This skill should be used when verifying that work meets its acceptance criteria and is sound — checking a task or change against its spec, judging code quality, or applying a…
This skill should be used when developing SAP UI5 applications, including creating freestyle apps, Fiori Elements apps, custom controls, testing, data binding, OData integration,…
Scrape Google Maps for any business type in any location, then find and verify contact emails. Use when the user wants leads/businesses from Google Maps with verified emails —…
Comprehensive, framework-agnostic security auditor. Audits codebases for common vulnerabilities introduced by AI coding assistants in "vibe-coded" applications, as well as complex…
This skill enables Claude to conduct a security-focused code review using the security-agent plugin. It analyzes code for potential vulnerabilities like SQL injection, XSS,…
Establish a security baseline for a website or web app. Use this skill when configuring HTTPS and TLS, setting security headers, planning secrets management, evaluating CSP…
Progressive-disclosure security-depth modules for the security-reviewer. Holds boundary-keyed checklists (access-control, authn-session, injection, path-and-file,…
ACTIVATE when conducting a security audit / review / vulnerability assessment on a personal project. Loads alongside security-audit:security-audit (which provides the…
Use this skill to build professional security reports (HTML, PDF, DOCX) from plugin-security-checker scan results.
This skill automates security vulnerability testing. It is triggered when the user requests security assessments, penetration tests, or vulnerability scans.
Comprehensive integration guide for connecting external systems (Java, Python, .NET, Node.js, low-code platforms, etc.) to SAP (ECC, S/4HANA On-Premise, S/4HANA Cloud).
Analyze a complete repository and create a SonarQube configuration tailored to the project type. Use this skill whenever the user asks to configure SonarQube, SonarCloud,…
This skill should be used when interpreting .sonar/ map data, querying graph.db, or working with Sonar module cards, flow narratives, and system understanding.
SQL Server and Azure SQL best practices for developers and DBAs. Use this skill whenever the user asks about T-SQL, stored procedures, query performance, indexes, schema design,…
General guide for using the sqlite3 CLI to build composable knowledge databases. Use this skill when creating SQLite databases, designing schemas, querying data, managing…
Guidance for recovering data from corrupted or truncated SQLite database files through binary analysis and manual parsing.
Guidance for compiling SQLite (or similar C projects) with gcov code coverage instrumentation. This skill should be used when tasks involve building software with gcov flags,…
Map identified vulnerabilities to Spoofing, Tampering, Repudiation, Information disclosure, Denial of service, and Elevation of privilege.
This skill should be used when implementing security for Stripe webhook endpoints, handling "webhook rate limiting", "Stripe secret management", "webhook abuse prevention", "log…
This skill should be used when the user asks to "identify web application vulnerabilities", "explain common security flaws", "understand vulnerability categories", "learn — from…
This skill should be used when the user asks to "identify web application vulnerabilities", "explain common security flaws", "understand vulnerability categories", "learn — from…
Use this skill when adding or evolving Myco's SQLite vault database schema and its Cloudflare D1 cloud counterpart — even if the user doesn't explicitly ask for "schema work."…
Use this skill whenever you need to add, modify, or remove tables, columns, or indexes in the Myco vault SQLite schema — even if the user just asks to "add a column" or "create a…
Authorized security testing methodology for web apps, APIs, multi-tenant SaaS, Spring Boot / Cloud Gateway stacks, FIDO/WebAuthn passwordless auth, mobile backends, and OAuth/SSO…
Scrape daily job listings from YCombinator's Workatastartup platform without duplicates. Use this skill when asked to scrape YC jobs, update the YC companies list, or retrieve the…
Security audit, hardening, threat modeling (STRIDE/PASTA), Red/Blue Team, OWASP checks, code review, incident response, and infrastructure security for any project.
Security audit, hardening, threat modeling (STRIDE/PASTA), Red/Blue Team, OWASP checks, code review, incident response, and infrastructure security for any project.
OWASP Top 10, secure code review, SAST/DAST gating.
Security audit of changes; enforce defense in depth and OWASP best practices
OWASP Top 10 vulnerability scanning and remediation
Revisa código contra as 10 falhas mais comuns antes de merge
NoSQL Injection detection for MongoDB, Redis, CouchDB, and Elasticsearch
Sempre considera vetores OWASP top-10 ao escrever/revisar código
OWASP Top 10, authentication, and secure coding practices
Especialista em segurança OWASP, LGPD e threat modeling para sistemas modernos.
TeyvatGuide 项目 SKILL。处理 Vue+Tauri+TypeScript 项目开发，包括组件开发、API 集成、SQLite 操作或代码规范。
Web application security scanner with proxy and active/passive scanning
Kuroco API設計・実装およびコンテンツ管理（CRUD操作）のベストプラクティス。使用キーワード：「Kuroco…
Execute this skill enables AI assistant to automatically scan for xss
Inspect and reset Hekate SQLite and Redis runtime state