sqlite-utils is a Python CLI utility and library by Simon Willison for manipulating SQLite databases.
sqlite-vec extension for vector similarity search in SQLite. Use when storing embeddings, performing KNN queries, or building semantic search features.
sqlite-vec extension for vector similarity search in SQLite. Use when storing embeddings, performing KNN queries, or building semantic search features.
sqlite-vec is a lightweight SQLite extension for vector similarity search. Written in pure C with zero dependencies, it runs anywhere SQLite runs—Linux, macOS, Windows, WASM in…
Deep SQLite operational intuition — WAL mechanics, checkpointing, fsync semantics, multi-process locking, FTS5 internals, replication (Litestream/LiteFS/rqlite).
Builds SQLiteCpp with Meson. Use when configuring Meson builds, tests, or Meson options.
SQLiteCpp coding standards and API rules for core edits, public headers, style, and Doxygen.
Complete SSRF detection and exploitation methodology — injection point discovery, cloud metadata theft (AWS/GCP/Azure), internal network enumeration, protocol handler abuse,…
Active out-of-band SSRF probe that injects an OAST/collaborator callback into common URL/redirect params and forwarding headers, then watches for the DNS/HTTP hit that proves a…
Use when: adding authentication/authorization to a TanStack Start app — protecting routes with beforeLoad + redirect, authorizing server functions, sessions/cookies (useSession,…
Use when creating type-safe RPC server logic in TanStack Start with createServerFn — GET/POST methods, .validator() (Zod or function), .handler(), useServerFn hook, FormData…
Internal — Local-mode CRUD for operational state (sessions, tasks, phase bypasses). Direct SQLite, no Librarian.
Autonomous end-to-end stock intake & onboarding engine. Takes any stock ticker (held, watchlisted, or completely new), pulls live financials, queries TradingView CDP Data Window…
Orchestrates parallel vulnerability scanning across 7 specialized agents, consuming the URL pools built by stress-recon. Agent 1: Injection (SQLi, SSTI, CRLF).
Review and grade code in one pass — deep findings plus a blunt A-F ship verdict by default. TypeScript, React, Next.js, OWASP, and database checklists; three depth levels; 10+…
Sobe um MariaDB local fiel ao de produção e roda a suíte contra ele, em vez do SQLite. Use ao mexer em consulta SQL, validação de unicidade, ordenação, migration ou qualquer coisa…
Adds local CLIP visual search, near-duplicate detection, and more-like-this to an SVG vault.sqlite embedding BLOB via resvg PNG render and transformers.js Xenova CLIP.
Use when working with iOS/macOS Keychain Services (SecItem queries, kSecClass, OSStatus errors), biometric authentication (LAContext, Face ID, Touch ID), CryptoKit (AES-GCM,…
Generate synthetic data from scratch through an interactive dialog — ask the user table-by-table about columns, types, foreign keys, and constraints; render the data model as…
Native database client cho developers — free, open source, fast. PostgreSQL, MySQL, SQLite, MongoDB. Swift/macOS. 4.3K stars.
Erstellt eine personalisierte Tageszeitung aus RSS-Feeds und Web-Quellen. Portiert aus dem BACH-Newssystem (news.py + newspaper_generator.py).
Transform a project description into a complete, validated, traceable, execution-ready planning and handoff package for Claude Code to implement — requirements, constraints,…
Complete task tracking system with SQLite persistence, automatic creation, notifications, heartbeat monitoring, and stuck task recovery.
Dedicated to TuneCamp's database architecture and repository patterns. Use for SQLite interactions, migrations, complex queries, and data integrity across the Catalog and Social…
Senior Software Architect для строгого, но конструктивного code review одного изменения, диффа или файла: критичные баги, уязвимости (OWASP Top 10), производительность,…
Validador de argumentos e teses jurídicas contra a jurisprudência consolidada dos Tribunais Superiores brasileiros (STF, STJ) e tribunais estaduais.
[Tier 2 — Non-Functional: Security · ISO 25010] Security test workflow — OWASP Top 10, dependency CVEs, secrets scanning, and auth testing. Run after Tier 1 functional tests pass.
Test an explicitly authorized web application or API using current OWASP guidance and bounded manual or automated checks.
