AI/LLM defensive security reference: prompt-injection defense, OWASP LLM Top 10 defensive mapping, MCP and agentic tool-call hardening, training-data poisoning detection,…
OWASP Top 10 security checklist, authentication patterns, input validation, and HTTP security headers reference.
DevSecOps, container, and API operational defensive security reference: CI/CD pipeline hardening, secret scanning, IaC misconfiguration detection, SAST/DAST integration, container…
Search-visibility and crawlability reference for web output: canonical URL discipline, per-page title and meta description uniqueness, robots.txt and sitemap.xml as host-derived…
Software supply-chain defensive security reference: SBOM generation and verification (SPDX
UI polish and interface-completion reference: the small visual details — concentric border radius, optical alignment, shadow-vs-border, motion easing, typography smoothing,…
AST-based structural code search, security scanning, and refactoring using ast-grep (sg CLI) with pattern matching and code transformation across 40+ languages.
Scan, fix, and remediate security vulnerabilities in a local code repository using Mobb MCP/CLI. Use when the user asks to scan for vulnerabilities, run a security check, auto-fix…
Use when deciding whether a project belongs at MobiCom or a sibling venue — testing whether the core contribution is a mobile/wireless-networking mechanism the SIGMOBILE flagship…
Protect a mobile app by storing secrets in the platform keystore, pinning certificates only where rotation is controlled, and treating obfuscation as delay rather than defense.
Mobile biometric authentication expert for Face ID, Touch ID, BiometricPrompt, Keychain/Keystore, and WebAuthn.
Handle Capacitor platform depth beyond UI: plugins, OTA, deep links, push, offline, native CI/CD, App Store / Play Store submission, Apple preflight, security scan, Cordova…
Build modern mobile applications with React Native, Flutter, Swift/SwiftUI, and Kotlin/Jetpack Compose.
Steuert verlorene Geräte und gestohlene Laptops im Nis2 Cybersecurity Compliance.
Shared rules for any mobile engineering work — single-stack lockdown, simulator/emulator-in-the-loop verification (a UI change is not done until it has run on a device),…
Android and mobile application security testing — emulators, rooting, traffic interception, dynamic instrumentation.
Run a complete mobile app pre-launch verification — chains performance audit, QA testing, OWASP mobile security review, App Store and Play Store compliance checks, and store…
Implement offline-first mobile apps with local storage, sync strategies, and conflict resolution. Covers AsyncStorage, Realm, SQLite, and background sync patterns.
Mobile offline-first architecture with local databases, CRDT conflict resolution, and background sync.
Mobile device intelligence — Android/iOS app analysis, mobile forensics, emulators, messaging app reconnaissance, and device fingerprinting.
Mobile payment integration for Stripe, Apple Pay, Google Pay, in-app purchases, and subscription management.
Use when pentesting an Android/iOS app — Frida 17 instrumentation, SSL-pinning & root/jailbreak bypass, Android 14/15 CA injection, exported-component/content-provider abuse,…
Use when a mobile app already exists, before changing it — inventory the runtime (Expo vs CLI), navigation, state, native modules, build config, and iOS/Android readiness.
Use for authorized Android or iOS application reverse engineering and security testing, including APK or IPA analysis, runtime instrumentation, SSL pinning, and platform…
Mobile application security skill for implementing OWASP MASVS compliance, secure storage, certificate pinning, biometric authentication, and security hardening across iOS and…
Expert in secure mobile coding practices specializing in input validation, WebView security, and mobile-specific security patterns.
Secure storage, certificate pinning, biometric auth, jailbreak detection, code obfuscation, network security, screenshot prevention for React Native
Audit mobile apps against OWASP Mobile Top 10 (M1-M10): credential hardcoding, supply chain dependencies, insecure auth/token storage (Keychain/Keystore), input validation (deep…
Usar cuando se escanea un APK/AAB Android en busca de vulnerabilidades de seguridad. Integra con MobSF (Docker) y análisis básico como fallback.
MMKV high-performance key-value storage for React Native - synchronous JSI-based reads/writes, encryption, typed hooks, multiple instances, listeners, persistence middleware…
PowerSync offline-first sync engine on SQLite for React Native - schema definition, watched queries, CRUD operations, backend connectors, sync rules, conflict resolution,…
Use to plan input/schema validation — Zod (or equivalent) schemas shared across forms and API boundaries, with clear error messages. Validate at the edges; reuse schemas.
