Security

Rigorously review code or pull requests for correctness, security, accessibility, maintainability, tests, and edge cases.

Prepare R packages for CRAN submission by checking for common ad-hoc requirements not caught by devtools::check().

API security testing — OWASP API Top 10, BOLA/IDOR chains, mass assignment, excessive data exposure, rate limiting.

Engagement-level methodology reference — PTES/OWASP/NIST/OSSTMM mapping, rules of engagement, legal boundaries, evidence handling, cleanup.

Security advisory feed package for OpenClaw-related threats and vulnerabilities.

Operate SonarQube-enabled repositories through the SonarQube CLI (`sonar`): verify authentication, discover project keys, inspect project metadata, issues…

Use before any repository task governed by RabiRoute plan admission, including bug fixes, features, UI, assets, config, data, docs, prompts, skills, builds…

Edit mathematically, empirically, or technically dense papers for readers outside the author’s specialty, including empirical legal scholarship…

Prepare, audit, or revise Nature-ready Data Availability statements, data repository plans, dataset citations, and FAIR metadata checklists for manuscripts.

Draft, audit, or revise point-by-point reviewer response letters for Nature-family manuscript revisions.

Automatically plan, draft, and compliance-check a complete evidence-grounded rebuttal from a confirmed baseline.

Run Git and GitHub CLI commands on the host when sandboxing blocks Keychain auth, network access, or .git writes.

Reviews code for security vulnerabilities and guides secure implementation using OWASP Top 10:2025, ASVS 5.0, the OWASP Top 10 for LLM Applications (2026)…

CUMCM 国赛、MCM/ICM 美赛与电工杯数学建模竞赛的端到端协作工作流。Use when a user explicitly works on one of these modeling contests or asks to run/review a modeling-competition paper…

External-audit role for arcgentic rounds.

Audit the instructions an agent already carries — CLAUDE.md, AGENTS.md, skills, tool descriptions — for contradictions, over-constraint, and duplication, then…

Fix a reported bug with a regression test that demonstrably fails on the original behavior and passes after the fix.

Use when guiding users to Kooboo CMS admin URLs, show_action_button, get_site_info (siteId, baseUrl), or JWT/payment/SMS/OAuth setup links.

Use this skill when building, deploying, evaluating, debugging, or measuring latency for the DeepStream SOP Inference Microservice — a GPU-accelerated FastAPI…

Manually review the implementation diff for the current Comet change.

Use when a pr-council-review (PR or branch mode) result needs independent corroboration from a different model family before trusting a GREEN verdict —…

Pre-implementation multi-persona adversarial analysis for gflow-cli proposals.

Pre-implementation edge-case and scenario explorer for gflow-cli.

Battle-tested Playwright patterns for writing and debugging reliable E2E, API, component, visual, accessibility, and security tests.