Security

Guidance for using asc cli in this repo (flags, output formats, pagination, auth, and discovery).

Django performance code review.

Use binance-cli for Binance Spot, Futures (USD-S), and Convert.

Triggered when the user submits code or requests a comprehensive code quality analysis.

Triggered when the user submits code or requests a code review.

Classify germline variants from VCF/BCF files according to the ACMG/AMP 2015 28-criteria evidence framework and generate clinical-grade interpretation reports…

Define, validate, run, resume, and audit repo-local multi-step automations with current `asc workflow` and `.asc/workflow.json`, including step outputs and…

Write or rewrite text in plain, layman-readable English in the spirit of ASD-STE100 Simplified Technical English: short sentences, active voice, simple…

Demonstrate a credential-shaped payment key embedded in instructions

Implementation orchestrator — takes an agreed plan through implementation, carry-over approval, code review, security review, QA, docs consistency, lint/test…

Analyze a repository to generate recommended Claude Code settings.json permissions.

Launch OpenAI Codex CLI as a subagent (ChatGPT subscription auth, no API key).

Comprehensive Cloudflare platform skill covering Workers, Pages, storage (KV, D1, R2), AI (Workers AI, Vectorize, Agents SDK), networking (Tunnel, Spectrum)…

Create a Linear OAuth application and configure Cyrus to use it — supports agent-browser automation or guided manual setup.

Audit the installed AI skill environment for duplicate installations, broad triggers and possible instruction conflicts.

Use when a user asks what the EU Cyber Resilience Act (CRA) means for their product, whether and when they must report a vulnerability or incident, or what a…

Use when a security incident, data breach, or actively exploited vulnerability raises the question "who must we notify, where, and by when?" Screens one…

Use when an application or system — including one built quickly with AI coding agents — needs a security review with regulatory grounding: a STRIDE threat…

Prepares, reviews, commits, and publishes RabiRoute changes with a mandatory per-commit patch-version bump, bilingual version log, Rabi context, privacy…

CI/CD gotchas — default creds, instant-RCE paths, secret leaks in logs.

Docker/Kubernetes attack techniques — exposed API abuse, container escape, RBAC/privileged-pod issues, secret theft.

Android APK static analysis — OWASP Mobile Top 10, Retrofit API audit, transport security, smali reading, component export, auth flow analysis.

iOS IPA static analysis — hardcoded secrets, ATS bypass, Keychain, jailbreak detection, reverse engineering with class-dump/ipsw.

SSH version CVEs and post-auth tricks — regreSSHion, user enum, agent hijack.