Security AI Skills

Create a reusable, evidence-backed competitive battlecard for sales, customer success, or product teams - a new card, or one rebuilt from scratch. Use when preparing an us-vs-them view for repeated…

Security audit of Cairo/Starknet code. Trigger on "audit", "check this contract", "review for security". Modes - default (full repo), deep (+ adversarial reasoning), or specific filenames.

Anwendungen nach Apples Human Interface Guidelines entwickeln, überarbeiten und prüfen. Verwende diesen Skill bei Apple-HIG-Anforderungen, nativen iOS-, iPadOS-, macOS-, watchOS-, tvOS- und…

Multi-phase security scanner using 12 parallel specialized subagents with SQLite progress tracking. Findings persist to DB for compaction resilience. Best for large repos. Use when asked to…

API documentation specialist for OpenAPI/Swagger specifications. Use when documenting REST or GraphQL APIs.

Quantum-resistant, self-learning version control for AI agents with ReasoningBank intelligence and multi-agent coordination

Diagnose and improve acquisition conversion across landing pages, forms, popups and signup/account creation through registration or qualified handoff. Use for CRO, abandonment, demo requests and…

API reference for CoinMarketCap DEX endpoints including token lookup, pools, transactions, trending, and security analysis. Use this skill whenever the user mentions DEX API, asks about on-chain token…

Grades a repository's GitHub Actions configuration against CI best practices (the CI Score: eleven pass/fail configuration facts computed from the repo's own workflow YAML) and hands back concrete…

审查 Vibe Coding、AI 生成或原型前端，按请求执行快速体检或逐页逐组件完整审查，输出有证据的问题、修复方案与验收条件。适用于前端体检、全站 review 和上线前工程交接；明确要求修复时才实施。

Comprehensive Docker and Docker Compose validation following best practices and security standards. Use this skill when users ask to validate Dockerfiles, review Docker configurations, check Docker…

Scope the tonone agent roster for this project — install a curated subset of agents instead of the full 100-agent bundle. Use when "cut down the agent list", "profile for this project", "too many…

Connect, inspect, group, or disconnect social accounts in PostPeer. Use when the user asks to add OAuth integrations, connect LinkedIn, TikTok, Instagram, YouTube, Facebook, X, Pinterest, Threads,…

Manage AWS profiles for MCP servers — discover SSO, Granted and role-chain profiles, check authentication with STS, switch configured profiles, and scan AWS Organization accounts. TTL is unknown…

Comprehensive WordPress plugin review covering security vulnerabilities, WordPress Coding Standards (WPCS) compliance, plugin repository guidelines, unit test coverage, and accessibility. Runs…

Use when the user asks to generate, create, write, or add unit tests for existing code, or to cover a class, method, or file with tests — including Java targets using JUnit 5, Mockito, or AssertJ. Not…

Catalyst Authentication — user login/signup, ZAID, Web SDK auth flows, OAuth token management via Connections, third-party authentication (Okta, Auth0, Duo, custom IdP), social logins (Google,…

Register as an agent on Kaggle, take a standardized exam, and earn a score.

Orchestrate multiple Antigravity skills through guided workflows for SaaS MVP delivery, security audits, AI agent builds, and browser QA.

Use when working with a Remnawave VPN stack — designing, generating, or debugging selfsteal nodes built on VLESS + Reality + XTLS-Vision (Xray-core), Caddy selfsteal masking, and mihomo (Clash.Meta)…

Server-driven architecture patterns for Inertia Rails + React. Load this FIRST when building any Inertia page or feature — it routes to the right skill. Decision matrix for data loading, forms,…

Use when verifying vulnerabilities with Dynamic Exploit Generation (Phase 3)

Use when handling customer-facing OCI landing zone design or deployment questions, especially when the customer describes an outcome such as running OKE and may not know repo terms such as One-OE, hub…

Write or revise prose in the voice of a thoughtful, careful, precise academic who cares deeply about reader understanding and writes with personality and purpose. Use for research exposition,…

AI-powered code review. Catches bugs, suggests improvements, checks style. Analyzes code changes, diffs, or pull requests and provides actionable, prioritized feedback. Use when the user wants a code…

