Навыки: Безопасность

PII detection and redaction utilities for privacy-compliant conversational AI

Use when a PinMe project (Worker TypeScript) needs to integrate user authentication — creating email/password users, ver...

Security patterns, CSP nonces, input validation, auth checks, Supabase SSR patterns. Use when implementing authenticatio...

Explore GTI relationships for an IOC to discover related entities. Use to expand investigation by finding connected doma...

Run the supply-chain-audit skill.

Plan batch picking from order lines, common SKUs, container limits, sort method, cutoffs, and accuracy controls.

Use when users create, generate, or validate Salesforce Custom Object metadata. Trigger on custom objects, .object files...

THE skill for creating a Data Cloud / Data Governance access policy — authors and deploys a PolicyRuleDefinitionSet + Po...

Pre-flight for /prfaq-prototype. Makes sure the active target playground exists inside the workspace. If it's missing an...

Security review of LLM applications and agents. Use when asked to review, red-team, threat-model or test an LLM feature,...

Automatically audits AI assistant code plugins for security vulnerabilities, best practices, AI assistant.md compliance,...

Configure plugin sandboxing with vm2 or isolated-vm for secure plugin execution.

Plutonium Rodauth integration - authentication setup, account types, and configuration

PM Manager /pm-all

PMTL_VN auth verification skill. Use when touching register, login, logout, forgot-password, reset-password, profile, se...

Use this skill when assessment findings, scan results or self-assessment gaps have to become a plan of action and milest...

Centralised authorization logic for a given Eloquent model. Policies define per-ability access control and are enforced...

Implement policy as code with OPA, Sentinel, and Kyverno. Automate policy enforcement in CI/CD and infrastructure. Use w...

Write and ship authorization policy as code — OPA/Rego-class rules, tests, decision logs, safe rollout.

Draft an internal policy people can actually follow — the rule stated plainly with its reason, the bright lines separate...

Manage corporate policy lifecycle from drafting through compliance

Generates structured policy manual summaries that distill complex legal policies and compliance guidelines into employee...

Phase 4 of the Pólya Heuristic Coder: Looking Back, 5 SOLID Principles Audit, Boundary Specialization, Defensive Securit...

Trades marubozu continuation signals on Polymarket 5-minute crypto interval markets. A marubozu is an interval with extr...

Overview of the Polystate plugin. Shows available skills, usage examples, and how to get started with immigration and ta...

Check whether specific TCP ports are open on a host

Define SQLModel ORM models mirroring the dbmate schema (app_user, catalog_source, catalog_field, catalog_tribal_note, ex...

Implement background export jobs — POST /api/export returns job_id immediately, BackgroundTasks run Polars joins, serial...

Run the pre-PR and pre-deploy security checklist for the Portal Centralizado de Datos Financieros — endpoint scope cover...

Read positions, exposure, and P&L from the append-only ledger with restart reconciliation and JSONL export, owned by JOU...

Validates security patches with reproducible baseline-versus-patched evidence, including original exploits, root-cause v...

MANDATORY when touching auth tables, tenant isolation, RLS policies, or multi-tenant database code - enforces Row Level...

Audit and prove fixes for Postgres/Supabase UPDATE-policy holes where a row's identity columns can be rewritten by a leg...

Use when asked to judge whether to adopt, switch, reject, or revisit technology, library, pattern, or architecture, or a...

Create and audit editable scientific posters in macro-free PowerPoint (.pptx) from author-approved local content and ass...

Post-quantum cryptography first mentality — hard version gates (OpenSSL 3.5+), algorithm sunset tracking, HNDL assessmen...

Creates a pull request for the current branch.

| Use when reviewing an incoming GitHub pull request — runs the multi-level (L1-L5) audit against the PR's real diff ran...

Reviews a GitHub pull request or focused branch diff for correctness, regressions, security, compatibility, test gaps, a...

Review an authorized pull request diff for security regressions. Use when changes modify trust boundaries, auth logic, d...

Use before a pull request or another change goes in, on a file, the current diff or a branch, to review it pass by pass...

Review pull requests and code changes for correctness, risk, tests, security, performance, and maintainability. Use when...

Focused pull request review practices with severity-ranked, file-and-line-cited findings across four angles: security, p...

Fast, one-line-per-finding PR review. Severity-tagged, no praise, no scope creep. Written in the Nimbus caveman format s...

Lightweight per-PR security gate that detects Critical and High severity OWASP/LLM issues in changed files only. Use whe...

User-invoked as /pr-review [PR number or branch]. Spawns the feature-reviewer and security-auditor agents in parallel, w...

Full PR review orchestrator. Use when asked to review a PR or check if it is ready to merge. Runs blast radius + drift c...

Review pull requests, diffs, commits, and local changes for bugs, regressions, missing verification, and maintainability...