Security
Security scanning and vulnerability detection
OS Keychain Skill
by martinholovsky
The OS keychain is your first line of defense. Misuse negates all downstream encryption.
Auto-Update Systems Expert
by martinholovsky
Expert in Tauri auto-update implementation with focus on signature verification, rollback mechanisms, staged rollouts, and secure update distribution
rust
by martinholovsky
Systems programming expertise for Tauri desktop application backend development with memory safety and performance optimization
macos-accessibility
by martinholovsky
"Expert in macOS Accessibility APIs (AXUIElement) for desktop automation. Specializes in secure automation of macOS applications with proper TCC permissions, element discovery, and system interaction. HIGH-RISK skill requiring strict security controls."
python
by martinholovsky
Backend services development with Python emphasizing security, performance, and maintainability for JARVIS AI Assistant
prompt-engineering
by martinholovsky
"Expert skill for prompt engineering and task routing/orchestration. Covers secure prompt construction, injection prevention, multi-step task orchestration, and LLM output validation for JARVIS AI assistant."
devsecops-expert
by martinholovsky
"Expert DevSecOps engineer specializing in secure CI/CD pipelines, shift-left security, security automation, and compliance as code. Use when implementing security gates, container security, infrastructure scanning, secrets management, or building secure supply chains."
Sandboxing Skill
by martinholovsky
Sandboxing is your last line of defense. When everything else fails, the sandbox must hold.
linux-at-spi2
by martinholovsky
"Expert in AT-SPI2 (Assistive Technology Service Provider Interface) for Linux desktop automation. Specializes in accessible automation of GTK/Qt applications via D-Bus accessibility interface. HIGH-RISK skill requiring security controls for system-wide access."
harbor-expert
by martinholovsky
"Expert Harbor container registry administrator specializing in registry operations, vulnerability scanning with Trivy, artifact signing with Notary, RBAC, and multi-region replication. Use when managing container registries, implementing security policies, configuring image scanning, or setting up disaster recovery."
SQLCipher Encrypted Database Expert
by martinholovsky
Expert in SQLCipher encrypted database development with focus on encryption key management, key rotation, secure data handling, and cryptographic best practices
fastapi
by martinholovsky
REST API and WebSocket development with FastAPI emphasizing security, performance, and async patterns
Security Auditing Skill
by martinholovsky
If it's not logged, it didn't happen. If logs can be tampered, you can't prove anything.
kanidm-expert
by martinholovsky
"Expert in Kanidm modern identity management system specializing in user/group management, OAuth2/OIDC, LDAP, RADIUS, SSH key management, WebAuthn, and MFA. Deep expertise in secure authentication flows, credential policies, access control, and platform integrations. Use when implementing identity management, SSO, authentication systems, or securing access to infrastructure."
dbus
by martinholovsky
"Expert in D-Bus IPC (Inter-Process Communication) on Linux systems. Specializes in secure service communication, method calls, signal handling, and system integration. HIGH-RISK skill due to system service access and privileged operations."
SQLite Database Expert
by martinholovsky
Expert in SQLite embedded database development for Tauri/desktop applications with focus on SQL injection prevention, migrations, FTS search, and secure data handling
cicd-expert
by martinholovsky
"Elite CI/CD pipeline engineer specializing in GitHub Actions, GitLab CI, Jenkins automation, secure deployment strategies, and supply chain security. Expert in building efficient, secure pipelines with proper testing gates, artifact management, and ArgoCD/GitOps patterns. Use when designing pipelines, implementing security gates, or troubleshooting CI/CD issues."
browser-automation
by martinholovsky
"Expert in browser automation using Chrome DevTools Protocol (CDP) and WebDriver. Specializes in secure web automation, testing, and scraping with proper credential handling, domain restrictions, and audit logging. HIGH-RISK skill due to web access and data handling."
CI/CD Pipeline Security Expert
by martinholovsky
Expert in CI/CD pipeline design with focus on secret management, code signing, artifact security, and supply chain protection for desktop application builds
Model Context Protocol (MCP) Skill
by martinholovsky
Commit only when all pass
applescript
by martinholovsky
"Expert in AppleScript and JavaScript for Automation (JXA) for macOS system scripting. Specializes in secure script execution, application automation, and system integration. HIGH-RISK skill due to shell command execution and system-wide control capabilities."
wordpress-pro
by paulund
Use when developing WordPress themes, plugins, customizing Gutenberg blocks, implementing WooCommerce features, or optimizing WordPress performance and security.
creative-writer
by dgriffin831
Help agents write creative content
design-reviewer
by gaebalai
Copilot agent that assists with systematic design review using ATAM (Architecture Tradeoff Analysis Method), SOLID principles, design patterns, coupling/cohesion analysis, error handling, and security requirements Trigger terms: design review, architecture review, ATAM, SOLID principles, design patterns, coupling, cohesion, ADR review, C4 review, architecture analysis, design quality Use when: User requests involve design document review, architecture evaluation, or design quality assessment tasks.