Comprehensive guide for Dependency-Track - Software Composition Analysis (SCA) and SBOM management platform.
Scan package manifests and lockfiles for outdated and vulnerable dependencies. Classify by severity and update type.
Scans your project for outdated npm, pip, Cargo, Go, or Ruby packages. Runs a CVE security audit. Fetches changelogs, summarizes breaking changes with Gemini, and opens one PR per…
Analyze a specific dependency upgrade using manifests, lockfiles, repository usage, and verified official release evidence, including breaking changes, runtime requirements,…
Plan and de-risk a major dependency, framework, or runtime upgrade — map the full version path, read every intermediate migration guide, and pin the breaking changes to your…
Vet new package dependencies before installation. Triggers when adding packages via pip, npm, yarn, or similar package managers.
Use when the user names one or a few specific dependencies (with version) — not a whole project — and asks "does io.ktor:ktor-server-core 3.1.0 have any known vulnerabilities",…
Dependency Vulnerability Checker - Auto-activating skill for Security Fundamentals. Triggers on: dependency vulnerability checker, dependency vulnerability checker Part of the…
Automated scanning of project dependencies for known vulnerabilities using tools like npm audit, Snyk, and Dependabot patterns.
Scans project dependencies using OSV.dev API and Snyk CLI for known CVEs across npm, PyPI, Maven, and Go modules. Generates SBOM in CycloneDX format via syft.
Turns npm audit/Snyk results into prioritized patch plans with severity assessment, safe upgrade paths, breaking change analysis, and rollback strategies.
Deploy cloud-native deception across AWS, Azure, and GCP using decoy (honey) resources whose only purpose is to generate a high-fidelity alert the instant an attacker touches…
Deploys canary files (honeytokens) across file systems to detect ransomware encryption activity in real time.
Deploys and configures CrowdStrike Falcon EDR agents across enterprise endpoints to enable real-time threat
Plants Canarytokens-based decoy artifacts (honey credentials, DNS tokens, web-bug URLs, AWS keys, documents, kubeconfigs) using Thinkst's open-source Canarytokens project and…
Deploys and monitors ransomware canary files across critical directories using Python''s watchdog library for
Deploys TCP Trojan proxy nodes on Xray-core with certbot Let's Encrypt or self-signed EC P-256 + SHA-256 certificate fingerprint pinning, TCP Fast Open kernel tuning with BBR,…
Query the Cancer Dependency Map (DepMap) for cancer cell line gene dependency scores (CRISPR Chronos), drug sensitivity data, and gene effect profiles.
Bir tanık veya taraf (isticvap) için duruşma/ifade soru taslağı (outline) hazırlar — şirket içi belgeleri veya UYAP evraklarını çeker, hukuki teori etrafında başlıkları d — from…
Use when hardening npm supply chain, pinning dependency versions, adding .npmrc security flags, or setting up Renovate and audit workflows.
Check dependencies for vulnerabilities. Use when user asks to "audit dependencies", "/deps-audit", "check for vulnerabilities", or wants to check dependency health.
Comprehensive dependency management expertise covering TypeScript (npm, yarn, pnpm, bun), Rust (cargo), and Python (pip, poetry, uv).
Dependency-upgrade campaign — outdated scan, batch-by-severity, breaking-change remediation, lockfile audit.
Use when the deliverable is a DESCRIPTION of what's in the data rather than an effect, a counterfactual, or a prediction — stylized facts, raw and indexed trends ("what's the…
Design, implement, tune, or test readable tactical action combat for web games. Use for attack timing, guard and dodge windows, hit contact, posture, lock-on, weapons, boss…
Designs and validates backup, point-in-time-recovery, and disaster-recovery strategy for datastores — sets RPO/RTO targets, configures snapshot plus continuous WAL/binlog/oplog…
Builds, redesigns, polishes, and visually reviews websites and web UIs that must feel specific, time-appropriate, non-generic, and production-quality.
Use before calling any design done, and for anything with concurrency, persistence, or external dependencies — risk-storm the design: attack it, then decide resilient vs fail-fast…
Build retention into visit burden, schedule, and engagement to lower the ~30% dropout, instead of re-recruiting. Reach for this when dropout threatens the timeline.
Design a Uniswap integration architecture. Use when user is building a project that needs to integrate Uniswap and wants recommendations on integration method (Trading API vs SDK…
Design safe n8n workflows with deterministic routing, credentials, idempotency, recovery, local-model checks, drafts, and exact approval gates.
