Use this skill when the user says 'CSP', 'Content-Security-Policy', 'security headers', 'HSTS', 'X-Frame-Options', 'clickjacking', 'unsafe-inline', 'unsafe-eval', or needs to…
Reference guide for implementing and configuring Comparison Tool (CT) repository classes that extend ComparisonToolRepositorySupport.
Use when handling research ethics, consent, community accountability, and data/transparency for a Current Anthropology (CA) manuscript — informed consent, anonymization — from…
A Cursor Canvas is a live React app (.canvas.tsx) that the user can open beside the chat. Use a canvas when the agent produces a standalone analytical artifact — quantitative…
Use when building any system where email content triggers actions — AI agent inboxes, automated support handlers, email-to-task pipelines, or any workflow processing untrusted…
Foundational cybersecurity literacy covering threat landscape (malware, phishing, social engineering, network attacks), defensive practices (encryption, authentication, access…
Security advisory skill (free edition). Use this skill when the user needs help with cybersecurity strategy, threat modelling, risk assessment, compliance, or security…
This skill should be used when the GM needs to handle spellcasting situations, including resolving spell effects, managing spell slots, calculating spell save DCs, handling…
This skill should be used when the user asks to "map data flows", "trace data through the system", "show how data moves", "identify trust boundaries", "find where data is…
This skill enables Claude to automatically scan code and configuration files for potential data privacy vulnerabilities using the data-privacy-scanner plugin.
Design or audit an auditable operating system for individual or account data-rights requests: access, export/portability, correction, deletion/erasure, restriction, objection or…
This skill automates database backups using the database-backup-automator plugin. It creates scripts for scheduled backups, compression, encryption, and restore procedures across…
This skill manages database recovery operations using the database-recovery-manager plugin. It enables disaster recovery, point-in-time recovery (PITR), and automated failover…
This skill enables Claude to perform comprehensive database security scans using the database-security-scanner plugin.
Generates a Jupyter notebook that transforms datasets between ML schemas for model training or evaluation.
Guidance for recovering data from SQLite Write-Ahead Log (WAL) files that may be corrupted, encrypted, or inaccessible.
> Use this skill whenever asked about German cryptocurrency taxation. Trigger on phrases like \"Krypto Steuer\", \"crypto tax Germany\", \"Haltefrist\", \"§23 EStG\", \"private…
Analyze network packets beyond metadata to find malicious payloads and protocol anomalies, covering signature matching, fragmented-packet reassembly, application-layer decoding…
Route bulk text processing tasks to MiniMax MCP tools to conserve GLM rate limits. Use this skill whenever the user asks for summarization, format conversion, test data…
Comprehensive guide for configuring and managing GitHub Dependabot. Use this skill when users ask about creating or optimizing dependabot.yml files, managing Dependabot pull…
Audit external libraries, inherited contracts, and third-party oracles for known risk. Use this skill whenever the user mentions dependency audit, inherited contract, oracle risk,…
This skill covers detecting cyber attacks targeting Supervisory Control and Data Acquisition (SCADA) systems
This skill teaches security teams how to deploy and operationalize Amazon GuardDuty for continuous threat detection
This skill teaches security teams how to detect and respond to unauthorized cryptocurrency mining operations
This skill covers detecting sophisticated cyber-physical attacks that follow the Stuxnet attack pattern of modifying
Design procedural data flows that preserve integrity and availability across boundaries, covering CIA-triad enforcement, encryption-protocol selection, idempotency guardrails and…
Use Automattic’s official wp-plugin-development skill when an agent needs to build, refactor, secure, or package a WordPress plugin with correct activation hooks, settings…
Reviews a product document (PRD, spec, design brief) BEFORE implementation to surface holes — undefined edge cases, missing states, policy gaps — by attacking what the document is…
Differential Security Review workflow skill. Use this skill when the user needs Security-focused code review for PRs, commits, and diffs and the operator should preserve the…
Reconstruct attack timelines through deep data recovery and log correlation, covering deleted-file recovery, memory-dump analysis, registry and shellbag forensics, and…
This skill guides writing DigitalOcean infrastructure with OpenTofu/Terraform. Use when provisioning Droplets, VPCs, Managed Databases, Firewalls, or other DO resources.
