Security

Evaluate one design or a user-approved maturity-mapped batch through a transparent evidence-based rubric.

Reusable writing-style contract for agent outputs (reports, ARCH docs, verdicts, threat models).

6-pillar architecture review framework.

Automatically load this skill when investigating an operational anomaly on a cloud resource - CPU or memory spikes, latency, elevated error rates, unexpected…

Use when inspecting frontmatter consistency, missing properties, property casing, tag spelling, or metadata drift.

Implement Terraform provider ephemeral resources with the Plugin Framework: the Open/Renew/Close lifecycle, ephemeral schema design, registration via…

What to do the moment a secret is exposed — pasted into chat, committed, logged, shown in a transcript or a screenshot.

The pinned default technology stack for SMB Product-Builder products.

Turn a vulnerability report into a publication-ready GitHub Security Advisory.

Contract intelligence and contract operations workflow skill for Claude and Codex.

Analyzes how multiple regulations interact for a specific product, service, or business model.

Assesses which of the Art.

Practitioner skill for advising on EU Regulation 2023/2854 (Data Act).

Assess whether Government of India approval is required for foreign investment in an Indian company under Foreign Exchange Management Act, 1999 and the…

Builds a high-fidelity interactive legal assessment as a single self-contained HTML artifact.

Generates standalone interactive HTML "deal cards" that translate complex regulations into negotiation-ready reference tools, systematically distinguishing…

Use when checking for security vulnerabilities in NanoClaw skills, before installing new skills, or when asked about security advisories affecting the bot

Postgres best practices maintained by Supabase, for Postgres running anywhere.

Use when security verification is needed - pre-commit security checks, vulnerability scanning, STRIDE threat analysis.

Harness-neutral community incident reporting for AI agents.

Audit and improve website readiness for AI agents using the Cloudflare "Is It Agent Ready?" scanner (isitagentready.com).

Apply focused code-quality checks when implementing or reviewing behavioral changes.

Scans a codebase for security vulnerabilities using CodeQL's interprocedural data flow and taint tracking analysis.

Audits code for unit and decimal-scaling bugs and annotates it with dimensional comments recording the units of each value.