Complete security architecture overhaul for claude-flow v3. Addresses critical CVEs (CVE-1, CVE-2, CVE-3) and implements secure-by-default patterns.
Deployment validation pipeline — 4 fasi (static, security, smoke, score). Valida un deploy Vercel (preview o production) con TypeScript, ESLint, Jest coverage su file toccati,…
API de Variações de Produtos da Tray. Utilize quando o desenvolvedor precisar gerenciar variantes de produtos (SKUs) como diferentes tamanhos, cores ou modelos.
Find similar vulnerabilities and bugs across codebases using pattern-based analysis. Use when hunting bug variants, building CodeQL/Semgrep queries, analyzing security…
Find similar vulnerabilities across a codebase after discovering one instance. Uses pattern matching, AST search, Semgrep/CodeQL queries, and manual tracing to propagate findings.
Final outward ship skill. Turns "done in the repo" into "safe, visible, deployable, discoverable, and launchable in the world." Covers release mechanics, deployment topology,…
Vendasta integration. Manage data, records, and automate workflows. Use when the user wants to interact with Vendasta data.
Visao 360 de produto - agrega dados de cadastro, estoque, custo, faturamento, carteira e producao em uma consulta unificada.
Analyze volunteer management platforms for skill-based matching algorithms, shift scheduling optimization, availability tracking, and retention analysis.
Analyse et évalue les vulnérabilités d'un système ou d'une application. À utiliser pour comprendre et prioriser les vulnérabilités.
Vulnerability Report Generator - Auto-activating skill for Security Advanced. Triggers on: vulnerability report generator, vulnerability report generator Part of the Security…
Advanced vulnerability analysis principles. OWASP 2025, Supply Chain Security, attack surface mapping, risk prioritization.
Automated security scanning for dependencies, code, containers with Trivy, Snyk, npm audit. Use for CI/CD security gates, pre-deployment audits, compliance requirements, or…
Score incoming vulnerability reports the same way every time, tie each score to a fix deadline, and run disclosure on a predictable clock.
Automated SAST + dependency vulnerability scan. Runs Semgrep (code vulnerabilities) and pip-audit (CVE-matched dependencies) and writes a structured JSON report.
Backup e Disaster Recovery Windows Server: system state (AD), backup automatico, Windows Server Backup, recovery. Sub-skill di windows-server-admin.
Gebruik deze skill wanneer de gebruiker de huidige (geschatte) waarde van een woning wil berekenen op basis van aankoopprijs, aankoopjaar, aankoopkwartaal en provincie.
Access and filter SecLists wordlists for authorized security testing. Password lists, username lists, fuzzing payloads, web shells.
WPScan is an open-source WordPress security scanner that detects vulnerabilities in plugins, themes, and core installations.
Zero token cost. Premium output. Never offline. Free LLM gateway + behavioral DNA. Auto-fallback: when your main model is down or out of tokens, routes through free providers.
This skill enables Claude to perform automated fuzz testing on APIs to discover vulnerabilities, crashes, and unexpected behavior.
This skill should be used when the user asks to "test API security", "fuzz APIs", "find IDOR vulnerabilities", "test REST API", "test GraphQL", "API penetration testing", "bug…
Evaluate architecture diagrams and solution descriptions for security boundaries, entry points and storage security, covering multi-modal diagram analysis, public-vs-private…
This skill should be used when the user says "fix CVEs", "patch vulnerabilities", "apply security patches", "resolve security advisories", "batch CVE fix", "patch dependencies",…
This skill should be used when the user says "scan for CVEs", "CVE scan", "check for vulnerabilities", "find vulnerabilities", "check security advisories", "dependabot triage",…
Enforce coding standards, style compliance, and security scanning on project pull requests, and gate merges on the result.
Inject randomized and edge-case inputs into contract functions to surface crashes and broken invariants.
Plan and run backups, set recovery objectives, and run disaster recovery drills. Use this skill when defining RPO/RTO targets, designing backup architecture, deciding what to back…
This skill implements backup strategies for databases and applications. It generates configuration files and setup code to ensure data protection and disaster recovery.
This skill implements backup strategies for databases and applications. It generates configuration files and setup code to ensure data protection and disaster recovery.
