when the user: - Asks "what else could we build?", "give me feature ideas", "what are we missing?" - Wants to brainstorm, explore new directions, or refresh the opportunity backlog - Says "scan ecosystem", "scan opportunities", "find new features" - Asks to review GitHub issues, community feedback, or adjacent tools for inspiration - Mentions "explore", "discover", or "new directions" in a feature context Do NOT use for evaluating/prioritizing existing features — that's feature-radar's job.
networking-management
by acedergren
Use when designing OCI networks, troubleshooting connectivity, optimizing egress costs, or configuring VCN security. Covers Service Gateway cost savings, VCN CIDR immutability, Security List vs NSG tradeoffs, VCN peering limitations, and Load Balancer subnet requirements.
faion-testing-developer
by faionfaion
"Testing: unit, integration, E2E, TDD, mocking, security testing."
security-suite
by boshu2
'Composable binary security suite for static analysis, dynamic tracing, contract capture, baseline drift, and policy gating. Triggers: "binary security", "reverse engineer binary", "black-box binary test", "behavioral trace", "baseline diff", "security suite".'
reverse-engineer-rpi
by boshu2
'Reverse-engineer a product into a feature catalog, code map, and specs. Uses RPI-style loop with verification gates. Triggers: “reverse engineer”, “catalog features”, “feature inventory”, “code map”, “docs to code mapping”, “binary analysis”.'