安全
安全扫描与漏洞检测
django-security
affaan-m
Django security best practices, authentication, authorization, CSRF protection, SQL injection prevention, XSS prevention, and secure deployment configurations.
security-review
affaan-m
Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive security checklist and patterns.
configure-ecc
affaan-m
Interactive installer for Everything Claude Code — guides users through selecting and installing skills and rules to user-level or project-level directories, verifies paths, and optionally optimizes installed files.
cto-advisor
borghei
Technical leadership advisor for CTOs on architecture decisions, engineering strategy, team scaling, technical debt management, and technology evaluation.
senior-security
borghei
Expert security engineering covering application security, infrastructure security, threat modeling, penetration testing, and compliance.
DDD Domain Mapping (from QCSD-AGENTIC-QE-MAPPING-FRAMEWORK.md)
proffesor-for-testing
Agentic QE Fleet is an open-source AI-powered quality engineering platform designed for use with Claude Code, featuring specialized agents and skills to support testing activities for a product at any stage of the SDLC. Free to use, fork, build, and contribute. Based on the Agentic QE Framework created by Dragan Spiridonov.
best-practices
addyosmani
Apply modern web development best practices for security, compatibility, and code quality. Use when asked to "apply best practices", "security audit", "modernize code", "code quality review", or "check for vulnerabilities".
spec-to-code-compliance
trailofbits
Verifies code implements exactly what documentation specifies for blockchain audits. Use when comparing code against whitepapers, finding gaps between specs and implementation, or performing compliance checks for protocol implementations.
sharp-edges
trailofbits
"Identifies error-prone APIs, dangerous configurations, and footgun designs that enable security mistakes. Use when reviewing API designs, configuration schemas, cryptographic library ergonomics, or evaluating whether code follows 'secure by default' and 'pit of success' principles. Triggers: footgun, misuse-resistant, secure defaults, API usability, dangerous configuration."
algorand-vulnerability-scanner
trailofbits
Scans Algorand smart contracts for 11 common vulnerabilities including rekeying attacks, unchecked transaction fees, missing field validations, and access control issues. Use when auditing Algorand projects (TEAL/PyTeal).
ton-vulnerability-scanner
trailofbits
Scans TON (The Open Network) smart contracts for 3 critical vulnerabilities including integer-as-boolean misuse, fake Jetton contracts, and forward TON without gas checks. Use when auditing FunC contracts.
api-security-testing
Ed1s0nZ
API安全测试的专业技能和方法论
incident-response
Ed1s0nZ
安全事件响应的专业技能和方法论
secure-code-review
Ed1s0nZ
安全代码审查的专业技能和方法论
security-awareness-training
Ed1s0nZ
安全意识培训的专业技能和方法论
cloud-security-audit
Ed1s0nZ
云安全审计的专业技能和方法论
vulnerability-assessment
Ed1s0nZ
漏洞评估的专业技能和方法论
cloud-design-patterns
github
'Cloud design patterns for distributed systems architecture covering 42 industry-standard patterns across reliability, performance, messaging, security, and deployment categories. Use when designing, reviewing, or implementing distributed system architectures.'
create-github-action-workflow-specification
github
'Create a formal specification for an existing GitHub Actions CI/CD workflow, optimized for AI consumption and workflow maintenance.'
code-review-quality
proffesor-for-testing
"Conduct context-driven code reviews focusing on quality, testability, and maintainability. Use when reviewing code, providing feedback, or establishing review practices."
hyperflow-audit
jeremylongshore
Hyperflow code review. Use when the user wants the current diff, a commit, branch, or PR reviewed — verbs like audit, review, "check for issues", "security check", "code review". Multi-level review (L1 quick → L5 exhaustive), writes findings to .hyperflow/audits/, then a fix-gate.
cve-lookup
sandbaseai
"Look up Common Vulnerabilities and Exposures (CVEs) with severity scores, affected software, exploitability status, and remediation guidance. Essential for security research, vulnerability management, and patch prioritization."
scan-codebase
Agenta-AI
Perform a fresh-context scan of code and docs that turns verification observations and missing-test gaps into findings. Accept optional path and depth parameters and default to path=infer, depth=deep. Confirm effective variables before starting.
owasp-agentic
microsoft
OWASP Agentic Security Top 10 knowledge base for identifying, assessing, and remediating AI agent system security risks.