Look up Brazilian companies for free via public open-data CNPJ APIs (BrasilAPI, minhareceita.org, ReceitaWS) - razao social, nome fantasia, situacao cadastral, CNAE activity…
Change analysis, once the observations are comparable. Not for cases whose blocker is comparability itself: mixed sensors, product levels or processing baselines to…
Evaluate threats against the Confidentiality, Integrity, and Availability of data and services. Use this skill whenever the user mentions cia triad, confidentiality, integrity,…
Verify cloud disaster-recovery protocols procedurally to confirm resilience against regional outage. Use this skill whenever the user mentions disaster recovery, dr test, regional…
This skill should be used when the user asks to "deploy to Locaweb Cloud", "set up GitHub Actions deployment workflows", "create a preview environment", "add a production…
This skill manages database recovery operations using the database-recovery-manager plugin. It enables disaster recovery, point-in-time recovery (PITR), and automated failover…
This skill enables Claude to plan and implement disaster recovery (DR) procedures. It generates configurations and setup code based on specific requirements and infrastructure.
Use this skill when an individual taxpayer or solo business owner needs to report a casualty loss, theft loss, or disaster-related property loss on IRS Form 4684.
Identify flaws at the firmware and silicon layer, covering firmware reverse engineering, secure-boot verification, TPM state attestation, supply-chain component auditing and…
Convert precise coordinates into parcel-level addresses and tax-lot identifiers using licensed cadastral and government databases.
Use this skill when the user says 'hybrid cloud', 'hybrid-cloud', 'cloud burst', 'on-prem to cloud', 'cloud repatriation', 'hybrid connectivity', 'express route', 'direct…
Evaluate infrastructure definitions for security risk, syntax error, and configuration drift before deployment.
This skill covers integrating Static Application Security Testing (SAST) tools—CodeQL and Semgrep—into GitHub
Use this skill when deploying and managing Longhorn distributed storage on Kubernetes -- installation, volume management, backup, disaster recovery, performance tuning,…
Use this skill when starting static surface triage for source code or existing decompiler output to map trust boundaries, dangerous code areas, entrypoints, sinks, invariants, and…
Integrate security audits and vulnerability scanning directly into the CI/CD pipeline. Use this skill whenever the user mentions devsecops, sast, dast, pipeline scanning, security…
Manage PR crises using classification, golden hour response, crisis statement templates (3C framework), and reputation recovery planning.
Scan project scripts and deliverables for vulnerabilities and malicious code execution risk. Use this skill whenever the user mentions deliverable scanning, malicious code, script…
Use this skill when asked about SAST, DAST, static analysis, dynamic analysis, code scanning, SonarQube, Semgrep, Checkmarx, Fortify, OWASP ZAP, or Burp Suite.
Proactive security scanning for newly generated or modified code. Intelligently detects changes, runs appropriate scans (SAST, SCA, IaC), filters to only NEW issues, and prevents…
[REQUIRED] Comprehensive description of what this skill does and when to use it. Include: (1) Primary functionality, (2) Specific use cases, (3) Security operations context.
Execute Snyk Code SAST (Static Application Security Testing) scans on source code files or projects, interpret vulnerability findings, generate structured security reports, and…
Complete security remediation workflow. Scans code for vulnerabilities using Snyk, fixes them, validates the fix, and optionally creates a PR.
Security scanning skill that runs Trivy to detect vulnerabilities, leaked secrets, misconfigurations, and licence risks in the local codebase and container images.
Use when /uberdev:uberscan is invoked. Read-only whole-codebase audit — packs the repo into a fixed fleet of byte-balanced areas (default 8), runs ONE multi-lens reviewer per…
Automated discovery and triage of security weaknesses in network systems, applications, or cloud configurations.
Use this skill when analyzing Blackpoint Cyber (CompassOne) exposure data — host vulnerability findings filtered by CVE and exploitability, vulnerability scan history, dark-web…
Rank potential system threats by risk level and business impact to guide remediation effort. Use this skill whenever the user mentions vulnerability prioritization, epss, cisa…
This skill should be used when the user asks to "triage a vulnerability report", "assess a CVE", "evaluate a bug bounty submission", "decide if a finding is valid", "review a…
BiDi text validation and Trojan Source attack detection (CVE-2021-42574)