安全
安全扫描与漏洞检测
code-review:review-local-changes
NeoLabHQ
Comprehensive review of local uncommitted changes using specialized agents with code improvement suggestions
code-review
NousResearch
Guidelines for performing thorough code reviews with security and quality focus
blogwatcher
NousResearch
Monitor blogs and RSS/Atom feeds for updates using the blogwatcher CLI. Add blogs, scan for new articles, and track what you've read.
code-quality-review
rsmdt
Systematic code review patterns, quality dimensions, anti-pattern detection, and constructive feedback techniques. Use when reviewing code changes, assessing codebase quality, identifying technical debt, or mentoring through reviews. Covers correctness, design, security, performance, and maintainability.
coding-conventions
rsmdt
Apply consistent security, performance, and accessibility standards across all recommendations. Use when reviewing code, designing features, or validating implementations. Cross-cutting skill for all agents.
security-assessment
rsmdt
Vulnerability review, OWASP patterns, secure coding practices, and threat modeling approaches. Use when reviewing code security, designing secure systems, performing threat analysis, or validating security implementations.
find-bugs
getsentry
Find bugs, security vulnerabilities, and code quality issues in local branch changes. Use when asked to review changes, find bugs, security review, or audit code on the current branch.
skill-scanner
getsentry
Scan agent skills for security issues. Use when asked to "scan a skill",
crossing-the-chasm
wondelai
'Navigate the technology adoption lifecycle from early adopters to mainstream market. Use when the user mentions "crossing the chasm", "beachhead segment", "whole product", "early adopters vs. mainstream", or "tech go-to-market". Covers D-Day analogy, bowling-pin strategy, and positioning against incumbents. For product positioning, see obviously-awesome. For new market creation, see blue-ocean-strategy.'
negotiation
wondelai
'Prepare and execute negotiations using tactical empathy, calibrated questions, and the Ackerman method. Use when the user mentions "salary negotiation", "contract terms", "handling objections", "mirroring and labeling", or "difficult conversation". Covers accusation audits, Black Swan discovery, and the "That''s Right" technique. For persuasion in product/marketing, see influence-psychology.'
agent-agentic-payments
ruvnet
Agent skill for agentic-payments - invoke with $agent-agentic-payments
github-workflow-automation
ruvnet
Advanced GitHub Actions workflow automation with AI swarm coordination, intelligent CI/CD pipelines, and comprehensive repository management
swarm-advanced
ruvnet
Advanced swarm orchestration patterns for research, development, testing, and complex distributed workflows
V3 Security Overhaul
ruvnet
"Complete security architecture overhaul for claude-flow v3. Addresses critical CVEs (CVE-1, CVE-2, CVE-3) and implements secure-by-default patterns. Use for security-first v3 implementation."
agent-agentic-payments
ruvnet
Agent skill for agentic-payments - invoke with $agent-agentic-payments
agent-app-store
ruvnet
Agent skill for app-store - invoke with $agent-app-store
agent-challenges
ruvnet
Agent skill for challenges - invoke with $agent-challenges
agent-code-review-swarm
ruvnet
Agent skill for code-review-swarm - invoke with $agent-code-review-swarm
agent-arch-system-design
ruvnet
Agent skill for arch-system-design - invoke with $agent-arch-system-design
agent-code-analyzer
ruvnet
Agent skill for code-analyzer - invoke with $agent-code-analyzer
agent-byzantine-coordinator
ruvnet
Agent skill for byzantine-coordinator - invoke with $agent-byzantine-coordinator
security-scan
affaan-m
Scan your Claude Code configuration (.claude/ directory) for security vulnerabilities, misconfigurations, and injection risks using AgentShield. Checks CLAUDE.md, settings.json, MCP servers, hooks, and agent definitions.
enterprise-agent-ops
affaan-m
Operate long-lived agent workloads with observability, security boundaries, and lifecycle management.
springboot-security
affaan-m
Spring Security best practices for authn/authz, validation, CSRF, secrets, headers, rate limiting, and dependency security in Java Spring Boot services.