Audit and optimize an existing Claude Code configuration against current best practices. Use this skill when a user asks to review, improve, clean up, or optimize their C — from…
Vehicle cybersecurity engineering per ISO/SAE 21434
Delegate tasks to AI agents via Box0. Use when the user asks to review code, check security, run tests, compare tools, get multiple perspectives, research a topic, analyze data,…
Advanced binary exploitation and mitigation bypass
Web application security testing with Burp Suite integration
This skill should be used when the user says "configure hooks", "set up quality gates", "add PostToolUse hook", "set up permission hooks", "create hook configuration", "add…
**DEFAULT for cost analysis spanning LLM tokens, cloud spend, and database query cost — produces a ranked findings list with monthly $-cost estimate, severity, and remediation…
Chief Security Officer mode. Infrastructure-first security audit: secrets archaeology, dependency supply chain, CI/CD pipeline security, LLM/AI security, skill supply cha — from…
CVE and CWE database querying and management
Advanced debugging integration for vulnerability research
quality gates | code review debug audit security eval ui
This skill should be used when the user explicitly invokes `/oracle:mcp-fleet` to set up, extend, or wire multi-workspace MCP server access from Claude Code.
MITRE ATT&CK framework mapping and analysis
Implement OAuth 2.0 and OpenID Connect flows for SDKs
Offensive security tools and techniques integration
Okta SSO auto-login via Push MFA. Use this skill whenever the user needs to log in to any environment, mentions Okta/SSO authentication, or wants to open any internal tool…
Pipedrive CRM integration optimized for SMB sales teams
ALWAYS use this skill when the user mentions PKA, personal knowledge, repo map, knowledge base setup, replacing Obsidian/Notion/Tana/Heptabase, organizing notes and files into a…
ALWAYS use this skill when the user wants a dashboard, browser interface, or visual view of their knowledge base, notes, projects, or PKA system.
Proactive codebase audit that discovers code quality issues, security vulnerabilities, performance problems, and architectural debt using parallel analysis agents, then creates…
Post-quantum cryptography evaluation skill for quantum-safe migration
SQLite-based project documentation logger for tracking API references, components, and project progress.
Exploit development automation using pwntools framework
This skill should be used for cross-artifact consistency reviewer -- validates alignment across SPEC.md, REQUIREMENTS.md, ROADMAP.md, and DESIGN.md.
Transfers files between the local PC and the SAP application server, and lists app-server directories.
Run security scans including SAST, dependency scanning, and secret detection
Generate a client-ready security hygiene snapshot for a prospect domain. Free lead magnet for consulting practices.
This skill verifies security and threat-mitigation coverage for completed SB work.
Ethereum and blockchain smart contract security analysis
Give an AI agent a self-custodial Bitcoin wallet on the Spark L2. Covers wallet init from a BIP39 mnemonic, zero-fee Spark and BTKN/LRC20 token transfers, Lightning invoices…
Integration with security-focused static analysis tools
STIX/TAXII threat intelligence format and sharing
Generate threat models using STRIDE, PASTA, or VAST methodologies
Validate production readiness of Vertex AI Agent Engine deployments across security, monitoring, performance, compliance, and best practices.
YARA rule creation, testing, and deployment
Sign in to ZeroGPU and persist the API key + Project ID. Use when the user asks to log in, authenticate, or set up ZeroGPU credentials for the first time.
Implement security best practices for TwinMind integrations. Use when securing API keys, configuring privacy settings, or implementing data protection for meeting recordings.
Soc2 Compliance Checker - Auto-activating skill for Security Advanced. Triggers on: soc2 compliance checker, soc2 compliance checker Part of the Security Advanced skill c — from…
🔐 Base Wallet - Crypto Identity for AI Agents. Create wallets, sign messages (SIWE), send transactions programmatically. No browser extensions, no human intervention.
5-level verification pyramid: static→unit→Playwright E2E (homepage-first, 6bp)→AI visual→post-deploy. 8-check quality gate.
Agents can sign plugins, rotate credentials without losing identity, and publicly attest to behavior.
HexStrike AI — MCP server cho 150+ cybersecurity tools: Nmap, SQLMap, Nuclei, Ghidra, Prowler... AI agent tự chọn tool, chạy pentest, bug bounty automation. Cần authorization.
You MUST use this when building projects end-to-end. Orchestrates all 12 team roles — automatically switches between CTO, architect, PM, engineers, SRE, security, DBA, QA, and EM…
Security-Scanner Agent fuer fabrikIQ und andere Projekte. Fuehrt umfassende Sicherheitspruefungen durch. — from tools-only/X-Skills
Generates audit trail infrastructure for entities. Implements IAuditable interface, EF Core SaveChanges interceptor, and automatic population of CreatedAt, UpdatedAt, CreatedBy,…
Безопасность сайтов на «1С-Битрикс: Управление сайтом» — модуль «Проактивная защита» (проактивный фильтр/WAF, веб-антивирус, панель безопасности, OTP/двухфакторка), безопасная…
SSL/БСП subsystems guidance and search via 1c-mcp_ssl_server MCP. Use when working with standard library subsystems - users, files, print forms, background jobs, email, common…
Audits security and supply-chain risk between two git refs with Codex cross-validation. 预发布安全审计（含 Codex 交叉验证）。Use when performing pre-release security audits, supply-chain…
Querying crypto news, newsflashes, articles, search, and on-chain market data (ETF flows, stablecoin supply, derivatives OI, M2, DXY, Bitfinex long positions, and more).
Configures 1Password CLI with direnv for fast, secure credential loading. Activates for: 1Password + direnv setup, slow secrets (>2 sec), .env.op files, op:// references, AWS…
Secure secret management using 1Password CLI. Detect plaintext secrets in files and codebases, convert environment files to 1Password templates, inject secrets securely using op…
Connect AI agents to the 2020117 decentralized network. Register, post to timeline, trade compute via NIP-90 DVM jobs (text generation, translation, summarization,…
Use when you need to design, review, or improve security in Spring Boot applications — including SecurityFilterChain, OAuth2/JWT resource server patterns, form login basi — from…
360-degree comprehensive security review Skill. Use before installing any Skill from ClawHub, GitHub, or other sources.
Rails coding patterns derived from analysis of 37signals' Fizzy codebase. Use when writing Rails code in 37signals/Basecamp style or when asked to follow 37signals patterns.
Complete VPN server setup from scratch. Takes a fresh VPS (IP + root + password from hosting provider) through full server hardening and 3x-ui (Xray proxy panel) installa — from…
Complete VPN server setup from scratch. Takes a fresh VPS (IP + root + password from hosting provider) through full server hardening and 3x-ui (Xray proxy panel) installa — from…
Protect your SaaS app from common vulnerabilities. Use when building auth, handling user data, or deploying features.
[0.4] the oauth_2_0_and_openid_connect subdomain of oauth 2 0 and openid connect (103 concepts)
Use when you need to design, review, or improve REST APIs with Quarkus REST (Jakarta REST) — including resource classes, HTTP methods, status codes, request/response DTOs — from…