安全
安全扫描与漏洞检测
aif-security-checklist
lee-to
Security audit checklist based on OWASP Top 10 and best practices. Covers authentication, injection, XSS, CSRF, secrets management, and more. Use when reviewing security, before deploy, asking "is this secure", "security check", "vulnerability".
humanizer
zed-industries
Remove signs of AI-generated writing from text. Use after drafting to make copy sound more natural and human-written. Based on Wikipedia's "Signs of AI writing" guide.
apollo-security-basics
Dicklesworthstone
Apply Apollo.io API security best practices. Use when securing Apollo integrations, managing API keys, or implementing secure data handling. Trigger with phrases like "apollo security", "secure apollo api", "apollo api key security", "apollo data protection".
react-doctor
millionco
Run after making React changes to catch issues early. Use when reviewing code, finishing a feature, or fixing bugs in a React project.
prowler-docs
prowler-cloud
Prowler documentation style guide and writing standards. Trigger: When writing documentation for Prowler features, tutorials, or guides.
Pentest Validation
proffesor-for-testing
Agentic QE Fleet is an open-source AI-powered quality engineering platform designed for use with Claude Code, featuring specialized agents and skills to support testing activities for a product at any stage of the SDLC. Free to use, fork, build, and contribute. Based on the Agentic QE Framework created by Dragan Spiridonov.
QE Security Compliance
proffesor-for-testing
"Security auditing, vulnerability scanning, and compliance validation for OWASP, SOC2, GDPR, and other standards."
bmad-os-audit-file-refs
bmad-code-org
Audit BMAD source files for file-reference convention violations using parallel Haiku subagents. Use when users requests an "audit file references" for a skill, workflow or task.
reviewing-python-libraries
wdm0006
Comprehensively reviews Python libraries for quality across project structure, packaging, code quality, testing, security, documentation, API design, and CI/CD. Provides actionable feedback and improvement recommendations. Use when evaluating library health, preparing for major releases, or auditing dependencies.
auditing-python-security
wdm0006
Audits Python libraries for security vulnerabilities using Bandit, pip-audit, Semgrep, and detect-secrets. Identifies SQL injection, command injection, hardcoded credentials, weak cryptography, and insecure deserialization. Use when reviewing library security, setting up security scanning in CI, or implementing secure coding patterns.
codex-autoresearch
leo-lilinxiao
"Autonomous long-running iteration for Codex CLI. Use when the user wants Codex to plan or run an unattended improve-verify loop toward a measurable or verifiable outcome, especially for overnight runs; it also covers repeated debugging, fixing, security auditing, and ship-readiness workflows. Do not use for ordinary one-shot coding help or casual Q&A."
/a11y-ally - Comprehensive Accessibility Audit
proffesor-for-testing
Agentic QE Fleet is an open-source AI-powered quality engineering platform designed for use with Claude Code, featuring specialized agents and skills to support testing activities for a product at any stage of the SDLC. Free to use, fork, build, and contribute. Based on the Agentic QE Framework created by Dragan Spiridonov.
n8n-security-testing
proffesor-for-testing
"Credential exposure detection, OAuth flow validation, API key management testing, and data sanitization verification for n8n workflows. Use when validating n8n workflow security."
testing-handbook-skills
elizaOS
"Application security testing toolkit from the Trail of Bits Testing Handbook. Covers fuzzing (libFuzzer, AFL++, cargo-fuzz, Atheris, Ruzzy), coverage analysis, harness writing, sanitizers, static analysis (Semgrep, CodeQL), and cryptographic testing (Wycheproof, constant-time)."
static-analysis
elizaOS
"Static analysis toolkit with CodeQL, Semgrep, and SARIF parsing for security vulnerability detection. Use when running static analysis scans, writing custom detection rules, or processing analysis results."
blogwatcher
elizaOS
Monitor blogs and RSS/Atom feeds for updates using the blogwatcher CLI.
sharp-edges
elizaOS
"Identifies error-prone APIs, dangerous configurations, and footgun designs that enable security mistakes. Use when reviewing API designs, configuration schemas, cryptographic library ergonomics, or evaluating whether code follows 'secure by default' and 'pit of success' principles. Triggers: footgun, misuse-resistant, secure defaults, API usability, dangerous configuration."
spec-to-code-compliance
elizaOS
Verifies code implements exactly what documentation specifies for blockchain audits. Use when comparing code against whitepapers, finding gaps between specs and implementation, or performing compliance checks for protocol implementations.
openwork-debug
different-ai
Debug OpenWork sidecars, config, and audit trail
network-scan
proficientlyjobs
Scan your LinkedIn contacts' companies for matching job openings
openclaw-audit-watchdog
prompt-security
Automated daily security audits for OpenClaw agents with email reporting. Runs deep audits and sends formatted reports.
claw-release
prompt-security
Release automation for Claw skills and website. Guides through version bumping, tagging, and release verification.
clawtributor
prompt-security
Community incident reporting for AI agents. Contribute to collective security by reporting threats.
clawsec-feed
prompt-security
Security advisory feed with automated NVD CVE polling for OpenClaw-related vulnerabilities. Updated daily.