This skill enables Claude to seamlessly integrate with various secrets managers like HashiCorp Vault and AWS Secrets Manager.
Proactive security scanning for newly generated or modified code. Intelligently detects changes, runs appropriate scans (SAST, SCA, IaC), filters to only NEW issues, and prevents…
Helps choose secure, healthy open-source packages by evaluating vulnerability status, maintenance health, popularity, community, and security posture.
Define, build, review, and harden production-grade fullstack applications with strong security posture.
Comprehensive, framework-agnostic security auditor. Audits codebases for common vulnerabilities introduced by AI coding assistants in "vibe-coded" applications, as well as complex…
This skill covers hardening GitHub Actions workflows against supply chain attacks, credential theft, and privilege
Always use this skill when designing, applying, or debugging Access Rights and security in Pigment applications.
This skill covers security hardening for serverless compute platforms including AWS Lambda, Azure Functions,
This skill enables Claude to conduct a security-focused code review using the security-agent plugin. It analyzes code for potential vulnerabilities like SQL injection, XSS,…
This skill enables Claude to generate comprehensive security audit reports. It is designed to provide insights into an application or system's security posture, compliance status,…
This skill conducts legal review of security audit findings to assess regulatory disclosure obligations.
This skill designs and runs the security awareness training programme for all employees. Use when asked to create security training, run phishing simulations, or track training…
Establish a security baseline for a website or web app. Use this skill when configuring HTTPS and TLS, setting security headers, planning secrets management, evaluating CSP…
This skill establishes the security baseline configuration for all systems at project inception. Use when asked to set up security defaults, harden a new environment, or configure…
This skill should be used when the user asks about "cis benchmark", "cis kubernetes", "cis docker", "cis aws", "cis azure", "cis gcp", "soc2 rego", "soc2 policy", "hipaa…
Define the trust boundaries and perimeters within an infrastructure architecture to isolate sensitive components.
个人信息保护认证顾问——指导企业通过个人信息保护认证 作为数据出境合规路径之一，或提升整体个人信息保护水平。 适用情形：用户说"个保认证怎么做"、"个人信息保护认证 有哪些"、"等保和个保认证的关系"、"认证对出境的帮助"、 "TC260认证"、"网络安全认证"。
Progressive-disclosure security-depth modules for the security-reviewer. Holds boundary-keyed checklists (access-control, authn-session, injection, path-and-file,…
Automated scanning of infrastructure against regulatory frameworks such as PCI DSS, HIPAA and SOC 2, and against security best practice.
Identify the specific regulatory controls and mitigations required by an identified system threat profile.
Cross-cutting security & anti-fraud authority for the ERP/POS — money flows (refund/void/discount/cash/manual JE), RBAC integrity, audit-log completeness, PII & information-leak…
This skill analyzes HTTP security headers of a given domain to identify potential vulnerabilities and misconfigurations.
Security hygiene for GSD's self-modifying skill and agent system. Use this skill whenever: creating, editing, or deleting skill files (.claude/skills/, .claude/commands/),…
Assists with security incident response, investigation, and remediation. This skill is triggered when the user requests help with incident response, mentions specific incident…
Use this skill to seed Claude Code's auto-memory with pre-built security/compliance patterns — known-safe code patterns, false-positive suppressions for the…
This skill enables Claude to identify potential security misconfigurations in various systems and configurations.
ACTIVATE when conducting a security audit / review / vulnerability assessment on a personal project. Loads alongside security-audit:security-audit (which provides the…
This skill allows Claude to conduct comprehensive security audits of code, infrastructure, and configurations.
Use this skill to build professional security reports (HTML, PDF, DOCX) from plugin-security-checker scan results.
This skill should be used when the user asks to "perform vulnerability scanning", "scan networks for open ports", "assess web application security", "scan wireless networ — from…
This skill automates security vulnerability testing. It is triggered when the user requests security assessments, penetration tests, or vulnerability scans.
Generate AI images using Volcengine Seedream model. Supports text-to-image (T2I), image editing (I2I), multi-image fusion, and web-search-based generation.
