安全
安全扫描与漏洞检测
memory-scan
dgriffin831
Safe to run frequently (minimal API cost with efficient chunking)
config-analyzer
dgriffin831
Analyze configuration files for validation and best practices
scan
designnotdrum
"On-demand trend scan for a topic. Search HN and GitHub for what's happening now."
Gemini CLI
rafaelcalleja
Consult Google Gemini CLI for second opinions on architecture, debugging, and security audits. Use Gemini's 1M+ context window for comprehensive code analysis. Compare Flash (fast) vs Pro (thorough) vs 3-Pro-Preview (cutting-edge). Use when: need second opinion on architectural decisions, stuck debugging after 2+ attempts, writing security- sensitive code, planning refactors (5+ files), approaching 70%+ context capacity, unfamiliar with tech stack, need peer review, or want Flash vs Pro vs 3-Pro-Preview comparison. Keywords: gemini-cli, google gemini, gemini command line, second opinion, model comparison, gemini-2.5-flash, gemini-2.5-pro, gemini-3-pro-preview, architectural decisions, debugging assistant, code review gemini, security audit gemini, 1M context window, AI pair programming, gemini consultation, flash vs pro, AI-to-AI prompting, peer review, codebase analysis, gemini CLI tool, shell gemini, command line AI assistant, gemini architecture advice, gemini debug help, gemini security scan, gemini code compare
legitimacy-signals
SanctifiedOps
How to project legitimacy for Solana projects: disclosures, address registry, audits, comms patterns, red-flag avoidance. Use for project pages, announcements, and community trust work.
security-audit
paulund
Use when running a comprehensive security audit on a web application to produce a structured report with severity-ranked findings and remediation guidance.
researching-best-practices
C0ntr0lledCha0s
Automatically activated when user asks "what's the best way to...", "how should I...", "what are best practices for...", or requests recommendations, industry standards, or proven approaches for implementing features
system-design
pluginagentmarketplace
System design, software architecture, API design, cybersecurity, and threat modeling. Build secure, scalable systems.
input-guard
dgriffin831
Scan untrusted external text (web pages, tweets, search results, API responses) for prompt injection attacks. Returns severity levels and alerts on dangerous content. Use BEFORE processing any text from untrusted sources.
program-security-basics
SanctifiedOps
Baseline security checklist for Solana programs: authority checks, input validation, upgrade keys, unsafe patterns, and attack surfaces. Use for design reviews and pre-deploy audits.
hipaa-compliance
peixotorms
Use when handling health data, patient records, medical systems, PHI, ePHI, healthcare APIs, EHR integrations, telehealth, health apps, or any code processing Protected Health Information — HIPAA Security Rule technical safeguards, 18 identifiers, Safe Harbor, Expert Determination, 164.312, access control, audit log, encryption at rest, encryption in transit, BAA, Business Associate Agreement, minimum necessary, breach notification, HHS, OCR, de-identification
vulnerability-discovery
pluginagentmarketplace
Systematic vulnerability finding, threat modeling, and attack surface analysis for AI/LLM security assessments
best-practices
thoreinstein
Apply modern web development best practices for security, compatibility, and code quality. Use when asked to "apply best practices", "security audit", "modernize code", "code quality review", or "check for vulnerabilities".
backend-development
mamba-mental
Build robust backend systems with modern technologies (Node.js, Python, Go, Rust), frameworks (NestJS, FastAPI, Django), databases (PostgreSQL, MongoDB, Redis), APIs (REST, GraphQL, gRPC), authentication (OAuth 2.1, JWT), testing strategies, security best practices (OWASP Top 10), performance optimization, scalability patterns (microservices, caching, sharding), DevOps practices (Docker, Kubernetes, CI/CD), and monitoring. Use when designing APIs, implementing authentication, optimizing database queries, setting up CI/CD pipelines, handling security vulnerabilities, building microservices, or developing production-ready backend systems.
cloudflare-security-checker
hirefrank
Automatically validates Cloudflare Workers security patterns during development, ensuring proper secret management, CORS configuration, and input validation
analyze
thoreinstein
Deep analysis mode - thorough multi-phase investigation with expert consultation for complex problems requiring careful examination
analyzing-component-quality
C0ntr0lledCha0s
Expert at analyzing the quality and effectiveness of Claude Code components (agents, skills, commands, hooks). Assumes component is already technically valid. Evaluates description clarity, tool permissions, auto-invoke triggers, security, and usability to provide quality scores and improvement suggestions.
web-security-standards
cuioss
Trusted domains, security assessment patterns, and domain research standards for WebFetch permissions
django-development
rcgsheffield
Comprehensive guide for building Django web applications following Django 5.2 standards and industry best practices. Use when developing Django projects, implementing models/views/templates, configuring settings, handling forms, ensuring security, or deploying Django applications.
permission-management
cuioss
Permission validation, architecture patterns, anti-patterns, and best practices for Claude Code settings management
security-audit
factorial-io
Use when conducting security reviews, investigating vulnerabilities, or creating security documentation - provides systematic methodology for code audits with severity assessment, dual documentation patterns (client + internal), and acceptance-focused ticket creation
rails-health-audit
srichsun
Audit the health of any Rails codebase and produce a severity-ranked action plan. Use when asked to audit, health-check, scan, or assess a Rails project for security/performance/maintainability issues, or plan a refactor/optimization. A single "audit X" request always means BOTH run the scan AND deliver a filled, prioritized action plan in one go — never hand back a blank template.
impeccable-audit
SebastiaanWouters
"Skills-only equivalent of impeccable.style /audit. Perform comprehensive audit of interface quality across accessibility, performance, theming, and responsive design. Generates detailed report of issues with severity ratings and recommendations. Use for frontend and UI design tasks."
systemd-units
rcgsheffield
Create and harden systemd service unit files following modern best practices. Use when writing new systemd units for web applications, background workers, or daemons, or when hardening existing services with security sandboxing and isolation features. Covers service types, dependencies, restart policies, security options, and filesystem restrictions.