安全
安全扫描与漏洞检测
code-reviewer
jgarrison929
Use when reviewing code changes, pull requests, or asking for code quality feedback. Covers readability, maintainability, security, performance, error handling, naming conventions, and test coverage.
crisis-manager
famaoai-creator
Provides rapid response during production incidents or critical security breaches. Coordinates diagnostics, temporary fixes, and post-mortem data collection.
test-audit
juliomrqz
Audit test suites (unit, integration, feature/E2E) for correctness, quality, and best practices. Use when the user wants to review, audit, validate, or improve tests in any programming language or framework (Jest, pytest, RSpec, JUnit, PHPUnit, etc.). Triggers on requests like "audit my tests", "review test quality", "check my test coverage", "are my tests good", or any request to evaluate test effectiveness.
frontend-security
schalkneethling
Audit frontend codebases for security vulnerabilities and bad practices. Use when performing security reviews, auditing code for XSS/CSRF/DOM vulnerabilities, checking Content Security Policy configurations, validating input handling, reviewing file upload security, or examining Node.js/NPM dependencies. Target frameworks include web platform (vanilla HTML/CSS/JS), React, Astro, Twig templates, Node.js, and Bun. Based on OWASP security guidelines.
secure-mcp-install
HartreeWorks
'This skill should be used when the user asks to install or audit an MCP server, especially from third-party sources. Security-focused: clones at pinned commits, runs security scans.'
code-review
Nirav846
Use when code has been written and needs validation before committing, or when the user asks for a code review or security check.
security-review
adui-studio
'AI-powered codebase security scanner that reasons about code like a security researcher — tracing data flows, understanding component interactions, and catching vulnerabilities that pattern-matching tools miss. Use this skill when asked to scan code for security vulnerabilities, find bugs, check for SQL injection, XSS, command injection, exposed API keys, hardcoded secrets, insecure dependencies, access control issues, or any request like "is my code secure?", "review for security issues", "audit this codebase", or "check for vulnerabilities". Covers injection flaws, authentication and access control bugs, secrets exposure, weak cryptography, insecure dependencies, and business logic issues across JavaScript, TypeScript, Python, Java, PHP, Go, Ruby, and Rust.'
pre-commit-review
ichuan
"Comprehensive code review for uncommitted changes before git commit. Use when users want to: (1) Review code changes before committing, (2) Check for security vulnerabilities, bugs, or performance issues, (3) Get feedback on code quality and best practices, (4) Identify issues by severity level. Triggered by phrases like 'review my changes', 'check my code', 'review before commit', 'code review', or similar requests for pre-commit validation."
post-quantum-shield
famaoai-creator
Output path for report
static-security-hardening
CMSForNerd
"Applies static security whitelisting, cryptographic CSP hashes, OWASP standard defensive headers, and static performance caching."
security-assessment
spjoshis
Master security assessments with vulnerability scanning, penetration testing, security testing, and security audits.
devcontainer-security
daaain
Guide for setting up secured VS Code dev containers for coding agents. Use when creating or hardening a DevContainer to sandbox Claude Code or other coding agents, configuring Docker socket proxies, handling VS Code IPC escape vectors, setting up git worktree support, or verifying security controls. Covers threat model, three-layer defence architecture, Node.js/pnpm setup, and verification testing.
security-auditor
jgarrison929
Use when reviewing code for security vulnerabilities, implementing authentication flows, auditing OWASP Top 10, configuring CORS/CSP headers, handling secrets, input validation, SQL injection prevention, XSS protection, or any security-related code review.
mcp-security-audit
adui-studio
Audit MCP (Model Context Protocol) server configurations for security issues. Use this skill when: - Reviewing .mcp.json files for security risks - Checking MCP server args for hardcoded secrets or shell injection patterns - Validating that MCP servers use pinned versions (not @latest) - Detecting unpinned dependencies in MCP server configurations - Auditing which MCP servers a project registers and whether they're on an approved list - Checking for environment variable usage vs. hardcoded credentials in MCP configs - Any request like "is my MCP config secure?", "audit my MCP servers", or "check .mcp.json" keywords: [mcp, security, audit, secrets, shell-injection, supply-chain, governance]
backend-principle-eng-java-pro-max
PrakharMNNIT
"Principal backend engineering intelligence for Java services and distributed systems. Actions: plan, design, build, implement, review, fix, optimize, refactor, debug, secure, scale backend code and architectures. Focus: correctness, reliability, performance, security, observability, scalability, operability, cost."
SakJules-claude-security
beer-sakthai
"The Claude Security menu — pick a job: scan the codebase (the whole repository or a scoped part of it), scan changes (this branchs or a pull requests diff, or one commit), or suggest patches (findings turned into targeted patch files, each verified b"
SakJules-devsecops
beer-sakthai
"Orchestrates static analysis, vulnerability scanning, and automated patching into a continuous security workflow."
openclaw-ops
ImL1s
OpenClaw 運維全指南 — 安裝設定、模型管理、遷移、cron 任務、安全檢查、除錯。當需要管理、遷移、排錯 OpenClaw 時使用此 skill。觸發關鍵字："OpenClaw 設定", "OpenClaw 遷移", "Gateway 管理", "cron 任務", "模型設定", "Telegram bot", "OpenClaw 安全檢查"。
compliance-officer
famaoai-creator
status: implemented
context
coreindustries
"Audit auto-loaded context budget, detect redundancy, and recommend optimizations."
agent-delegation
ichi-h
orchestratorが使用するサブエージェント選択ガイドと委譲パターンを定義します。エージェントカタログ、共通委譲指示、エラーハンドリングパターンを提供します。
dependency-updater
CuriousLearner
Smart dependency update checker with changelog summaries and breaking change detection.
code-reviewer
CuriousLearner
Automated code review with best practices, security checks, and quality standards.
compliance-checker
CuriousLearner
Check code against security compliance standards and best practices.