Security

Build OAuth connections for payment providers (Stripe Connect, Square) in SvelteKit applications.

Hardens code against vulnerabilities (MeKnow-adapted, polyglot).

Security review checklist covering OWASP Top 10, authentication, authorization, input validation, secrets management, and common vulnerability patterns.

Google Workspace: Docs, Sheets, Slides, Drive, Gmail, Calendar — portable Python scripts using gcloud ADC auth

Multi-channel ABM automation that turns LinkedIn URLs into coordinated outbound campaigns.

Collect anecdotal news evidence about a project's topic from Brazilian news outlets (or broader for non-Brazil projects) using the newsbr package.

DELIBERATE security-scanner test fixture — contains intentionally dangerous patterns (curl-pipe-bash, env-var exfiltration).

Deep-audit TypeScript, React, Next.js (App Router) and frontend-design code for smells — patterns that ship but corrode performance, a11y, type safety, bundle…

Full-stack backend architecture and frontend-backend integration.

Solana-native agent identity and authentication — SIWS (Sign In With Solana), CAAP/1.0 on-chain attestation, Phala TEE confidential compute, Clerk identity…

Create a new App Store Connect Team API Key with Admin permissions, download the one-time .p8 private key, and store it in ~/.blitz.

Validate code changes against real CI.

Audit and optimize Claude's own configuration — skills, settings.json, and context overhead.

Full safety check for AI-generated code before pushing.

Used to run an audit via our auditing service.

Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features.

🧠 ontology-clawra v5.1 - Local Ontology Reasoning & Learning Engine **USE THIS SKILL WHENEVER** you need structured reasoning, knowledge graph management…

Discover and call paid x402 services — images, video, search, storage, transcription, inscriptions.

Use after /figma-create, or when reviewing an existing design for design system compliance.

Identifies security design patterns in APIs, configurations, and interfaces that enable developer misuse.

Production resilience audit for AI-generated code.

Security audit for AI-generated code.

Single entry point to assemble the AI Avengers — orchestrate the local multi-agent swarm (claude, codex, opencode, antigravity in tmux session `agents`) AND…

Use when user mentions Docker security, container hardening, or Dockerfile security review; User asks about distroless images, non-root containers, or…