This skill enables Claude to plan and implement disaster recovery (DR) procedures. It generates configurations and setup code based on specific requirements and infrastructure.
Read Discord for financial research using the discord-cli tool (read-only). Use this skill whenever the user wants to read Discord channels, search for messages in trading…
Connect SaaS data (HubSpot, Stripe, Salesforce, GitHub, Slack, etc.) to Wren Engine for SQL analysis.
Guide for PCIe DMA threat modeling, FPGA-based memory access, and defensive implications in game security.
Use this skill when the user is doing hands-on DOCA AES-GCM work on a BlueField DPU or ConnectX NIC — configuring `doca_aes_gcm_task_encrypt` / `_task_decrypt`, querying…
Use this skill when the user is deploying or operating the DOCA Argus Service — the packaged BlueField-side runtime-security container that watches the BlueField and attached host…
Use this skill when the user is doing hands-on DOCA SHA programming — offloading SHA-1, SHA-256, or SHA-512 hashing onto a BlueField DPU or ConnectX accelerator, picking between…
Check whether the claims in public-facing documentation (README, release notes, install/usage docs) are supported by the evidence the user provides — files, manifests, logs, and…
Expert DORA (Regulation (EU) 2022/2554 — Digital Operational Resilience Act) compliance advisor for EU financial entities.
Expert DORA (Regulation (EU) 2022/2554 — Digital Operational Resilience Act) compliance advisor for EU financial entities.
Load environment variables from a .env file into process.env for Node.js applications. Use when configuring apps with secrets, setting up local development environments, managing…
This skill should be used when draining a labeled issue backlog (deferred-scope-out, code-review, type/security) in one cleanup PR.
Tool routing and cross-cutting rules for Dataverse work — which skill applies to which task, environment-confirmation, and pull-to-repo.
Use this skill for EOS Entrega 3 Módulo 4 — auditoría (emisor y lectura) y checklist de seguridad transversal (RBAC, cifrado en tránsito, exposición de errores).
Create new architecture evaluation rubrics (profiles and overlays) based on the Enterprise Architecture Rubric Operational Standard (EAROS).
Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features.
> Use this skill whenever asked about the legal status or taxation of cryptocurrency in Egypt — Bitcoin, stablecoins, tokens, NFTs, mining, staking, or trading — for individuals,…
EKS cluster reconnaissance and environment discovery. Detects compute strategy (Karpenter, MNG, Auto Mode, Fargate), IaC tooling (Terraform, CloudFormation, CDK, eksctl), CI/CD…
Scaffold a native-looking, effective Electron app with best practices baked in. Creates a production-ready Electron application with security hardening, modern tooling, proper IPC…
Ethereum EIP-4337 smart contract wallet designed for AI agents. Use this skill whenever the user wants to manage Ethereum accounts, check balances, send ETH/tokens, swap tokens on…
Employment Contract Templates workflow skill. Use this skill when the user needs Templates and patterns for creating legally sound employment documentation including cont — from…
Encrypts sensitive data at rest, in transit, and per-field using AEAD-only ciphers (AES-256-GCM or ChaCha20-Poly1305 — never ECB, never unauthenticated CBC, never raw RSA) —…
This skill enables Claude to encrypt and decrypt data using various algorithms provided by the encryption-tool plugin.
Use this skill whenever working on SwarmGuard enforcement — adding or changing an enforce.Sink, touching ipset/nftables/iptables logic, emitting a CrowdSec or Fail2Ban-compatible…
Deep reference skill for Enosys DEX V3 (CLMM) development on Flare Network. Use this skill whenever Darren asks about: building tools or apps that interact with Enosys DEX V3…
Design or audit an enterprise contract operating system across authoritative document intake, versions and precedence, clause and obligation extraction, redlines/deviations,…
Elite manual security code review skill for deep, adversarial vulnerability hunting and exploit-chain discovery.
Apply this skill whenever you need to design supplementary test cases using Error Guessing — an experience-based test design technique.
Analyzes SQL Server ERRORLOG files for operational issues, availability group failures, memory pressure, I/O subsystem warnings, and security events.