Security

Build, refresh, or ratify a threat model for a service, library, or system — the written security contract of assumptions, guarantees, explicit…

Remove AI writing patterns from any prose a person will read, and keep them out of prose you write.

Iterative code review in which the reviewer proves suspicions in the correctness / security / bug dimensions by writing tests that run red or, preferably for…

Audit, evaluate, merge, and refresh a library of agent skills.

Add, improve, audit, wedge, or autoimprove a skill.

Audits, designs and advises on web interfaces — usability, accessibility, visual hierarchy, performance, UX writing, conversion and front-end code — using…

Cross-stack motion & design-system director.

Draft, audit, or activate a compact /goal when the user asks for a persistent objective or wants Codex to work until a verifiable outcome is true.

Use this skill for Validation for native motion changes: Expo Doctor, expo install --check, EAS/development build risk, Jest/Reanimated setup, RN tests…

Use when auditing merged PRs after concurrent agent work, before a release candidate, after a suspected bad merge, or when checking for missed reviews…

Deploy and manage DSG ONE / ProofGate control plane infrastructure on AWS using CDK.

Validate DSG ONE / ProofGate control plane is production-ready across infrastructure, compliance, security, and governance dimensions.

Use for safe chezmoi setup and migration, daily dotfile sync, templates, secrets, scripts, drift/recovery, or official-doc research.

Audit and scaffold `.github/workflows/copilot-setup-steps.yml` for GitHub Copilot cloud agent environments.

Run /scaffold-hooks to audit, create, or refresh shared repository hooks for Claude Code, Codex, GitHub Copilot, Devin CLI, and OpenCode, together or…

Rewrite or audit ASD-STE100 procedures, descriptions, and safety instructions while preserving technical meaning and exact literals.

Use this skill when you need to design mobile test plans for iOS or Android covering functionality, compatibility, performance, network, and security…

Use this skill when you need to design mobile test plans for iOS or Android covering functionality, compatibility, performance, network, and security…

Use this skill when you need to design security testing around OWASP risks, vulnerability scanning, and penetration scenarios; triggers include 安全测试 and…

Use this skill when you need to design security testing around OWASP risks, vulnerability scanning, and penetration scenarios; triggers include security…

Provisions and manages Aurora DSQL clusters, connects via psql or DSQL Connectors, manages schemas, runs queries, migrates from MySQL, diagnoses query plans…

Audit diffs, pull requests, and codebases for reward-hacked or Goodharted code, backwards-compatibility cruft, needless fallbacks and shims, accidental…

Use these skills when you need to manage user roles, inspect permissions, and verify security-related configuration parameters.

Use these skills when you need to audit database health, identify storage bloat, find broken indexes, and verify tablespace or maintenance configurations.