Convert precise coordinates into parcel-level addresses and tax-lot identifiers using licensed cadastral and government databases.
Evaluate infrastructure definitions for security risk, syntax error, and configuration drift before deployment.
This skill covers integrating Static Application Security Testing (SAST) tools—CodeQL and Semgrep—into GitHub
Use this skill when starting static surface triage for source code or existing decompiler output to map trust boundaries, dangerous code areas, entrypoints, sinks, invariants, and…
Integrate security audits and vulnerability scanning directly into the CI/CD pipeline. Use this skill whenever the user mentions devsecops, sast, dast, pipeline scanning, security…
Manage PR crises using classification, golden hour response, crisis statement templates (3C framework), and reputation recovery planning.
Scan project scripts and deliverables for vulnerabilities and malicious code execution risk. Use this skill whenever the user mentions deliverable scanning, malicious code, script…
Proactive security scanning for newly generated or modified code. Intelligently detects changes, runs appropriate scans (SAST, SCA, IaC), filters to only NEW issues, and prevents…
[REQUIRED] Comprehensive description of what this skill does and when to use it. Include: (1) Primary functionality, (2) Specific use cases, (3) Security operations context.
Execute Snyk Code SAST (Static Application Security Testing) scans on source code files or projects, interpret vulnerability findings, generate structured security reports, and…
Complete security remediation workflow. Scans code for vulnerabilities using Snyk, fixes them, validates the fix, and optionally creates a PR.
Security scanning skill that runs Trivy to detect vulnerabilities, leaked secrets, misconfigurations, and licence risks in the local codebase and container images.
Use when /uberdev:uberscan is invoked. Read-only whole-codebase audit — packs the repo into a fixed fleet of byte-balanced areas (default 8), runs ONE multi-lens reviewer per…
Automated discovery and triage of security weaknesses in network systems, applications, or cloud configurations.
Use this skill when analyzing Blackpoint Cyber (CompassOne) exposure data — host vulnerability findings filtered by CVE and exploitability, vulnerability scan history, dark-web…
Rank potential system threats by risk level and business impact to guide remediation effort. Use this skill whenever the user mentions vulnerability prioritization, epss, cisa…
This skill should be used when the user asks to "triage a vulnerability report", "assess a CVE", "evaluate a bug bounty submission", "decide if a finding is valid", "review a…
BiDi text validation and Trojan Source attack detection (CVE-2021-42574)
Execute use when you need to work with backup and recovery. — from jeremylongshore/claude-code-plugins-plus-skills
機密情報検出スキル。APIキー、パスワード、トークン等の機密情報をコードから検出。git-secrets/truffleHog/gitleaks等のツールを統合。漏洩防止と早期発見に使用。
脆弱性スキャンスキル。CVE/依存関係脆弱性を検出し、npm audit/pip-audit/trivy等の結果を解析。セキュリティリスクの優先順位付けと修正提案を提供。