Security AI Skills

WordPress admin UI review and development guidance. Use when reviewing admin pages, settings screens, menu pages, notices, list tables, metabox-like interfaces, screen options, capability checks,…

Resolve canonical Git checkouts, index and verify codebase-memory-mcp graphs through the guarded CLI, open its browser viewer on request, and safely audit duplicate worktree caches. Use when a user…

Trust Wallet CLI (`twak`) — install, create wallets, check balances, send tokens, swap, view history, set price alerts, DCA automations, limit orders, manage ERC-20 approvals, check token risk, browse…

Internal fetcher module for Confluence pages. Fetches content via Atlassian MCP (preferred), REST API with Basic Auth (fallback), or browser DOM extraction via Claude in Chrome (last resort) and…

Pattern for client components calling server actions to set cookies in Next.js. Covers the two-file pattern of a client component with user interaction (onClick, form submission) that calls a server…

Maestro orchestrator for end-to-end LGPD (Lei 13.709/2018) compliance in a software project. Use for "como estamos de LGPD", "audite LGPD", "nos deixe LGPD seguros", "gap analysis LGPD", "compliance…

Third-party Claude Code token/context/code-review tools. Use when choosing or recommending an external tool to reduce token usage, manage context, or review large codebases.

Deploy and debug headless robotics containers on Google Cloud Run.

Use when improving a public README, repository homepage, docs landing page, or developer-facing first impression.

Code review assistance with linting, style checking, and best practices

Security Engineer role bundle for building security into products and infrastructure. Orchestrates code review, pipeline hardening, vulnerability response, and infrastructure review workflows.…

Run code review in an independent agent. Automatically used after code implementation or fixes. Triggered by "review this", "code review", "code check", "look at this PR", "check the diff", "is this…

Initialize brain sync network. Creates a Git remote for your brain and exports your current Claude Code state.

Usar para crear o mejorar una skill de Andru.ia: define entradas y resultados, redacta SKILL.md con ejemplos y límites, valida la estructura y prepara una PR.

Generate comprehensive Product Requirement Plans (PRPs) for feature implementation with thorough codebase analysis and external research. Use when the user requests a PRP, PRD, or detailed…

Find payment callback and webhook vulnerabilities. Use when user asks about payment security, callback tampering, hash validation, or transaction manipulation.

Create release notes and product updates that developers actually read and care about. This skill covers changelog formatting, versioning communication, breaking change announcements, deprecation…

Analyze and explain one or two EVM transactions using live Etherscan data and human-verifiable Etherscan evidence links. Use when a user provides a transaction hash or asks what happened, why a…

Assess and guide safer github.com repository releases. Use when an existing private GitHub repository becomes public for the first time, or whenever an already-public GitHub repository publishes a new…

Use when the user says "/plan-review", "plan review", or "PRD review" and provides a plan file path that needs critical review and iterative refinement with Codex.

Cairo smart-contract authoring on Starknet. Trigger on "write a contract", "create a contract", "implement this in Cairo", "add storage/events/interface", "compose components". Guides structure,…

Orchestrating design-to-implementation pipelines (code to visual to code closed loop), persisting a project design system across agents. Not for a single prototype (Forge) or direction only (Vision).

Security-agents-only scanner using all 12 parallel specialized subagents without discovery, data flow tracing, false positive analysis, or triage. Use when asked to "agents-only scan", "raw agents…

Codify project review rules as deterministic guards — ast-grep structural rules (with TDD-style rule tests) for mechanical checks, REVIEW_GUIDELINES.md for qualitative ones, wired into the project…

Route Feishu/Lark content access for Codex. Use when the user asks to read, summarize, extract, search, create, update, or fill Feishu/Lark links, documents, wikis, Drive files, Base/bitable tables,…

AI agent supporting REST/GraphQL/gRPC API design, OpenAPI specification generation, and API best practices Trigger terms: API design, REST API, GraphQL, OpenAPI, API specification, endpoint design,…

Audits a repository's GitHub Actions workflows for CI optimization opportunities — missing caches, redundant setup, sleep-based readiness, long test jobs without sharding, full-history checkout, dead…

