SQLiteCpp coding standards and API rules for core edits, public headers, style, and Doxygen.
Provide systematic methodologies for automated SQL injection detection and exploitation using SQLMap.
Audit a single AWS SQS queue's configuration for the misconfigurations that silently drop or re-deliver messages while every attribute reads as fine.
Multi-agent advisory squad workflow for implementing or reviewing code changes. Two modes — implement (default) runs classify → score risk → select agents → planner → Gate 1 →…
Dispatch six parallel reviewers (security, correctness, conventions, test coverage, architecture, project-alignment) across the current branch diff and merge their findings into…
Mehrheitsaktionaer will Minderheitsaktionaere aus AG herausdrangen oder Minderheitsaktionaer wird herausgedraengt: Squeeze-out §§ 327a ff. Akt...
squirrelscan audits websites for SEO, performance, security, accessibility, content, and structured data issues (249+ rules) and scores site health, via the squirrel CLI.
Senior-level Clerk authentication expertise for Next.js 15/16+ applications. Use when implementing auth, protecting routes, fixing auth errors (500s, handshake redirects,…
Sigreturn Oriented Programming (SROP) — sigreturn syscall ile tüm registerları tek payload'da kontrol etme; gadget kıtlığında ROP alternatifi
Use to re-evaluate an already-bootstrapped project for drift, incoherence, and improvement opportunities.
Zero-knowledge SSH ops CLI — server health checks, docker/systemd control, log tailing, Postgres introspection, and declarative deploys, without ever exposing credentials to the…
Normalize SKILL.md artifacts into Scheduling-Structural-Logical (SSL) JSON representations using a conservative multi-pass extraction pipeline.
Check SSL/TLS certificates for any hostname — expiry dates, issuer, SANs, protocol version, cipher suite. Use when asked to check if a certificate is valid,...
Audits TLS/SSL configurations using sslyze Python library and SSL Labs API v3. Checks certificate chain validity, HSTS headers, and OCSP stapling status with Certificate…
Performs deep TLS certificate chain validation using OpenSSL and Certificate Transparency logs. Monitors expiration dates via the crt.sh API and checks OCSP responder status.
Manage SSL/TLS certificates with automated provisioning, renewal, and monitoring using Let's Encrypt, ACM, or Vault.
Check SSL/TLS certificate expiry, validity, chain, and configuration for any domain.
Expert-level guide to ssl contrastive learning. Comprehensive coverage of advanced concepts, production implementation, and optimization strategies.
Configures SSL/TLS certificates, implements secure protocols and ciphers, and sets up security headers.
MUST use WHEN используешь или расширяешь функциональность БСП (Библиотека стандартных подсистем). Provides каталог готовых функций ОбщегоНазначения и правила вызова подсистем без…
Systematic debugging workflow for SSL/proxy connectivity issues with government and institutional websites
Systematic workflow for troubleshooting SSL/proxy connectivity issues with government websites
Systematic approach to diagnosing and resolving SSL/proxy connectivity issues with restricted websites
Validates SSL/TLS certificates using OpenSSL s_client, checks OCSP stapling status, and monitors expiry dates.
SSL工具箱(专业版)面向团队与企业,提供完整的TLS证书管理、全主流服务器配置、安全审计评分、自动化监控告警与多域名治理能力。核心能力: - 全证书类型:单域名/通配符/SAN/多域名/EV - 全主流服务器:Nginx/Apache/Node。Use when 需要安全检测、合规审计、漏洞扫描、加密防护时使用。不适用于渗透测试未授权目标.
Comprehensive TLS/SSL analysis via Qualys SSL Labs — grades cipher suites, certificate chains, protocol versions, and known vulnerabilities
Complete SSRF detection and exploitation methodology — injection point discovery, cloud metadata theft (AWS/GCP/Azure), internal network enumeration, protocol handler abuse,…
Active out-of-band SSRF probe that injects an OAST/collaborator callback into common URL/redirect params and forwarding headers, then watches for the DNS/HTTP hit that proves a…
Post-cycle second-pass review of the last `/sst-dev-cycle` commit on any project. Reads what shipped (code + tests + spec + TODO + docs), evaluates it against the spec item it…
Complete SSTI detection and exploitation methodology — engine fingerprinting, RCE payloads per engine (Jinja2, Twig, FreeMarker, Velocity, Mako, ERB, EJS, Pebble, Thymeleaf,…
Stabilisierungstechniken: Grounding, Sicherer Ort, Containment und Atemuebungen. Soforttechniken bei akuter Belastung und Panikattacken.
