Навыки: Безопасность

Triage each open Wiz finding (container CVEs and SAST), auto-fix the high-confidence ones in a worktree PR, and escalate...

Provides domain knowledge and guidance for the Flare Time Series Oracle (FTSO)—block-latency feeds, Scaling anchor feeds...

Provides general domain knowledge about the Flare network—what it is, its core protocols (FTSO, FDC, FAssets, Smart Acco...

How DevSecOps audits project dependencies — CVE checking, version pinning, license review, transitive dependency analysi...

How fleet-ops does a REAL review — 10-step structured protocol. Verbatim match, trail verification, contribution check,...

How DevSecOps verifies compliance with security standards — not finding new vulnerabilities, but verifying that establis...

How DevSecOps thinks about threats — STRIDE categories, attack surface mapping, trust boundaries, and producing actionab...

How DevSecOps scans and classifies vulnerabilities — dependency audit, code scan, severity classification. Maps to sec_d...

Pre-flip checklist + procedure for making a private GitHub repo public. Verifies the project has a /setup skill, a LICEN...

Start from a ready-made Flisk starter app instead of an empty project when the request matches one - restaurant (reserva...

Diagnose repository and PWDEV Flow health without changing the project. Use when the user asks for a health check, works...

Review a code diff or explicit file set through independent correctness and QA lenses. Use when the user asks for a code...

FluxCD entry point — routes to the right workflow based on what you need. Live cluster issue → structured 5-workflow deb...

Agent-only playbook for handling Relay mentions and follow-ups. Use on an "x-mention <request_id>" check wake to read th...

Use when implementing secure secrets management with Fnox. Covers encryption, key management, access control, and securi...

- Trace cryptocurrency addresses and transactions on public blockchains using block explorers including Etherscan, Block...

Infrastructure engineer — cloud services, IaC, networking, cost optimization.

Infrastructure engineer — cloud services, IaC, networking, cost optimization. Use when asked to "provision infra", "writ...

Playbook for login: sessions, OAuth, RBAC (gebruik bij inloggen).

Optimizes Atlassian Forge apps to reduce platform consumption and avoid unnecessary costs using Atlassian's "Optimise Fo...

Performs a white-box security review of Atlassian Forge apps using structured, Forge-specific security rules and evidenc...

Use for a security review of a diff, app or CI (is dit veilig, gelekte keys).

Use when splitting a job over 2+ parallel Bosses or lanes (werk verdelen).

Drafts U.S. SEC Form D notice data sets for Regulation D exempt offerings (Rule 504, 506(b), 506(c)), ready for EDGAR su...

Diagnose and fix a web form across validation, submission, failure, retry, and success, including input preservation and...

Align client and server form validation with consistent field paths, normalization, accessibility, and submit handling.

Extract properties from a formal spec (TLA+/Lean/ProVerif) into AutoSpec's structured format. Classifies each property w...

Use to review the output of any GOAL phase (a Goal Brief, a spec, a diff or PR, an eval report, a release plan, or telem...

Run an interactive spec-building session for AgentBoard — produce a rigorous, architecturally-silent spec via the spec-w...

Implement authentication and authorization for an AICP-domain backend (or sister fleet project) — user/identity model, c...

FounderOS stage 2 coach, pain research. Walks a founder through a written problem hypothesis, Sales Safari sessions in t...

Utiliser une fois par trimestre pour calculer les quatre indicateurs du PM augmenté (densité de décision, justesse rétro...

Systematically verifies suspected security bugs to eliminate false positives. Produces TRUE POSITIVE or FALSE POSITIVE v...

Systematic false positive elimination for security findings. 6-gate verification, 13-item checklist, devil's advocate qu...

Systematically verifies suspected security bugs to eliminate false positives, producing a TRUE POSITIVE or FALSE POSITIV...

Systematic false positive verification for security findings. Provides structured methodology to confirm or dismiss scan...

Manage evidence freshness by identifying stale decisions and providing governance actions

This skill should be used as a mandatory final sanity check before git commit, PR creation, or declaring work done. Trig...

Audit an entire repository with fresh eyes for correctness errors, bugs, omissions, duplication, inconsistencies, stale...

Use Frida to observe and extract runtime data such as HTTP, headers, tokens, JSON, crypto values, preferences, SQLite, f...

Purpose: Guidance for implementing authentication flows using Better Auth and JWT token management.

You are a frontend security specialist focusing on Cross-Site Scripting (XSS) vulnerability detection and prevention. An...

Expert in secure frontend coding practices specializing in XSS prevention, output sanitization, and client-side security...

Expert in secure frontend coding practices specializing in XSS prevention, output sanitization, and client-side security...

- Working on frontend security coder tasks or workflows

Review frontend code and live pages against the Front-End Checklist (380+ rules for accessibility, performance, SEO, sec...

Use when auditing an ESEC/FSE research-track submission for HotCRP readiness, covering the mandatory paper-registration...

Use when the user wants to audit Fuel Network smart contracts written in Sway, scan FuelVM contracts for UTXO-model, pre...