OWASP Mobile Top 10 vulnerability knowledge base for identifying, assessing, and remediating security risks in mobile application environments.
Real-time crypto market data, wallet portfolio tracking, and token analytics across 88+ blockchains. Use when the user wants to check any token price (by name, symbol, or contract…
Model-aware image prompt engineering for any agent or image generation workflow. Use when writing, improving, translating, debugging, or evaluating prompts for OpenAI image…
Apply the fixed model-role and thinking-effort policy whenever work is delegated to subagents or a model/effort choice is made: the orchestrator (top-tier model) DIRECTLY sets…
Vendor-neutral routing guide for choosing the right model tier by task type. Mechanical work uses a smaller/faster model; implementation uses a standard model; architecture,…
Model selection strategy for subagents — haiku for exploration, sonnet for implementation, opus for architecture/security
Use before attacking a build that has any lifecycle, phases, or persisted progress — enumerate the states, transitions, and guards, then probe every transition under crash / kill…
Model threat actors, intrusion sets, campaigns, and TTPs as a STIX 2.1 knowledge graph in OpenCTI (Filigran) using the pycti Python client, connectors, and import workers for…
Moderation audit trail expertise — auto-activates on compliance logging and escalation documentation tasks
Guides C++ code toward modern idioms (C++20/23/26). Use when writing new C++ code, modernizing legacy patterns, or working on security-critical C++.
Authors and reviews 2026 Baseline HTML: document head, semantic landmarks, native dialog/popover/invoker commands, web components, forms, WCAG 2.2, JSON-LD, loading/CLS, and HTML…
Modularize a chrome/browser/ subfolder by splitting its sources out of the monolithic //chrome/browser:browser target into dedicated source_set targets in the subfolder's own…
Безопасная работа с production-сервером Фрейм (таймфрейм.рф) через SSH — деплой файлов, выполнение команд в контейнерах, чтение логов, БД-запросы.
Use after Molecular Cell reviews arrive to triage the decision, prioritize the (often mechanism-completing) new experiments by impact × feasibility, and draft a point-by-point…
Bulletproof creds/ports/configs/vulns scan + safe auto-fix V3. 100% secure—no injection/lockout/exfil. Use for host audits (laptop/Pi/VPS).
Security layer protecting agents from prompt injection, social engineering, and malicious content on Moltbook and similar platforms.
Security layer protecting agents from prompt manipulation, social engineering, and malicious content。Use when 需要生成营销文案、写作内容、标题优化、内容创作时使用。不适用于纯技术文档撰写.
AI-to-AI negotiation for Moltbook marketplace. Handle job requests, pricing negotiations, and contract terms while maintaining security.
Multi-layer security for autonomous AI agent. Protects against prompt injection, API key leaks, and unauthorized operations while maintaining flexibility. Always active.
Cryptographically sign Moltbook posts with Ed25519. Enables verifiable agent identity without platform support.
Security hardening guide for Moltbot/Clawdbot. Lock down your gateway, fix file permissions, set up auth, configure firewalls. Based on real vulnerability research.
Security scanner for Moltbot skills. Scan GitHub repositories for vulnerabilities before installation.
Publish and manage your cryptographically-verified site on MoltCities — the residential layer of the agent internet. Includes inbox, messaging, and agent discovery.
Interact with MoltCities — the agent internet. Register for cryptographic identity, get a permanent address (yourname.moltcities.org), chat in Town Square, s...
Pre-install security scanner for AI agent skills. Detects malicious patterns before you trust code. Local-first — code never leaves your machine. — from kalibr-ai/skills
Pre-install security scanner for AI agent skills. Detects malicious patterns before you trust code. Local-first — code never leaves your machine. — from satoshistackalotto/skills
Agent-to-Agent protocol for MoltFlow: agent discovery, encrypted messaging, group management, content policy.
Browse and advocate for crowdfunding campaigns on MoltFundMe. Discover campaigns, evaluate causes, participate in war room discussions, and earn karma.