Set up or verify Slack in Backoffice for bot-token API calls, sending messages, Events API webhooks, app mentions, URL verification, signing-secret validation, or checking whether a Slack event…

Control the local macOS machine — move/click the mouse, type and press key combos, take screenshots, and launch/quit/activate apps via AppleScript and native CLI tools. Use this skill when Claude…

Investigate and prioritize vulnerable images in a Sysdig-monitored environment via two flows, routed from the user's goal. Plans flow — plan-driven prioritization: pick an admin-configured Plan (or…

自主运行 Claude Code 循环的模式与架构 —— 从简单的顺序流水线到 RFC 驱动的多智能体 DAG 系统。

Find related Wazuh activity around a case by time window and entity pivots, detect kill-chain progression and campaigns across hosts; use after triage when a case needs its surrounding context.

Backtest phase 3.6 of threat-model production against historical findings before sign-off. USE WHEN a draft model must prove it can uniquely route real reports. Builds a stratified producer-side…

Reviews code changes and codebases for real defects and unnecessary complexity. Use this skill when asked to review a diff, branch, codebase, or completed implementation, or to check work against its…

Kubernetes Deployment 管理

Record and query the decision log for a project. Activate when user mentions "audit", "trail", "log decisions", "decision history", "why was this decided", "ADR", "architecture decision".

Use when code logs users in or out, sets or clears auth cookies, manages session tokens, throttles failed logins, or builds a custom login form in WordPress. Enforces wp_signon() and core session…

.NET / ASP.NET 鉴权机制审计。用于用户要求检查登录校验、权限校验、[Authorize]/[AllowAnonymous]/Role/Policy、未授权访问、越权/IDOR、基于路由映射分析接口鉴权状态，或对只有 bin/dll/web.config/aspx 的闭源项目先反编译再审计鉴权。适用于 ASP.NET Core、MVC5/Web API2、Web…

Audit one governed Markdown vault without modifying it. Use for contract, registry, metadata, subject, focus, privacy, Git, content-check, link, or lifecycle validation.

Make websites, docs, blogs, or landing pages visible and readable to LLMs and AI agents: ChatGPT, Claude, Perplexity, Cursor, Claude Code, and other coding agents that fetch URLs. Use for any request…

Plans a track, generates track-specific spec documents and updates the tracks file

Boot 4+ replaced MockMvc assertions with MockMvcTester — incompatible API your training data gets wrong. Read before writing any @WebMvcTest. Triggers: @WebMvcTest, MockMvc, MockMvcTester,…

Comprehensive code review for Golang CLI applications. Produces an actionable checklist covering error handling, CLI framework patterns (Cobra/urfave), testing, performance, security, and Go idioms.…

Taiwan Logistics API integration specialist for ECPay, NewebPay, PAYUNi, SmilePay, PChomePay, PayNow and ezShip aggregators, HCT direct carrier API, and on-demand delivery (Lalamove, pandago). Use…

Performs thorough code reviews following best practices. Use when reviewing pull requests, checking code quality, or ensuring coding standards compliance.

当用户明确要求测试代码、代码审查或代码自检时使用。系统化发现并验证代码问题。⚠️ 不适用：用户只是想实现或优化功能、询问代码问题，或没有明确测试意图。

Build a sourced, corroborated profile of a named individual from public records, social platforms, professional networks, court and property filings, licensing boards, patents, papers and obituaries —…

Accessibility audit covering WCAG 2.2, contrast, focus, keyboard, screen reader, and touch targets. Use when the user asks for an accessibility audit, an a11y review, a WCAG check, an accessibility…

Run Android accessibility audit: TalkBack, contrast, touch targets, content descriptions. Use when the user says 'a11y audit android', 'accessibility android', 'talkback', 'screen reader android'.

Use when building authentication UI — login, signup, forgot/reset password, email verification, and OAuth buttons. Covers layout, validation, security-conscious UX (no user enumeration), and…

Run a compact PASS/FAIL review using the reviewer agent

Operate the Antigravity CLI (agy): plugins, auth, sandbox.

Use only when the user explicitly requests a review or audit of frontend code under `web/` or `packages/dify-ui/`. Supports pending-change, file-focused, and pasted-diff reviews. Do not use for…