Use this skill when designers, e-commerce operators, advertisers, brand teams, social-commerce teams, and content creators need to create brand key visuals and performanc — from…
Use this skill when designers, e-commerce operators, advertisers, brand teams, social-commerce teams, and content creators need to replace a background while preserving t — from…
Use this skill when designers, e-commerce operators, advertisers, brand teams, social-commerce teams, and content creators need to keep the same person or IP character co — from…
Use this skill when designers, e-commerce operators, advertisers, brand teams, social-commerce teams, and content creators need to create marketplace hero images and SKU — from…
Use this skill when designers, e-commerce operators, advertisers, brand teams, social-commerce teams, and content creators need to create visuals that include specified t — from…
Use this skill when designers, e-commerce operators, advertisers, brand teams, social-commerce teams, and content creators need to edit, retouch, or restyle an existing i — from…
Use this skill when designers, e-commerce operators, advertisers, brand teams, social-commerce teams, and content creators need to transform a reference image while prese — from…
Use this skill when designers, e-commerce operators, advertisers, brand teams, social-commerce teams, and content creators need to create livestream backdrops, product ca — from…
Use this skill when designers, e-commerce operators, advertisers, brand teams, social-commerce teams, and content creators need to create campaign visuals, launch assets — from…
Use this skill when designers, e-commerce operators, advertisers, brand teams, social-commerce teams, and content creators need to combine subjects, materials, compositio — from…
Use this skill when designers, e-commerce operators, advertisers, brand teams, social-commerce teams, and content creators need to create campaign, event, and promotional — from…
Use this skill when designers, e-commerce operators, advertisers, brand teams, social-commerce teams, and content creators need to create hero, benefit, use-case, and det — from…
Use this skill when designers, e-commerce operators, advertisers, brand teams, social-commerce teams, and content creators need to create polished product photography and — from…
Use this skill when designers, e-commerce operators, advertisers, brand teams, social-commerce teams, and content creators need to clean, polish, and enhance product phot — from…
Use this skill when designers, e-commerce operators, advertisers, brand teams, social-commerce teams, and content creators need to create authentic product discovery and — from…
Use this skill when designers, e-commerce operators, advertisers, brand teams, social-commerce teams, and content creators need to generate an image from an English or mu — from…
Generate images using the Doubao SeeDream API based on text prompts. Use this skill when users request AI-generated images, artwork, illustrations, or visual content creation.
Auditoria de segurança de Agent Skills (SKILL.md). Use esta skill sempre que o usuário pedir para analisar, auditar, revisar ou verificar a segurança de uma skill, SKILL.md, ou…
Use this skill any time the user wants to create, edit, design, generate, deploy, or debug a SentinelOne Singularity Data Lake (SDL) dashboard.
Establish outbound HTTP connections to external systems using REST, SOAP, and HTTP protocols. Covers RESTMessageV2, SOAPMessageV2, OAuth token retrieval as part of API flows, and…
Build NowAssist Skill configurations using the Fluent SDK NowAssistSkillConfig API. Covers the two-argument skill definition pattern, input/output typing, tool graph construction…
Secure data and credentials using cryptographic operations, encryption, and authentication primitives.
Sets up notification channels for CloudWatch alarms using SNS topics and subscriptions. Always use this skill when configuring alarm notifications — it creates encrypted SNS…
Generates a public-facing, investor-enticing changelog ("shipping log") from a git or GitHub repository's recent history.
This skill should be used when the user asks to "search for exposed devices on the internet," "perform Shodan reconnaissance," "find vulnerable services using Shodan," "scan IP…
Comprehensive integration guide for connecting external systems (Java, Python, .NET, Node.js, low-code platforms, etc.) to SAP (ECC, S/4HANA On-Premise, S/4HANA Cloud).
This skill should be used when the user asks to "send a Signal message", "reply on Signal", "react to a Signal message", "edit/delete a sent Signal message", "make Signal feel…
Assess and govern security-sensitive changes by identifying trust boundaries, secrets, privileges, untrusted execution, dependency/provenance risk, network/data exposure, insecure…