В каталоге 182 820 навыков в 14 категориях.
Audit a macOS .app before running it or granting permissions, especially when the user asks whether a Mac app is safe, s...
Audit ConcurrentMap and Map contract compliance for asMap() view
Audit an existing agent memory store read-only for schema or index drift, broken or one-way local relationships, review-...
Analyze reference retention paths that prevent GC of removed entries
Audit milestone completion against original intent before archiving
Audit milestone progress and status
Sweep a whole running web app for what is broken, without writing a script or knowing the codebase. Clicks every reachab...
Orchestrates /audit-my-code. Five tiers (foundation, vibe, basic, full, mario) of codebase audits, dispatched to paired...
合同风险识别与条款分析 - 智能合同审查工具，自动识别风险条款、补充缺失条款、对比差异条款
Use when auditing a webpage's on-page SEO factors to identify ranking gaps and technical issues
Marketplace entrypoint for a complete brand AI-readiness audit. Use for a website audit, GEO or AI-visibility check, mis...
Find Express route handlers that touch multi-tenant Prisma models without going through injectOrgFilter / injectWriteFil...
Audit hot paths for performance inefficiencies (allocations, contention, layout)
Audit and prioritize performance work through bounded-work and forward-progress checks. Use when asked to find performan...
Performance-focused audit that can run in background during implementation. Checks for inefficiencies, memory leaks, wid...
Audit performance against Core Web Vitals and performance budgets when the user asks to check performance, audit speed,...
Run a single-session performance audit on the codebase
Audit codebase for performance bottlenecks and thread-safety issues
This skill should be used when the user asks to "audit claude permissions", "audit permissions", "review local claude se...
Audits existing table permissions on a Power Pages site by analyzing them against site code and Dataverse metadata. Gene...
Orchestrate the full quality gate: theater detection, functionality verification, and style polish with evidential repor...
Meta-auditoria retrospectiva de un pipeline multi-ticket ya cerrado en un repo_destino con bus, que re-deriva cada close...
Meta-auditoria de una cadena de tickets del motor cerrada en CODE-ONLY MODE (worktree _dev, cierre commit-directo sin bu...
Statically audit a built `.ppmplugin` before wrap testing. Checks archive layout, manifest compatibility, bundle consist...
Audit a whole PR against the delivery contract and return MERGE-READY or evidenced blockers with the full URL. Consumes...
Prepares codebases for security review using Trail of Bits' checklist. Helps set review goals, runs static analysis tool...
Prepare your codebase for security review using Trail of Bits' checklist. Helps set review goals, runs static analysis t...
Run a single-session process and automation audit on the codebase
Production smoke test — navigate key pages, check console errors, network failures, and report findings
Runs a systematic audit of a project — checking dependency health, security vulnerabilities, config integrity, code cons...
Audit an existing Quarkus + LangChain4j project against this stack's agentic conventions — a read-only conformance or ga...
Audits the Claude Code configuration of a project against the dotforge template. Generates a report with score and gaps.
Run an iterative multi-agent code audit until critical and high findings are resolved. Use when the user says "audit my...
Audit rapide securite et qualite du projet courant. Utiliser avant un deploiement ou en revue.
Audit a sealed runx receipt for governance, comparing exercised authority and any declared approval requirement with sig...
Find open redirects in pracht loaders, middleware, and navigation. The framework rejects unsafe schemes and CRLF at both...
Audit for provably redundant work or state, where clarity is the payoff and no defect or measured speedup is required
Analyze user callbacks for re-entrancy defects (deadlock, corruption)
Run a single-session refactoring audit on the codebase
Adversarial workload search for eviction-policy regret. Crafts, shrinks, and classifies workloads on which the adaptive...
Apply approved remediation actions from audit resolution. Implements config file updates, template syncs, and code fixes...
Use when a git project may have leaked private information, credentials, tokens, keys, passwords, PII, internal URLs, or...
Weekly read-only repository audit. Grades one rotating rubric from .claude/audit-rubrics/, files between zero and five G...
Assemble a per-release audit record from lifecycle artefacts (planning issue, vote thread, artefact list, promote revisi...
Phase 3: Generate and present audit report for user review
Generate audit reports and compliance trails using Harness audit trail data via MCP v2 tools. Track user actions, resour...
Reports what ran where, what failed against which rule, and what the failures cost. Use it when running `ref/mkt/verify-...
Template and formatting guidelines for security audit reports. Provides consistent structure for findings, severity clas...
Enforce the replication-protocol.md rule by cross-checking numeric claims in a manuscript against the actual R / Stata /...
Use when presenting audit discrepancies to user for decision (HITL). For each discrepancy show file path, diff (template...
Review audit findings and dirty workflow state without mutating source state. Use when the operator wants to interpret a...
Auditer les policies RLS d'une table ou du projet. TRIGGERS : audit-rls, vérifier RLS, sécurité DB, check policies, audi...
Find LTR-only Tailwind classes (ml-, mr-, pl-, pr-, left-, right-, text-left, text-right) in JSX files. These break the...
