安全
安全扫描与漏洞检测
security-review
dhkong01
Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive security checklist and patterns.
blind-spot-scanner
qingchunwuhui
全景盲点扫描仪 - 使用 5W1H 方法强制拷问文档/方案，发现逻辑漏洞和执行盲点。
grounded-research
Out-treatyofversailles910
Enforces source-grounded, citation-first research discipline. Use this skill whenever the user asks to research a topic, fact-check a claim, summarize recent findings, look up current information, explain what the evidence says about something, or produce any factual output where accuracy and verifiability matter. Trigger even on conversational phrasing like "what's the deal with X", "is it true that Y", "what do experts say about Z", or "can you check if..." — if the answer requires facts that could be wrong or outdated, this skill applies. When in doubt, use it.
workers-specialist
SteveLeve
Provide Cloudflare Workers runtime guidance for routing, bindings, performance, security headers, rate limiting, and Hono patterns used in this repo.
spring-boot-ultimate
halilugur
Spring Boot patterns, best practices, and code generation for REST APIs, JWT authentication, JPA, pagination, and modern Spring Boot development (Java 21+, Spring Boot 4.x)
express
kprsnt2
Express.js server best practices including middleware, error handling, and security.
vivipractice
Verovian-PMR
Apex Architect persona for building the VivIPractice PharmaConnect Platform. Use this skill when working on any VivIPractice/PharmaConnect task including: pharmacy dashboard, public website, booking engine, control hub, component library, single-tenant infrastructure, service management, scheduling, or any pharmacy platform development. Activates the Apex Architect engineering mode with enterprise HealthTech standards (HIPAA/GDPR, PHI security, WCAG 2.1 AA).
arc-sentinel
arc-claw-bot
Security monitoring and infrastructure health checks for OpenClaw agents. Run breach monitoring (HaveIBeenPwned), SSL certificate expiry checks, GitHub security audits, credential rotation tracking, secret scanning, git hygiene, token watchdog, and permission audits. Use when performing security scans, checking credential rotation status, auditing repos for leaked secrets, or monitoring SSL certificates and infrastructure health.
clean-transient-comments
iamkaf
Use when the user asks to "clean transient comments", "remove temporary comments", or remove comments that describe past changes rather than documenting current code.
docs-cleaner
aleister1102
Dedupe and consolidate redundant docs (multiple sources of truth, overlapping guides, or docs over 500 lines). Use when merging/splitting to a canonical doc. Do not use for typo-only edits, code-driven doc updates (run update-docs first), or when archives must be preserved without change.
exegol-pentest
corploc
Use when setting up or managing pentest environments with Exegol, launching offensive security containers, configuring VPN/network for engagements, or when the user mentions Exegol, pentest lab, HTB, CTF environment setup
Investigation Report
Atrium-Hermes
One-shot composite investigation of a Base token — runs rug-scan, contract-audit, deployer-trace and holder-concentration and merges them into a single report with an at-a-glance verdict. Keyless core; a Basescan key deepens it.
typescript-review
bromanko
This skill should be used when the user asks to "review TypeScript", "full TypeScript review", "review all TypeScript", "comprehensive TypeScript review", or wants a complete review covering code quality, security, performance, and testing for TypeScript code.
executive-ciso
shaul1991
Executive CISO Agent. 보안 정책, 리스크 관리, 컴플라이언스를 담당합니다.
code-upkeep
Sylla-BV
This skill should be used when the user asks to "update docstrings", "audit docstrings", "fix docstrings", "add docstrings", "check docstrings", "Google-style docstrings", "add field descriptions", "update tests", "audit test coverage", "generate tests", "add tests", "fix tests", "write pytest tests", "check test coverage", "missing tests", "stale tests", "test this module", "add test cases", "bring code up to date", "code upkeep", "maintain code", or wants to audit and update Python docstrings or tests.
polymarket-autopilot
spoonbobo
Paper-trade Polymarket prediction markets — scan for opportunities using TAIL, BONDING, and SPREAD strategies, simulate trades, and track portfolio performance.
gitleaks-scan
MILTONADINA
Run gitleaks against the working tree to detect committed secrets, API keys, tokens, and credentials. Use whenever a file has been written, before any git commit, before any push, and as part of the tiered security gate. Catches the most common cause of credential leaks - accidental commits.
secure-flow
FluxA-Agent-Payment
A comprehensive security skill that integrates with Secure Flow to help AI coding agents write secure code, perform security reviews, and implement security best practices. Use this skill when writing, reviewing, or modifying code to ensure secure-by-default practices are followed.
production-readiness
simplerick0
Comprehensive checklist and guidance for preparing applications for production deployment. Use for launch readiness reviews, pre-deployment checklists, monitoring setup, backup planning, security hardening, error tracking configuration, and operational runbook creation.
compliance-automation-specialist
YPYT1
Use this agent when you need to automate compliance processes for SOC 2, ISO 27001, GDPR, HIPAA, and other enterprise regulatory requirements. This agent specializes in compliance automation, audit...
security-review
jankneumann
Run reusable cross-project security review with profile detection, OWASP Dependency-Check, ZAP container scanning, and risk-gated reporting
owasp-security-check
Emerson1337
Security audit guidelines for web applications and REST APIs based on OWASP Top 10 and web security best practices. Use when checking code for vulnerabilities, reviewing auth/authz, auditing APIs, or before production deployment.
code-review-assistant
fusionet24
Activates when reviewing code to identify quality issues, security vulnerabilities, and suggest improvements
scan-large-images
zxhfighter
扫描当前项目目录，查找所有超过指定尺寸或文件大小的图片文件