Detect dangerous ACL misconfigurations in Active Directory using ldap3 to identify GenericAll, WriteDACL, and WriteOwner abuse paths

MUST use before any git push to main/master/production, or when user mentions 'deploy', 'going live', 'push to prod', 'ready to ship', 'merge to main', 'release'. Also trigger before any npm publish…

Route PostPeer MCP and developer-reference work. Use when the user asks about PostPeer tools, postpeer.dev, MCP, REST or OpenAPI schemas, TypeScript SDK usage, platform prerequisites, authentication…

Active Directory Certificate Services (AD CS) abuse — ESC1-ESC15 attack patterns, PKINIT, PetitPotam to AD CS to Domain Admin chains, CVE-2022-26923 (Certifried), Shadow Credentials, Golden…

Fix vulnerabilities identified by /security:review using the Fix-Verify Loop. Use when: user says "fix security findings", "remediate vulnerabilities", or invokes /security:fix with a report path.…

HMAC SHA256 signed requests for Aster Futures API v1. X-MBX-APIKEY, timestamp, recvWindow, signature. Use when calling TRADE, USER_DATA, or USER_STREAM (/fapi/v1/ or v2/v4).

Use when generating the final executive security report (Phase 4)

Use when performing security audits, vulnerability assessments, or compliance checks on Flutter or mobile applications. Covers OWASP Mobile Top 10 (2024) — hardcoded secrets (M1), insecure storage…

Use only when verifying or troubleshooting OCI Landing Zone Orchestrator contract/runtime behavior such as rms-facade source settings, dependency and output files, stack sequencing, duplicate…

Аудит веб-сайтов и лендингов по SEO, производительности, безопасности, контенту, доступности. Используй когда нужно проверить сайт, найти проблемы, подготовить чеклист для улучшения. Триггеры:…

Connect to 100+ APIs (Google Workspace, Microsoft 365, GitHub, Notion, Slack, Airtable, HubSpot, etc.) with managed OAuth. Use this skill when users want to interact with external services. Security:…

Build backend APIs for Chrome extensions. NestJS + MongoDB (Mongoose) recommended stack. Auth, webhooks, license verification, CORS. Use when: backend, API, server, database, license, webhook.

Analyze configuration files for validation and best practices

Gap assessment of AI system security against the ISO/IEC 27090:2026 guidance, with a threat-based checklist, maturity scale and a short client-ready report.

Configure and use Backoffice API connections. Use when creating outbound HTTP API integrations, configuring OAuth or bearer authentication, starting API OAuth flows, checking auth status, or executing…

Investigate commercial, operational, financial, strategic, and technology claims for acquisition, investment, partnership, or vendor decisions. Use for M&A targets, data-room analysis, quality of…

Expert guidance on writing GitHub Actions workflows. Use when: (1) writing or editing any file under .github/workflows/, (2) choosing between an existing action and a shell script in CI, (3) picking…

First-pass triage of Wazuh alerts — map rule level to severity, spot noise and false positives, group into existing cases or open a new one; use for every new alert or batch of alerts entering the…

Run phase 3.4 maintainer question waves for threat-model production. USE WHEN inferred claims need ratification or interview-first versus draft-first mode must be chosen. Asks 3–7 prioritized…

Kubernetes Pod 管理与调试

Master SEO orchestrator with 24 specialized sub-skills across 9 categories. Comprehensive SEO analysis for any website or business type. Performs full site audits, single-page deep analysis, technical…

Builds a production-style Express.js REST API with JWT authentication, PostgreSQL, layered middleware, and Docker Compose for local development. Use when the user asks to scaffold a secure…

Security-focused review of AI-generated or AI-assisted code. Use when reviewing code produced by AI coding assistants, auditing AI-generated patches, verifying AI-assisted contributions before merge,…

Ask Claude Code to audit a file or set of files and return structured findings. Claude reads the code with fresh eyes and independent judgment — Codex does not self-review. Supports mini (5-dimension)…