Security

Correlates security events in IBM QRadar SIEM using AQL (Ariel Query Language), custom rules, building blocks, and offense management to detect multi-stage…

Detects early-stage ransomware indicators in network traffic before encryption begins, including initial access broker activity, command-and-control…

Detects and prevents code injection attacks targeting serverless functions (AWS Lambda, Azure Functions, Google Cloud Functions) through event source…

Discovering and accessing unprotected pages, APIs, and administrative interfaces by enumerating URLs and bypassing authentication controls during authorized…

Configures Fail2ban with custom filters and actions to detect port scanning activity, SSH brute force attempts, and network reconnaissance, automatically…

Solve CTF Web Exploitation challenges by triaging HTTP behavior, source code, sessions, auth, injection, SSRF, file upload, template, deserialization, race…

Run Google Lighthouse against a URL (mobile and desktop), trace the performance, accessibility, SEO, and best-practices findings to the project's actual…

Examine Linux system artifacts including auth logs, cron jobs, shell history, and system configuration to uncover evidence of compromise or unauthorized…

Check what is actually live (store listing and labels, published policies, deployed backend, retention jobs) against the code and published words, then work…

This skill covers detecting cyber attacks targeting Supervisory Control and Data Acquisition (SCADA) systems including man-in-the-middle attacks on industrial…

List every endpoint a Business Central instance exposes — web client, dev, OData, API, management, client services — with its URL and auth mode, optionally…

Unit-level security judgment of a repository, a folder of repositories, or the units a pull request changed, with TypeSafe's Jev: code splits every source…

Judge what an email is trying to get someone to do, with TypeSafe's Jev: a category across 16 kinds of mail (vendor payment fraud / BEC, fake invoice…

Draft, stage, and publish social-media posts for Reddit, Hacker News, Twitter/X, Mastodon, LinkedIn, Threads, Facebook, Instagram, and Dev.to.

Amazon PPC campaign builder and optimizer for sellers.

This skill should be used when the user asks to review a diff or pull request, write review comments, audit code quality, establish review standards, or…

React SPA auth patterns with @clerk/react for Vite/CRA - ClerkProvider setup, useAuth/useUser/useClerk hooks, React Router protected routes, custom sign-in…

SkillsBench task PR review — classifies the task track (standard / research / multimodal), runs static policy checks against the track-specific rubric…

断舍离.skill — 审计当前 agent 装的全部 skill，对照现在的模型能力、harness 内建功能和已接入的 MCP 工具，找出不再需要的那些：证据化判决（能力型先盲测）→ 用户确认 → 归档移除（一键可恢复），并报告每轮省下的 token。模型每变强一代，就该跑一次。 触发词：「skill…

源代码安全审计。当用户要求"代码审计"、"安全审计"、"漏洞扫描"、"代码安全检查"、"SAST分析"时使用此技能。支持 Python、Java、JavaScript、PHP、Go、C/C++ 等主流语言。检测 OWASP Top 10、CWE Top 25 等常见漏洞，输出包含风险评级、CWE…

Use when the user asks to hunt for bugs nobody reported, audit a codebase or a path for latent bugs and vulnerabilities, fuzz code, write property-based…

Zero-knowledge secrets infrastructure — AI agents manage the complete credential lifecycle without ever seeing values

Automatic security gate that checks packages against a vulnerability database before installation.

360-degree comprehensive security review Skill.