Навыки: Безопасность

Upgrades dependencies across package managers with breaking-change research and rollback-safe verification. Use for depe...

Upgrades dependencies in reversible batches with version-specific compatibility and regression checks.

Checks application security boundaries: secrets, injection, XSS, input validation, and sensitive env defaults. Use when...

Records one architecture decision with context, alternatives, tradeoffs, and consequences. Use for a significant choice;...

Resolve logical secret IDs through KeePass using repo-local mapping files; optionally bulk-create or rotate secrets with...

Security and safety (conservative), backup management, temporary file management, firewall management. Use for destructi...

Security log parsing, anomaly detection, SIEM query building, Sigma rule creation, and correlation rule development acro...

Analyzes system and application logs to detect anomalies and security threats in blue-team operations.

<!-- Copyright (c) 2026 defconxt. All rights reserved. -->

Guides structured security log analysis across authentication, network, endpoint, and cloud audit log sources. Auto-invo...

Log Analysis Security - Auto-activating skill for Security Advanced.Triggers on: log analysis security, log analysis sec...

Telemetry-pipeline integrity for mid-2026 — CR/LF log-injection neutralization across every sink, secret/PII redaction b...

Analyze logs for security events and threats

Design logging that supports investigations without becoming a privacy liability. Covers what to log and what never to l...

Use when designing security logging, monitoring, and incident detection capabilities. Covers SIEM architecture, audit tr...

Logging redaction is the practice of removing or masking sensitive information before it appears in logs. This is critic...

Comprehensive guide to preventing PII and secrets from appearing in logs through redaction strategies, safe logging prac...

Keep secrets and personal data out of logs at the call site rather than relying on redaction, neutralize log and field i...

Base de connaissances sur la Loi 25 du Québec (protection des renseignements personnels) appliquée au développement logi...

125+ agent skills for Longbridge Securities — real-time quotes, charts, fundamentals, portfolio analysis, options, and m...

Real-time quotes, K-line charts, order book, trade ticks, intraday capital flow, market sentiment temperature, trading s...

Provides system-independent mathematical functions. Use this skill when working with mathematical operations, random num...

Drafts institutional-quality Limited Partnership Agreements for PE/VC fund formation. Covers GP/LP terms, capital commit...

Use when creating a new Agent Skills-compliant skill, adapting a document into a skill, importing an existing skill for...

Attribution-preserving wrapper for Trail of Bits security skills. Use when evaluating security review, audit, fuzzing, a...

Guide WorkOS integration work. Use for AuthKit, SSO, organizations, directory sync, audit logs, RBAC, FGA, MFA, and migr...

Guide WorkOS integration work. Use for AuthKit, SSO, organizations, directory sync, audit logs, RBAC, FGA, MFA, and migr...

Agents can sign plugins, rotate credentials without losing identity, and publicly attest to behavior.

Compliance audit of the Luke codebase against architectural constraints in CLAUDE.md. Finds violations of stack rules, A...

Runtime correctness scan for the Luke codebase. Finds race conditions, async bugs, N+1 queries, memory leaks, null crash...

Technology and Platform Governor for the Luke monorepo. Owns the approved stack, the dependency graph, the toolchain and...

Incremental fix-verify loop for the Luke codebase. Runs an audit, takes the highest-severity finding, proposes a fix, ap...

Security-focused audit for the Luke codebase. Covers IDOR, auth bypass, session security, input validation, rate limitin...

Security audits — Solidity red flags, skill injection, suspicious packages, secret leak detection.

Troubleshooting enterprise (Azure / KQL) + keamanan defensif ringan (Mini-HIDS: auto-firewall dari log). Defensif murni...

Superagent skill m31 — Airdrop Intelligence (eligibility · sybil · claim calendar · exit)

Microsoft 365 / Entra ID red-team attack chain — current 2026 reality. AADSTS code reference, user enumeration vectors (...

Superagent skill m46 — CTF Cryptography

macOS workstation diagnostics: kernel panics, failing drives, launchd startup audit, wake reasons, TCC denials, APFS sna...

XProtect, MRT, TCC privacy permissions, quarantine, code signing validation, security audit

macOSアプリのセキュリティレビュー。Notarization、Hardened Runtime、Sandbox、コード署名をチェック。Use when: macOS、公証、Notarization、Sandbox、署名 を依頼された時。

Map a Maester results file (Microsoft 365 and Entra ID security tests) to ISO 27001 and SOC 2 control identifiers throug...

Implement Magento 2 security — CSP, 2FA, CSRF protection, ACL, admin security configuration, input validation, and secur...

Find security-related emails — login alerts, 2FA changes, password resets, new device notifications, suspicious activity...

Inbound mail-server protocol hardening for mid-2026 — SMTP smuggling, STARTTLS command/response injection, IMAP/POP3/Man...

Use when adding, changing or reviewing Anabasis's Main Judge: the battery review, its recorded disagreements and the adv...

Audit and update a project-local Roblox verification skill when code, Rojo mappings, tests, remotes, data schemas, or au...

Use before claiming work is done, before committing, and before opening a PR in this repo — runs the mcp-server test/typ...