Навыки: Данные

Implement authentication, authorization, and security controls. Use for JWT handling, API key management, RBAC, OAuth in...

Generate security assessment reports in docx format with findings, risk ratings, and remediation recommendations.Use whe...

Review a proposed or implemented solution for security risks, threat coverage, control effectiveness, and security evide...

MANDATORY for security-sensitive code changes - OWASP-based security review with dedicated checklist, required before PR...

基於 OWASP Top 10 和安全最佳實踐，對程式碼進行安全性審查。

Proactive security scanning. Triggers when modifying auth, API endpoints, user data, or sensitive operations.

Run security scans locally (Semgrep, Trivy, Gitleaks) to detect vulnerabilities, secrets, and code issues before pushing...

Scans DAPR projects for security issues including plain-text secrets, missing ACLs, insecure configurations, and securit...

Use when working with security scanning security hardening

Security standards for credential handling and authentication

Activate when conducting security analysis using STRIDE threat modeling, vulnerability assessment, and security architec...

Plan security testing strategies including OWASP testing, penetration test scoping, SAST/DAST integration, and threat-ba...

Automate vulnerability scans.

Conducts systematic security analyses using methodologies like STRIDE to identify vulnerabilities in software architectu...

Runtime security validation including secret scanning, PII detection, prompt injection defense, audit logging, and outpu...

Security protocols and vendor management expertise from Marcus covering emergency response codes, vendor relations, and...

Vite security audit patterns. Load when reviewing Vite apps (vite.config.ts present). Covers VITE_* exposure, build-time...

Workflow for auditing security vulnerabilities using Trunk (Trivy and OSV-scanner). Use when checking for project vulner...

Respond to security vulnerability reports. Use when a researcher reports a security issue or asks about bug bounty polic...

Document security research, CTF solutions, and malware analysis. Includes REPORT.md and STATUS.md templates.

Seed test database with users, quiz responses, and meal plans for development

Generate realistic seed/fixture data based on schema analysis

Resets and extends the local seed data for Saltmarsh Booking. Use when asked to "seed the database", "add a seed campsit...

Use when creating demo data, test fixtures, seed scripts, or factory functions, when preparing for a sales demo and the...

Seed the development database. Use when setting up local dev or resetting test data.

Drop all data and re-seed the database with realistic Saudi demo data. Use when the user says "reset the demo data", "fr...

Diagnose seeker development patterns including return problem, knowledge validation, sacred company effects, self-effort...

Analyze, validate, and fix issues identified by sentry bot in GitHub Pull Request reviews. Use this when asked to review...

Segal types for synthetic ∞-categories. Binary composites exist uniquely

Manages CDP child segments using `tdx sg` commands with YAML rule configs. Covers filtering with operators (Equal, In, G...

Use when designing filters, suppression logic, and personalization cohorts for campaigns or automations.

Use to design and document customer segments with clear criteria, metrics, and governance.

Read, write, and manipulate SEG-Y seismic data files. Fast C library with Python bindings for trace, header, inline, and...

End-to-end seismic interpretation workflow from SEG-Y loading through signal processing, rock physics, and visualization...

Seldon Core deployment skill for model serving, A/B testing, and canary deployments on Kubernetes.

Explicit-only: pick the next `bd ready` bead via risk-first heuristics; verify dependency/readiness, add missing deps, t...

Agent selection based on task classification with fallback support

SUPERSEDED by persistent-cache-gap-filling (v2.8.0). Cache data during symbol selection for instant repeat runs.

FAIL LOUDLY pattern for selection constraints. Trigger when: (1) correlated stocks selected together, (2) min_crypto_pos...

Internal /ace:run step — Repair the mobile selector map from a live failure dump.

Selenium WebDriver for cross-browser web automation and testing. Automate Chrome, Firefox, Safari, and Edge browsers. Us...

AI-powered self-healing Selenium tests with Reqnroll BDD

Browser automation with Selenium WebDriver for Python. (project)

작업 완료 후 자가 점검 및 보완 조언

AI-native code commenting system with grep-searchable AICODE-* markers for cross-session memory. Use when: working with...

Use this skill when writing, reviewing, or refactoring code to ensure it is self-documenting. Apply these checklists to...

Apply self-documenting code practices through good programming style and evaluate class design for abstraction quality....

Framework for improving Claude configuration (skills, agents, commands). Use when analyzing work patterns, proposing new...