Tests APIs for mass assignment (auto-binding) vulnerabilities where clients can modify object properties they
Systematically assessing REST and GraphQL API endpoints against the OWASP API Security Top 10 risks using automated
Identify and test open redirect vulnerabilities in web applications by analyzing URL redirection parameters,
Test web applications for XML injection vulnerabilities including XXE, XPath injection, and XML entity attacks
Tests web applications for Cross-Site Scripting (XSS) vulnerabilities by injecting JavaScript payloads into
Identifying and validating cross-site scripting vulnerabilities using Burp Suite's scanner, intruder, and repeater — from mahipal
Discovering and exploiting XML External Entity injection vulnerabilities to read server files, perform SSRF,
Use when the user needs to look up Korean or overseas stock ticker metadata (exchange, alias/Korean name, asset_type, currency) via the ticker_reader.py helper and bundled…
Makes your AI agent think like the security reviewer who assumes every input is hostile until the code proves otherwise.
Per-workspace SQLite todo manager (./todo.db) with groups and task statuses (pending/in_progress/done/skipped), operated via {baseDir}/scripts/todo.sh for adding, listing,…
Security-first WordPress development with nonces, sanitization, validation, and escaping to prevent XSS, CSRF, and SQL injection vulnerabilities.
Track parcels via the 17TRACK API (local SQLite DB, polling + optional webhook ingestion)
ACTIVATE when conducting security assessments, code review for vulnerabilities, or CVSS scoring in TypeScript/Node.js/NestJS projects.
Manage libSQL/SQLite databases, replicas, and groups. Use when an agent needs to create or manage Turso databases, configure replicas, or get database connection URLs.
Generates a dynamic Pine Script indicator containing Fair Value, Target Entry, and Breaker levels from SQLite and injects it onto the active TradingView chart.
Guideline for designing, implementing, and verifying secure TypeScript and JavaScript applications following OWASP Top 10 best practices.
Provides security review capability for TypeScript/Node.js applications, validates code against XSS, injection, CSRF, JWT/OAuth2 flaws, dependency CVEs, and secrets exposure.
Audit toolkit health, freshness, security, standards. Keywords: updater, audit, outdated, stale, security, OWASP, refresh, check links, standards, compliance
Use when creating a git worktree for a Rails project that uses SQLite - copies the main working tree's development SQLite databases (including Rails 8 Solid Queue/Cache/Cable)…
Use when the user wants to run ad-hoc SQL against a database from the shell - postgres, mysql, sqlite, mssql, oracle, snowflake, bigquery, redshift, cockroachdb, clickhouse,…
usql is a universal command-line interface for SQL databases including PostgreSQL, MySQL, SQLite, Oracle, SQL Server, and dozens more.
Validate CORS policies for security issues and misconfigurations. Use when reviewing cross-origin resource sharing.
Validate CSRF protection implementations for security gaps. Use when reviewing form security or state-changing operations.
Comprehensive vulnerability assessment and penetration testing skill leveraging Secator, NetExec, Metasploit, and raw Python for advanced exploitation chaining across Linux,…
Fast semantic search for AI agent memory files using TF-IDF and SQLite. Enables instant context retrieval from MEMORY.md or any markdown documentation.
Supporto documentale al regime dei controlli e delle verifiche periodiche delle attrezzature di lavoro secondo il D.Lgs. 9 aprile 2008, n. 81 (Testo unico sicurezza), art.
Self-test the maxvision-orchestration plugin after install. Runs five read-only checks (index, cheatsheets, gh auth, jq+sqlite3 in PATH, sample BM25 query) and reports…
Security intelligence for code analysis. Detects SQL injection, XSS, CSRF, authentication issues, crypto failures, and more.
Layer 2 NestJS security implementation patterns for V-Smart Ledger / EAM-Tax. Covers JWT + Passport.js auth setup, RolesGuard, Helmet, CSRF prevention, rate limiting with…
Use when auditing SaaS apps built with vibe coding / AI-assisted development. Runs free automated security scanners (OWASP ZAP, GitLeaks, Bandit, OpenGrype) to find the 5 most…
Use when the user wants a self-contained AI hotspot monitoring skill that does not depend on a local server, SQLite, or OpenRouter.
Security best practices and patterns for Vigil Guard v2.0.0 development. Use when implementing authentication, handling secrets, validating input, preventing injection attacks,…