Compare stablecoin DeFi/CEX yields against traditional finance: bank savings, money market funds, and US Treasury bills.
Entry point skill for this template stack. Routes tasks to focused skills: Astro, React islands, TypeScript, SCSS, security, brainstorming, and writing implementation plans.
Secure WebContainer deployments: CSP headers, sandbox isolation, input validation. Use when working with WebContainers or StackBlitz SDK. Trigger: "stackblitz security".
Set up checked-in seed data so authenticated HawkScan can reach non-trivial paths. Drives the `hawk perch seed` preflight, designs the minimum seed manifest from the repo digest,…
Create polished, dependency-free architecture, workflow, sequence, data-flow, and lifecycle diagrams for Stacks applications as standalone HTML with inline SVG, dark/light themes,…
Senior Staff Engineer code review with SOLID principles, security analysis, and architecture critique.
Type Thought-template (instantiate before use) - Research basis Donation attacks via unsolicited token transfers
Guidance on non-obvious runtime behaviors of Salesforce standard objects — polymorphic lookups, lead conversion field loss, PersonAccount dual-nature, CaseComment trigger…
Use when reviewing work against the team's agreed engineering standards and the technical strategy — at feature kickoff, in PR review, before merge, before release, or after…
Side-channel-resistant cryptography patterns from Stanford SJCL. Constant-time operations, AES-CCM authenticated encryption, PBKDF2 key derivation, random number generation, and…
Use when: adding authentication/authorization to a TanStack Start app — protecting routes with beforeLoad + redirect, authorizing server functions, sessions/cookies (useSession,…
Cria e evolui a documentação AUTORAL de um projeto — as metas de qualidade, as restrições, o contexto/fronteiras, a estratégia e o glossário.
Inject short-lived, scoped service credentials into Claude Code sessions so agents can reach approved systems without exposing raw secrets.
Use when creating type-safe RPC server logic in TanStack Start with createServerFn — GET/POST methods, .validator() (Zod or function), .handler(), useServerFn hook, FormData…
When the user needs a security assessment — threat modeling, vulnerability review, auth flow audit, dependency scanning, or says "is this secure", "review for vulnerabilities",…
When the user needs to prepare for SOC 2, build a compliance roadmap, assess security posture, quantify security risk, or says "we need SOC 2", "security audit", "complia — from…
AI-powered startup companion for Korean founders. Evaluate business plans, match government funding programs (TIPS/DeepTech/Global TIPS), connect with 3,972+ TIPS-selecte — from…
AI-powered startup companion for Korean founders. Evaluate business plans, match government funding programs (TIPS/DeepTech/Global TIPS), connect with 3,972+ TIPS-selecte — from…
Patentanwälte: startup ip budget warnung - Rechtsprechungscheck, stärkste Gegenansicht und Red-Team-Korrektur; mit Live-Normencheck, Kammerlogik, Verhältnismäßigkeit, Belegplan…
Stabilisierungsanordnung: Red-Team und Qualitätskontrolle: 1. Welche Rolle hat die fragende Person und wer ist Gegenüber? 2.
Configure and use the `stash` package for project initialization, EQL database setup, encryption schema management, and Supabase integration.
Audit and validate D&D 5e 2024 monster stat blocks for mechanical correctness, format conformity, and internal consistency.
Internal — Local-mode CRUD for operational state (sessions, tasks, phase bypasses). Direct SQLite, no Librarian.
StateRAMP expert for state and local government cloud services. Deep knowledge of State Risk and Authorization Management Program including Low/Moderate impact levels, NIST 800-53…
Analyze source code for security vulnerabilities using static analysis tools, custom rules, and CI-integrated scanning pipelines.
Implement static code analysis with linters, formatters, and security scanners to catch bugs early. Use when enforcing code standards, detecting security vulnerabilities, or…
Security best practices specifically for static HTML/CSS websites on GitHub Pages
DBA Deutschland Bulgarien 2010. Anwendungsfall Outsourcing IT Pflege Holding Beteiligungen. EU-MTRL ergaenzend. Niedrige KSt 10 Prozent. Methodenartikel Anrechnung.
Steuerberater: stbvv vergütung und transparenz - Rechtsprechungscheck, stärkste Gegenansicht und Red-Team-Korrektur; mit Live-Normencheck, Kammerlogik, Verhältnismäßigkeit,…