Security

Audit and correct existing tests for real production execution, independent assertions, useful behavioral coverage, and resistance to refactors and flakiness.

This skill covers detecting cyber attacks targeting Supervisory Control and Data Acquisition (SCADA) systems including man-in-the-middle attacks on industrial…

Aizen knowledge pack (v24) — pipelines with security gates (Gitleaks, Trivy, Semgrep), environments, deploy and rollback, secrets, observability, incidents…

Set up, audit, verify, or fix website conversion tracking.

Recipes for code ANALYSIS and code EDITING with compiler, language-server, structural-AST and reference tools: typecheck a package, rename a symbol…

Installs guardrails in this project's .claude/ (and its git worktrees) that keep Claude Code from reading, writing or running commands on paths outside a…

Audits Claude skills (a folder with a SKILL.md) against 13 skill-writing rules from Anthropic's guides.

Audit and verify BMAD sidecar memory files.

Read web pages, or act on the user's signed-in accounts, in the user's agent Chrome.

Audit a repository for agent-readiness and bootstrap or migrate it toward the practices that make AI coding agents effective - AGENTS.md with an enforced…

Use when reviewing engineering maturity, architecture boundaries, module design, testing strategy, observability, security posture, delivery readiness…

Cross-platform UI/UX design reviewer grounded in Apple's Human Interface Guidelines (123 pages pulled from developer.apple.com, including 57 component pages)…

Investigate the security of agent skills before adoption or after suspicious behavior.

List every endpoint a Business Central instance exposes — web client, dev, OData, API, management, client services — with its URL and auth mode, optionally…

Pre-BFCM audit for Shopify DTC brands of purchase tracking and attribution.

Use when the user asks why IBM Bob asks for approval, how approved or denied command patterns match (prefix, wildcard, case), what "Security warning" or…

既存リポジトリに情報漏えい・侵害につながるリスクがないかを、依存パッケージの既知脆弱性とサプライチェーン、CI/CD、シークレット露出、認証・認可、コードの脆弱性（インジェクション等）、個人情報保護、インフラ設定の観点で並列に読み取り監査し、検証済みの指摘を深刻度順のレポートにまとめる。「セキュリティ監査」「脆弱性診…

Audit an NSF proposal folder against Grants/GRANT-FORMAT.md (page limits, fonts, margins, required headings, no URLs in the description, prior-support items…

Audit an NSF Project Description and Summary against Grants/GRANT-STYLE.md (every project has a plan and names what is new; results in prose with citations…

Use when a product screen, registered module, prototype, functional specification, handoff, or partial story set must be decomposed into complete, traceable…

Draft, rewrite, or audit prose, documentation, comments, docstrings, messages, and plans, or answer and explain in this style without an existing draft.

The canonical directory tree every repository has, and the audit that checks a repo against it.

Bootstrap, audit, refresh, or compact a project-root AGENTS.md as a small decision guide.

Health-check Obsidian vaults registered with git-repo-sync for broken wikilinks, orphan notes, missing frontmatter, duplicate titles, and empty notes.