Security

Manage API key authentication and session tokens.

Auditoria da cadeia de suprimentos das dependências de um projeto, cobrindo vulnerabilidades conhecidas, fixação de versões e lockfiles, código executado na…

Online threat intelligence: after component identification, search CVE/search-engines/security-community/GitHub PoC/asset-engines/live-intel/dependency-chain…

Unit-level security judgment of a repository, a folder of repositories, or the units a pull request changed, with TypeSafe's Jev: code splits every source…

Create fork releases with cherry-picked backports and security fixes.

Harden the whole Odoo project before go-live - full automated audit and remediation of all modules

Debug Hermes Gateway connectivity and platform integration issues — Telegram, Discord, WhatsApp.

Build, orchestrate, benchmark, and audit Angular 18 Micro-Frontend with Rsbuild & Module Federation 2.0 via multi-agent workflow.

Harden a production Linux VPS for your application across three layers — application (systemd hardening, monitoring alerts, backup automation), Ubuntu OS (UFW…

AI-powered security analysis of code changes — traces data flow, detects injection, auth bypass, secrets exposure, and unsafe deserialization across files.

Hardens code against vulnerabilities.

Metodología reproducible, agnóstica de lenguaje y framework, para auditar seguridad, estándares de código y errores probables en cualquier proyecto — cómo…

Patrones de autenticación: useAuth hook, token management, Google Sign-In, requestWithAuth.

Judge what an email is trying to get someone to do, with TypeSafe's Jev: a category across 16 kinds of mail (vendor payment fraud / BEC, fake invoice…

Draft, stage, and publish social-media posts for Reddit, Hacker News, Twitter/X, Mastodon, LinkedIn, Threads, Facebook, Instagram, and Dev.to.

Query token security audit to detect scams, honeypots, and malicious contracts before trading.

在添加身份验证、处理用户输入、使用机密、创建 API 端点或实现支付/敏感功能时使用此技能。提供全面的安全检查清单和模式。

X/Twitter API 集成，用于发布推文、线程、阅读时间线、搜索和分析。涵盖 OAuth 认证模式、速率限制和平台原生内容发布。当用户想要以编程方式与 X 交互时使用。

Microsoft Entra Agent ID (preview) for creating OAuth2-capable AI agent identities via Microsoft Graph beta API.

This skill should be used when the user asks to "pentest AWS", "test AWS security", "enumerate IAM", "exploit cloud infrastructure", "AWS privilege…

Multi-phase UAT gate — cold-start smoke, build, typecheck, lint, tests, step-by-step manual verification, gaps-closure loop.

Amazon PPC campaign builder and optimizer for sellers.

This skill should be used when the user asks to review a diff or pull request, write review comments, audit code quality, establish review standards, or…

React SPA auth patterns with @clerk/react for Vite/CRA - ClerkProvider setup, useAuth/useUser/useClerk hooks, React Router protected routes, custom sign-in…