Навыки: Безопасность

Verify whether a specific symbol, file, route, configuration path, or feature is safely removable by checking static and...

· Administer Debian/Ubuntu/Mint/Pop: apt, dpkg, PPAs, snaps, systemd, GRUB, HWE, desktop. Triggers: 'debian', 'ubuntu',...

Investigate-then-decide root-cause analysis for a defect whose cause is unknown (distinct from /fix, which assumes a kno...

Manage evidence freshness by identifying stale decisions and providing governance actions

Make a technical decision with structured reasoning and create an Agent Decision Record (AgDR).

Audit the decision before it ships. Use for "are we sure about this?", high-stakes choices made on fast intuition, plans...

Record decisions with rationale, alternatives, and consequences — the ADR pattern as a primitive. Use when a consequenti...

Reconcile the project's architectural artifacts against the scaffold and prior decisions, then present each variance as...

Decrypt MCP tokens for remote sessions

Review a repository snapshot or code change for evidence-backed correctness, security, compatibility, and regression ris...

Perform exhaustive analysis of a critical IOC. Use when an IOC needs Tier 2+ investigation beyond basic enrichment - inc...

Use when a decision-relevant question needs multi-source search, claim-level citations, contradiction handling, uncertai...

Use when asked for a thorough, deep, or multi-angle review of a branch, PR, or recent changes — or when a diff touches e...

Deep investigation skill for PRs and bug fixes that go beyond surface review. Use this when a standard code review isn't...

Use when the user asks for a deep, exhaustive, multi-pass, or variance-reducing repository-wide or scoped-path Codex Sec...

Application security defense knowledge for builders. Covers Web/API/GraphQL hardening (XSS/SQLi/SSRF/IDOR/BOLA/Mass Assi...

Detect and harden against Active Directory attacks — Kerberoasting, AS-REP roasting, DCSync, ADCS abuse, and delegation/...

Turn offensive findings into concrete hardening — the fix side of each vuln class, plus config baselines. Load for blue-...

Checklist de seguranca multi-camada

Apply layered security architecture. Use when designing security controls, hardening systems, or reviewing security post...

Use when a critical invariant matters. Single-layer protection is a tech-debt smell.

Hunt for attacker activity in logs — auth, web, cloud, endpoint — with concrete queries and what to look for. Load for b...

Codebase defense analysis system for security profiling

Threat-model a system or feature (STRIDE + attack trees) to find design-level risk before code. Load on "threat model",...

Solidity AMM 合约、流动性池和交换流程的安全检查清单。涵盖重入、CEI 排序、捐赠或通胀攻击、预言机操纵、滑点、管理员控制和整数数学。

Find yield farming opportunities, compare APY across DeFi protocols, analyze yield strategies, and check risk metrics. U...

Prepare a task for delegation to another agent (Codex, Gemini, human) with full context and guardrails.

Choose responsibility for substantial work before deep execution: keep one responsibility's coupled parts in a single la...

Brief a background agent, confirm the brief arrived, and verify its report before acting on it. Use when writing the pro...

Validate delegation against policy, scope, capabilities and risk. Use when the user requests delegation auditor or invok...

Check email deliverability and DNS configuration. Use when: diagnosing email delivery issues; setting up new email domai...

Deliver a change through an approved design contract, sequential implementation, independent review and exact-HEAD relea...

Implement authentication and authorization using @delon/auth. Use this skill when adding login/logout flows, JWT token m...

Script deobfuscation - PowerShell, JavaScript, VBScript, batch

Zero-assumption dependency audit. Treats every dependency as guilty until justified. Checks CVEs, maintenance status, li...

Audit project dependencies for known vulnerabilities (CVEs). Supports npm, pip, Cargo, and Go. Zero API keys required. S...

Audit dependency manifests for outdated packages.

Cross-repository dependency audit. Scans package manifests for outdated packages, security advisories, version conflicts...

Dependency audit for Aegis SWR. Invoke on changes to pyproject.toml / uv.lock / requirements.txt, or on a weekly cadence...

Use when the user wants to check dependencies, find outdated packages, or audit for vulnerabilities.

This skill should be used when the user asks to "install a package", "add a dependency", "check for vulnerabilities", "a...

Check every dependency in a package.json against live CVE databases and security advisories in real time — specifically...

Safe systematic dependency upgrade with vulnerability scanning and rollback capability. Detects project ecosystem, audit...

Processes all open Dependabot PRs sequentially — rebases if needed, analyzes for breaking changes and security issues, t...

Check and update vulnerable dependencies

Use when the user wants to fix, address, clear, or resolve open Dependabot security/vulnerability alerts for a repositor...

Analyze project dependencies for security vulnerabilities, outdated packages, and upgrade paths. Use when auditing depen...

Analyzes project dependencies, detects outdated packages, identifies breaking changes, and suggests safe update strategi...