Security

Run or install repo security leak checks with BetterLeaks and Trivy.

Overview of Neon, a complete set of cloud backend primitives around Lakebase Postgres: Auth, Object Storage, Functions, the AI Gateway, and Realtime.

Concurrency safety audit for a type or file.

Security assessment of a codebase, minimal mode for runner validation

Use when THIS agent needs to pay for x402-protected content at runtime: hitting a paywall mid-task, settling it via AgentCore Payments, and applying…

Audit a website with the squirrelscan CLI and fix the findings in code.

squirrelscan audits websites for SEO, performance, security, accessibility, content, and structured data issues (300+ rules) and scores site health, via the…

Use when YouTube data is needed without Google API quotas or OAuth setup: transcripts, video metadata, channel info, search results, playlists.

Use when structured YouTube data is needed: pasted video/channel/playlist links, transcripts for analysis, video metadata, channel upload history, search…

Orchestrator that routes a UI/UX task through brand, tokens, layout, components, polish and accessibility.

DingTalk Workspace CLI (dws) - officially open-sourced cross-platform CLI tool from DingTalk.

Deep audit of a Frappe app for security, correctness, and customization defects.

openloomi Connectors tools - manage the native 7 messaging integrations and pair with the composio skill for the 1000+ apps OAuth layer (Slack, Discord, X…

GCP/K8s infrastructure audit and health check

Guides development of Fastify Node.js backend servers and REST APIs using TypeScript or JavaScript.

Use when turning a personal agent skill into an open-source, distributable one.

Prepare compact factual project context for another session or coding tool without copying transcripts or secrets.

Review a proposed change against requirements, regressions, verification evidence, and relevant security risks.

Audit the choices an implementing agent made, not its diff — a pure decision audit that traces the session's history into a choices ledger, changes no code…

Datadog CLI (Rust).

Secure secrets in Google Cloud Secret Manager.

Anti-AI-slop design skill for greenfield pages, audits, redesigns, and design extraction from URLs or screenshots.

Malloy semantic-model code review.

Run a reusable JavaScript supply-chain security baseline with pnpm-first hardening, release-age gating, lifecycle-script controls, exotic dependency checks…