Security
Security scanning and vulnerability detection
tutor-buddy
by acm-rgb
A pragmatic workflow taking a software project from idea to a secured, GitHub-ready repository, for beginners and vibecoders who want to ship without the usual mistakes. Runs five phases - ideate (have an idea, or get one suggested from the user's profile and current trends), plan (structure, file names, boilerplate, pinned deps), build (execute only the agreed plan, flag deviations first), security-audit (real checks for leaked secrets, vulnerable or typosquatted/hallucinated dependencies, dependency confusion, plus CI and auth hardening, and an honest note on what it cannot verify), and ship (repo hardening and a safe first push). Use whenever someone wants to start a new project or app, has an idea or wants one suggested, asks how to structure or scaffold a project, wants a safety check before shipping, or wants help getting code onto GitHub safely. Triggers include "start a project", "build me an app", "is my project safe", "put this on GitHub", even when tutor-buddy is not named.
Issue Analysis with Label Inference
by ShunsukeHayashi
Analyze GitHub Issues and automatically infer appropriate labels from Miyabi's 57-label system across 11 categories. Use when creating or triaging Issues, or when label inference is needed.
kube-audit-kit
by crazygit
Performs read-only Kubernetes security audits by exporting resources, sanitizing metadata, grouping applications by topology, and generating PSS/NSA-compliant audit reports. Use when the user requests auditing Kubernetes clusters, Namespaces, security reviews, or configuration analysis.
understanding-tauri-architecture
by dchuk
Teaches Claude about Tauri's core architecture, including the Rust backend, webview integration, Core-Shell design pattern, IPC mechanisms, and security model fundamentals.
Security Audit and Vulnerability Scanning
by ShunsukeHayashi
Comprehensive security audit workflow including dependency scanning, unsafe code detection, and secret management. Use when scanning for vulnerabilities or before production deployment.
Issue Analysis with Label Inference
by ShunsukeHayashi
Analyze GitHub Issues and automatically infer appropriate labels from Miyabi's 57-label system across 11 categories. Use when creating or triaging Issues, or when label inference is needed.
understanding-tauri-ecosystem-security
by dchuk
Guides developers through Tauri ecosystem security practices including security auditing, dependency management, vulnerability reporting, and organizational security measures for building secure desktop applications.
aws-cost-operations
by leegonzales
This skill provides AWS cost optimization, monitoring, and operational best practices with integrated MCP servers for billing analysis, cost estimation, observability, and security assessment.
Dependency Management for Cargo and npm
by ShunsukeHayashi
Manage Rust and Node.js dependencies including adding, updating, auditing, and resolving conflicts. Use when updating dependencies or resolving version conflicts.
Dependency Management for Cargo and npm
by ShunsukeHayashi
Manage Rust and Node.js dependencies including adding, updating, auditing, and resolving conflicts. Use when updating dependencies or resolving version conflicts.
distributing-tauri-for-macos
by dchuk
Guides users through distributing Tauri applications on macOS, including creating DMG installers, configuring app bundles, setting up entitlements, and customizing Info.plist files for proper macOS distribution.
Security Audit and Vulnerability Scanning
by ShunsukeHayashi
Comprehensive security audit workflow including dependency scanning, unsafe code detection, and secret management. Use when scanning for vulnerabilities or before production deployment.
configuring-tauri-csp
by dchuk
Guides users through configuring Content Security Policy (CSP) in Tauri v2 applications to prevent XSS attacks and enhance security by restricting resource loading.
by AutumnsGrove
"Comprehensive PDF manipulation, extraction, and generation with support for text extraction, form filling, merging, splitting, annotations, and creation. Use when working with .pdf files for: (1) Extracting text and tables, (2) Filling PDF forms, (3) Merging/splitting PDFs, (4) Creating PDFs programmatically, (5) Adding watermarks/annotations, (6) PDF metadata management"
architecture-principles
by KentoShimizu
"Define architecture principles and review guardrails before choosing monolith, microservices, serverless, or event-driven options. Use when teams need explicit decision criteria; do not use to record final decisions."
security-guardrails
by CsHeng
Comprehensive security implementation standards. Use when security guardrails guidance is required.
check-lightning
by phrazzld
Audit Lightning Network integration. Checks node health, channel balances, peer connectivity, invoice handling, and routing. Use when: reviewing Lightning setup, diagnosing payment failures, or capacity planning. Keywords: lightning, lnd, cln, channels, invoices, bolt11.
check-stripe
by phrazzld
Audit Stripe integration: configuration, webhooks, subscription logic, security. Outputs structured findings. Use log-stripe-issues to create issues. Invoke for: Stripe audit, payment review, subscription analysis.
networking-controls
by CsHeng
Network security and connectivity standards. Use when networking controls guidance is required.
saas-security
by vitormiziara
Comprehensive SaaS security skill covering code auditing, checklist generation, and vulnerability reporting. TRIGGER this skill whenever the user asks to: audit code for security issues, review a codebase for vulnerabilities, generate a security checklist, check for OWASP compliance, review authentication or authorization logic, check for injection risks, race conditions, or insecure configurations, or asks anything related to SaaS security hardening. Also trigger proactively when the user shares code and asks for a review — always include a security perspective using this skill.
testing-validation
by vanman2024
Comprehensive testing and validation tools for Clerk authentication integrations. Includes E2E auth flow testing, security audits, configuration validation, unit testing patterns for sign-in/sign-up flows. Use when implementing Clerk tests, validating authentication setup, testing auth flows, running security audits, creating E2E tests for Clerk, or when user mentions Clerk testing, auth validation, E2E authentication tests, security audit, or test coverage.
deployment-docker
by CsHeng
Docker and containerization guidelines. Use when deployment docker guidance is required.
fastapi-auth-patterns
by vanman2024
Implement and validate FastAPI authentication strategies including JWT tokens, OAuth2 password flows, OAuth2 scopes for permissions, and Supabase integration. Use when implementing authentication, securing endpoints, handling user login/signup, managing permissions, integrating OAuth providers, or when user mentions JWT, OAuth2, Supabase auth, protected routes, access control, role-based permissions, or authentication errors.
quality-standards
by CsHeng
Code quality metrics and continuous improvement. Use when quality standards guidance is required.