Parallel design review by 6 specialist agents (PM, Architect, Designer, Security Design, UX, CTO) with mandatory unanimous approval.
Copilot agent that assists with systematic design review using ATAM (Architecture Tradeoff Analysis Method), SOLID principles, design patterns, coupling/cohesion analysis, error…
Premium brand-kit image generation skill for creating high-end brand-guidelines boards, logo systems, identity decks, and visual-world presentations.
Use when analyzing user journeys, auditing UX quality, prototyping flows, or designing new pages/features from a product perspective.
Designs backend API error contracts with a REST-default approach using RFC 9457 Problem Details, stable machine-readable codes, retry semantics, validation error payloads,…
Expert guide for Electron 33+ desktop application development — Electron Forge, context isolation, IPC security, native menus, auto-updates, and multi-window management / Panduan…
Electron process architecture, IPC patterns, preload security, native APIs, packaging and distribution
Electron fuses, ASAR integrity, sandbox hardening, CSP, permission handling, navigation restrictions
Tauri 2.x deny-by-default security model, capabilities, permissions, scopes, ACL
Persistent storage, SQLite databases, and credential management in Electron apps
Detection, hunting, and hardening methodology for Active Directory credential abuse that follows initial foothold: AS-REP Roasting (MITRE ATT&CK T1558.004), DCSync directory…
Detection and hunt methodology for anti-forensic indicator removal on Windows endpoints: audit-log clearing (MITRE ATT&CK T1070.001), timestomping (T1070.006), and file wiping or…
Detection and response methodology for API business logic abuse - BOLA / IDOR (OWASP API1:2023), request-rate abuse (API4:2023), and out-of-order workflow attacks against REST and…
Detection and hardening methodology for business logic abuse in web and API applications: workflow/state-machine bypass (skipping payment or approval steps) and pricing abuse…
Detection and hunt methodology for command-and-control beaconing, where an implant calls home on a regular interval over HTTP(S), DNS, or a tunnel service, hidden inside normal…
Detection, hunting, and hardening methodology for secrets exposed in CI/CD pipelines: deployment keys, cloud tokens, API secrets, and registry passwords leaked through build logs,…
Detection and hunt methodology for cloud IAM attack paths across AWS, Azure, and GCP: privilege-escalation chains, credential and role manipulation, and control-plane log…
Detection and response for data exfiltration over DNS and HTTPS/web channels, and for egress volume anomalies (MITRE ATT&CK T1041, T1048, T1048.003, T1071.004, T1567).
Detection, hunting, and hardening methodology for dependency-confusion and namespace-takeover attacks, where an adversary publishes a public package matching an internal package…
Detection, hunting, and hardening for insecure deserialization and object-injection gadget chains, where a crafted serialized object sent to a public-facing app becomes remote…
Detection and hunting methodology for endpoint sensor tampering: AMSI patching (amsi.dll AmsiScanBuffer), ETW blinding (ntdll EtwEventWrite and provider disable), and userland API…
Detect hardcoded secrets, API keys, passwords, and credentials in source code. Security audit for leaked secrets. Works across all languages.
Detection and hardening methodology for HTTP Parameter Pollution (HPP), where an attacker sends the same parameter name more than once (for example role=user&role=admin) so the…
Detection and response for Insecure Direct Object References (IDOR) and broken access control in web apps: horizontal privilege escalation (reading another owner's objects),…
Detection methodology for initial access via exploitation of public-facing applications and the payload delivery that follows (MITRE ATT&CK T1190, T1133, T1105, tactic TA0001).
Detection and response methodology for Kerberoasting in Active Directory (MITRE ATT&CK T1558.003, Credential Access).
Detection and hunt methodology for software keyloggers and input-capture hooks across Windows, macOS, and Linux endpoints (MITRE ATT&CK T1056, T1056.001, T1056.004).
Detection and response for on-path Layer 2 and Layer 3 attacks on a local network: ARP cache poisoning, LLMNR/NBT-NS poisoning with SMB/LDAP relay (Responder-style), rogue DHCP,…
Detection and hunt methodology for Windows lateral movement: remote execution over SMB/WMI/WinRM/RDP/DCOM (MITRE ATT&CK T1021, T1047, T1569.002), Pass-the-Hash and…