Audit one feature of a web app (TanStack Start, Next.js, Convex) for authorization, tenant isolation, ownership, validat...
Sets up an audit before any placement is scored: what was seen and what raised it, which accounts, campaigns, channels a...
N/A-aware weighted rollup engine (leaf to sub-audit to category to final), critical-security-override, populates the bra...
Detect environment variables and secrets reaching the client bundle via loader return values, hydration state, or server...
公開側 (home/ と scripts/) とコミット履歴に秘匿値が混ざっていないかを走査する。コミット・push の前や、管理対象を増やした直後に使う。ユーザーが「秘匿値をチェックして」「公開して大丈夫か見て」「/audit-secre...
Run security audit checks (rate limiting, webhook validation, SQL injection, XSS)
Security audit — input validation, data sensitivity, API security, deployment hardening
White-box security audit. Blue-teamer evaluates defensive posture, then red-teamers attack informed by defensive gaps. I...
CISO による月次セキュリティ監査。直近30日間の変更から脆弱性・認証変更を分析し、 `knowledge/security/audit-log/YYYY-QN.md` に追記 + `audit-log-index.md` に 1 行サマ...
Scan the codebase for security vulnerabilities. Check OWASP top 10, input validation, auth, crypto, and known BACKLOG se...
Use when asked to audit or harden security in this repo — e.g. "security audit", "auditoría de seguridad", "revisa la se...
Use when asked to review a repo's security, before a release or go-live, or after adding auth, uploads, or a new integra...
전체 SEMO 패키지 통합 품질 감사. Use when (1) 전체 패키지 품질 점검, (2) Agent/Skill/Command 표준 준수 검토, (3) 비효율적 구조 탐지, (4) 정기 감사 수행.
Per-route SEO audit: `head()` coverage, title and description presence, Open Graph and Twitter cards, canonicals, robots...
Audit serialization proxy correctness and round-trip safety
Audit pracht shells: missing `Loading()` on SPA routes, `<html>`/`<head>`/ `<body>` rendered inside a shell, shells that...
Differential audit comparing matched code paths that should behave identically. Spawns one auditor per sibling pair (syn...
Audit every page to ensure it has a layout-accurate skeleton loading state using useMinLoadTime, matching the page's act...
Comprehensive audit capabilities for security, code quality, module structure, compliance, and performance analysis. Use...
Score a single skill against the gardener rubric. Reads the skill's SKILL.md, references/, and templates/, then writes a...
Audit skill for YAML compliance, pure XML structure, progressive disclosure, and best practices
Audits skills, commands, and prompt templates for best practice violations including length, checklists, verification st...
Expert security auditor for AI Skills and Bundles. Performs non-intrusive static analysis to identify malicious patterns...
Audit explicit state machines (drain status, node lifecycle, async-value lifecycle) for illegal or missed transitions
Audit and refactor CSS to comply with Game Loopers design system and BEM methodology
Audit component CSS for arbitrary colors, font sizes, and spacing that violate ui-design.md token system. Report violati...
Audit one cache subsystem for concurrency correctness defects
Produces structured U.S. legal audit summaries that distill compliance findings into executive-ready risk prioritization...
准备可追溯的审计请求、证据包和问题跟踪。 Use when the user needs 审计支持准备; route out when a hard boundary applies.
Support SOX 404 compliance with control testing methodology, sample selection (random, systematic, targeted), sample siz...
Support SOX 404 compliance with control testing methodology, sample selection, and documentation standards. Use when gen...
Create or review audit support deliverables with traceable assumptions, decision criteria, ownership, and risk controls....
Support SOX 404 compliance with control testing methodology, sample selection, and documentation standards.
Audit a website for technical and on-page search issues across crawl access, canonicalization, rendering, index signals,...
Heavyweight history-mining bug audit. Walks the caffeine module's git history chronologically (oldest to HEAD), maintain...
Find where an existing test suite is weak and decide what to test next, ranked by risk. Use this when asked to add missi...
Test quality audit — event replay, GEDCOM round-trip, domain edge cases, API contracts
Audit whether tests earn their maintenance cost and which suite owns each contract. Use when pruning redundant tests, in...
Audit the test suite for useless tests, consolidation opportunities, over-mocking, weak assertions, placement/organizati...
Audit the test suite for useless tests, consolidation opportunities, over-mocking, weak assertions, and other test quali...
Audit a project's theme, design tokens, and colour accessibility — WCAG contrast across every theme, focus indicators, a...
Verify every third-party and sharp-edged JDK API usage against the contract the upstream documentation actually states
Find hardcoded hex/rgb/hsl colors in frontend files that should be using CSS variable tokens (bg-background, text-foregr...
Use when asked whether a repo's tooling is current, before a toolchain migration, or when a dependency or build step fee...
Full traceability from PRD to code commit through the CCPM spec-driven pipeline.
Maintain append-only structured audit log of all agent and human decisions and outcomes. Use when: log this, record deci...