Security
Security scanning and vulnerability detection
java-spring-framework
by AyrtonAldayr
Senior Java & Spring Boot 4 / Spring Framework 7 architect skill for 2026-standard development. Use when the user asks to build, scaffold, design, review, or explain Java applications using Spring Boot 4.x, Spring Framework 7.x, Spring Modulith, or any related Spring ecosystem project. Triggers include: creating REST APIs, designing microservices, configuring data access (JdbcClient, JPA 3.2, R2DBC), reactive programming (WebFlux), security (Spring Security 7), observability, GraalVM native images, Gradle/Maven build configuration, Jakarta EE 11 migration, and any task requiring idiomatic modern Java (Java 25: records, sealed classes, structured concurrency, scoped values, pattern matching, JSpecify null safety).
iso-17025-de
by cleverlab-ai
"Fachberater für DIN EN ISO/IEC 17025:2018 — die internationale Norm für die Kompetenz von Prüf- und Kalibrierlaboratorien. Verwenden Sie diesen Skill wenn: (1) Vorbereitung auf Akkreditierungs- oder Überwachungsaudits der DAkkS, (2) Aufbau oder Überprüfung von Qualitätsmanagementsystemen für Laboratorien, (3) Erstellung von Verfahren, Richtlinien oder Arbeitsanweisungen gemäß 17025, (4) Erstellung von Audit-Checklisten oder Gap-Analysen, (5) Beantwortung von Fragen zu Laboranforderungen (Unparteilichkeit, Vertraulichkeit, Struktur, Ressourcen, Prozesse, Management), (6) Entwurf von LIMS-Systemen oder Laborsoftware, die 17025-konform sein muss, (7) Bewertung von Methodenvalidierung, Messunsicherheit, metrologischer Rückverfolgbarkeit, (8) Umgang mit fehlerhafter Arbeit, Beschwerden, Korrekturmaßnahmen, (9) Vorbereitung von Managementbewertungen oder internen Audits. Deutsche Version (DE)."
feature-radar-scan
by runkids
Discover new feature opportunities from creative brainstorming, user feedback, ecosystem trends, and cross-project research. Writes results to .feature-radar/opportunities/. MUST use this skill when the user wants to GENERATE new ideas — not evaluate existing ones. Trigger on any request to brainstorm, explore, discover, or find new feature ideas, even casual ones like "I wonder what else we could do" or "give me ideas". Use when the user: - Asks "what else could we build?", "give me feature ideas", "what are we missing?" - Wants to brainstorm, explore new directions, or refresh the opportunity backlog - Says "scan ecosystem", "scan opportunities", "find new features" - Asks to review GitHub issues, community feedback, or adjacent tools for inspiration - Mentions "explore", "discover", or "new directions" in a feature context Do NOT use for evaluating/prioritizing existing features — that's feature-radar's job.
security-stride-methodology
by vinnie357
Activate when conducting security analysis using STRIDE threat modeling, vulnerability assessment, and security architecture evaluation
claude-code-command-patterns
by vinnie357
Activate when creating or modifying Claude Code slash commands with proper frontmatter, Task invocation patterns, and TodoWrite integration
jtbd-psychographic-research
by mike-coulbourn
Provides Jobs-to-be-Done and psychographic research frameworks for brand identity work. Auto-activates during brand positioning, voice development, messaging, and strategy phases. Use when discussing target audience, customer research, JTBD, jobs to be done, four forces, push pull anxiety habit, emotional jobs, social jobs, functional jobs, limbic types, VALS segments, psychographics, or customer motivations.
faion-testing-developer
by faionfaion
"Testing: unit, integration, E2E, TDD, mocking, security testing."
expert-instruction
by YuniorGlez
"Primary Instruction Protocol for Senior Engineering Agents. Expert in Cognitive Architectures, Memory Systems, and 2026 Context Engineering (Updated for v0.27.0)."
mcp-expert
by YuniorGlez
"Senior MCP Architect & Orchestrator. Master of MCP Apps, Server Development (2025-11-25 Spec), and Multi-Agent Tooling."
manus-expert
by YuniorGlez
"Senior Orchestrator for Autonomous Missions. Expert in Manus API v2, Multi-Step Task Logic, and Secure Connectors (RSA-SHA256)."
db-enforcer
by YuniorGlez
"Guardian of Database Integrity. Architect of High-Performance PostgreSQL & Prisma 7 Systems. Expert in PostgreSQL 18, TypedSQL, and Zero-Trust RLS."
pdf-pro
by YuniorGlez
"Master of PDF engineering, specialized in AI-driven extraction, high-fidelity Generation (Puppeteer), and PDF 2.0 Security."
compress-prompt
by jbrukh
Compress a prompt while preserving semantic content. Supports lossy (default, 30-50% reduction) and lossless (--lossless, 100% retention) modes.
auditor-pro
by YuniorGlez
"Senior Security Engineer & Forensic Analyst. Expert in AI-driven vulnerability scanning, CTEM standards, and agentic security orchestration."
code-review-pro
by YuniorGlez
Senior Code Architect & Quality Assurance Engineer for 2026. Specialized in context-aware AI code reviews, automated PR auditing, and technical debt mitigation. Expert in neutralizing "AI-Smells," identifying performance bottlenecks, and enforcing architectural integrity through multi-job red-teaming and surgical remediation suggestions.
create-design-document
by bdmorin
You are an expert in software, cloud and cybersecurity architecture.
analyze-risk
by bdmorin
You are tasked with conducting a risk assessment of a third-party vendor, which involves analyzing their compliance with security and privacy standards.
analyze-discord-structure
by bdmorin
You are an expert Discord server architect and community strategist.
Hacking Fundamentals
by zebbern
This skill should be used when the user asks to "understand hacking basics", "learn about hacker types", "understand network protocols", "learn DNS concepts", "understand attack types", or "explore security tool categories". It provides foundational cybersecurity knowledge.
Broken Authentication Testing
by zebbern
This skill should be used when the user asks to "test for broken authentication vulnerabilities", "assess session management security", "perform credential stuffing tests", "evaluate password policies", "test for session fixation", or "identify authentication bypass flaws". It provides comprehensive techniques for identifying authentication and session management weaknesses in web applications.
task-decomposer
by ttmouse
Decompose Linear todos into actionable, testifiable chunks with rationale, as-is/to-be analysis, expected outputs, and risk assessment for effective project management
Session Security Testing
by zebbern
```
terraform-best-practices
by terramate-io
Terraform and Infrastructure as Code optimization guidelines from Terramate. This skill should be used when writing, reviewing, or refactoring Terraform/OpenTofu code to ensure optimal patterns for security, maintainability, and reliability. Triggers on tasks involving Terraform modules, infrastructure provisioning, state management, or IaC optimization.
Burp Suite Web Application Testing
by zebbern
This skill should be used when the user asks to "intercept HTTP traffic", "modify web requests", "use Burp Suite for testing", "perform web vulnerability scanning", "test with Burp Repeater", "analyze HTTP history", or "configure proxy for web testing". It provides comprehensive guidance for using Burp Suite's core features for web application security testing.