Навыки: Безопасность

Express engineering the Node way: middleware chains, async errors, validation, security headers, graceful shutdown. Use...

Guidance for Microsoft.Extensions.Compliance data classification and redaction. USE FOR: classifying sensitive data (PII...

Extract carrier invoice, shipment references, rates, accessorials, taxes, and total charges from freight bills.

Extract property, unit, tenant, lease dates, rents, deposits, and occupancy fields from rent rolls.

<!-- Copyright (c) 2026 defconxt. All rights reserved. -->

Trace a break between two records of the same position or cash — accounting vs custodian, fund vs prime broker, trade vs...

AI Safety and Ethics Enforcement using Fabric Patterns.

Troubleshoot Microsoft Fabric Lakehouse access control issues including OneLake security roles, SQL analytics endpoint p...

Diagnose and resolve Microsoft Fabric Power BI security issues including row-level security (RLS), object-level security...

Reads a Meta ad account the way an analyst with no account to keep would: results broken out by angle, an explicit cavea...

Use to threat-model a feature, audit AI-generated code, design sensitive-data handling, or review auth/authz boundaries....

Protect servers from brute force attacks with Fail2Ban. Use when a user asks to block repeated failed login attempts, pr...

Expert agent for Falco CNCF runtime security. Covers kernel syscall monitoring via eBPF/kernel module, rule syntax (cond...

Use when you have a candidate security finding and before it goes in a comment - restate it as a crossed boundary, prove...

Provides a complete solution for JWT-based authentication in FastAPI applications. Use this skill when a user wants to a...

This skill should be used when implementing secure, reusable JWT verification dependency for FastAPI routes. It ensures...

Complete FastAPI API development framework for Python. Provides comprehensive assistance for building APIs with routing,...

Expert AI auditor for Medical Device (SaMD) compliance, IEC 62304, and 21 CFR Part 820. Reviews DHFs, technical files, a...

Drafts a Receipt of Franchise Disclosure Document proving FTC Franchise Rule compliance under 16 C.F.R. § 436. Produces...

Simulate structural stress, strain, thermal expansion, and mechanical deformation using finite element analysis.

Use when reviewing frontend security risks such as XSS, CSRF, sensitive data exposure, unsafe DOM APIs, untrusted user i...

Review a federated learning system for poisoned gradient attacks, model update tampering by malicious participants, aggr...

Assess FedRAMP/StateRAMP readiness — impact levels, control baselines, 3PAO requirements

CR26（FedRAMP 2026 年合并规则）下 FedRAMP 认证与合规的专家指引。当用户询问 FedRAMP 授权、ATO（运营授权）、联邦政府云安全、NIST SP 800-53 控制、CSP 合规，或任何核心 FedRAMP 文...

Expert guidance for FedRAMP certification and compliance under CR26 (FedRAMP Consolidated Rules for 2026). Use this skil...

Expert guidance for FedRAMP certification and compliance. Use this skill whenever a user asks about FedRAMP authorizatio...

Implement FedRAMP requirements for federal cloud services. Configure NIST 800-53 controls and continuous monitoring. Use...

Run feroxbuster 2.13 for recursive content discovery that filters wildcard responses, extracts links and records state y...

FlashFusion Agent Stack v1.9.9 phased build pipeline. Activates for: agent stack, v1.9.9, phase 0, phase 1, phase 2, pha...

Discover hidden content, directories, subdomains, and API endpoints with ffuf — the fastest web fuzzer. Use when someone...

Web fuzzing with ffuf

Expert guidance for ffuf web fuzzing during penetration testing, including authenticated fuzzing with raw requests, auto...

Expert guidance for ffuf web fuzzing during penetration testing, including authenticated fuzzing with raw requests, auto...

Use this skill when mapping FHIR R4 clinical resources (Patient, Observation, Condition, CarePlan, CodeableConcept) to S...

FIDO2/WebAuthn/パスキー関連の実装・設定・ドキュメント・テストを扱う時に使用。パスキー登録、認証、管理、アテステーション検証に関する作業で自動的に呼び出される。

Review one or more of the 7 Filament 5 panels in ndestates-io multi-panel architecture using the local cache first. Use...

PreToolUse protection blocking sensitive file access across 195+ patterns in 12 categories with bash pipeline analysis a...

AI-powered file integrity monitoring skill for e-commerce websites. Designs file change detection systems, tamper alerts...

List files in an allowed directory path

This skill should be used when the user asks to "test for directory traversal", "exploit path traversal vulnerabilities"...

Read a file from an allowed path on the local filesystem

Files a new tech-debt GitHub issue for an out-of-scope code-review finding. Builds the dedup key, skips an open or decli...

Detects file upload handlers that accept executable content or write to web- accessible paths without validation. Use wh...

Offensive file upload and processing security and reliability enforcement. Triggered when implementing file uploads, rev...

Write content to a file at an allowed path

Filesystem Security security skill

Architect disk filesystems with block allocation bitmaps, inodes, directory trees, and write-ahead journaling.

Audit the final feature-film project for required control artifacts, approved sequences, coverage, continuity, editorial...