Навыки: Безопасность

Medical device risk management specialist implementing ISO 14971 throughout product lifecycle. Provides risk analysis, r...

Use this skill when the risk register and the statement of applicability were written separately and may not agree, and...

Use this skill when a risk register has treatment decisions but no plan anyone can execute, or when someone asks "write...

Decide GO/NO-GO for an active feature; /rite-ship owns commit, push, tag, and close.

Process large codebases (>100 files) using the Recursive Language Model pattern. Orchestrates parallel sub-agents to map...

Show status of RLM task tree execution

Expert assistant for validating and creating Row Level Security (RLS) policies in the KR92 Bible Voice Supabase database...

Use when assessing random number generation on an authorized engagement. Covers weak PRNGs, seed prediction, VM snapshot...

Use when adding, moving, refactoring, or reviewing Roblox feature ownership, code layout, dependencies, startup, or clie...

Design or review Roblox remotes, replication protocols, payloads, reliability, and server validation.

Use when adding, changing, or auditing RemoteEvents/RemoteFunctions: argument validation, rate limits, server authority,...

Use before publishing or updating a Roblox experience to run evidence-backed release gates and a pre-release audit.

Review or design Roblox remotes, server authority, purchases, rewards, RNG, persistence, and anti-abuse behavior.

Use when auditing or hardening Roblox code against exploits: authority, remotes, economy, purchases, and DataStore flows...

roi reference tool

角色联邦制 - 多Agent协同治理系统： 1. 全局考虑：覆盖人/事/物/环境/外部集成/边界情况 2. 系统考虑：输入→处理→输出→反馈闭环，故障处理机制 3. 迭代机制：PDCA循环，版本历史，反馈收集 4. Skill化：标准SKI...

Reference tool for life — covers intro, quickstart, patterns and more. Quick lookup for Roomba Control concepts, best pr...

Generates a structured Project Brief — a comprehensive markdown document that extracts goals, architecture, knowledge fi...

Debug Rossoctl UI issues including 502 errors, API connectivity, and nginx proxy problems

Standard-Gerüst für rotierende Pipeline-Checks: Pro Lauf genau ein Ziel aus einer Menge (Projekte, Ordner, Repos) wählen...

Program Raspberry Pi Pico RP2040 using programmable I/O (PIO) state machines, multicore FIFOs, and DMA.

Use when you face an RSA challenge or misconfigured RSA on an authorized test, CTF, or code review and need an operator...

Covers license compliance engineering: auditing the full dependency tree's licenses, compatibility analysis (permissive...

Covers capturing and packaging the provenance of software and data: which inputs, code versions, parameters, environment...

Covers securing research software and its supply chain: secrets and sensitive-file hygiene (env files, keys, credentials...

Solana token rug-pull risk analysis. 10-point on-chain check with visual report. Zero API keys. Read-only. Not financial...

Use for authorized multi-step tasks that should be organized and completed as bounded, verifiable workpacks with fewer m...

Read Runx's native receipt history and skill catalog, then return deterministic run outcomes, catalog test coverage, and...

Before main skill execution, perform guardrail checks.

Expert in Rust development with focus on safety, performance, and async programming

Build a Rust cdylib that a TypeScript/Bun runtime calls via koffi FFI, for a security kernel or enforcement core. Use wh...

Review Rust code or diffs for correctness, soundness, API compatibility, and maintainability. Use for review or audit re...

Rust security best practices and vulnerability prevention. Use when handling user input, authentication, cryptography, s...

Rust Security Auditor

Add or review RustFS `tracing` events with the repository field shape, level policy, privacy boundaries, and guardrails....

Rust fuzzing with Ruzzy for automated vulnerability discovery.

Implement and audit SaaS billing systems, subscription state machines, secure webhooks, and local database synchronizati...

Orchestrate the privacy & data protection team — dpo-privacy-specialist, database-architect, auth-security-specialist, f...

Turn a confirmed specification, root-cause finding, or impact analysis into an atomic, verifiable, reversible implementa...

Review a concrete diff or PR through three independent axes: repository conformance, change-intent fidelity, and operati...

Encrypt, decrypt, and manage keys with the SAFE CLI — a modern GPG alternative with post-quantum support.

Prevents destructive Git operations by requiring backup and confirmation. Blocks git reset --hard, git push --force on m...

Prevent destructive operations using Claude Code hooks. Three modes — cautious (warn on dangerous commands), lockdown (r...

Use when designing safe public APIs that wrap unsafe Rust code, adding unsafe blocks to existing types, reviewing unsafe...

Check for sensitive data in repository. Use when user asks to "check for sensitive data", "/safe-repo", or wants to veri...

Run authorized, non-destructive security tests against Ouros local or QA services. Use for runtime verification of auth,...

Audit, compare, merge, repair, or improve user-owned Codex and ChatGPT skill variants while preserving proven behavior....

Digital safety inspection checklists for construction sites. Generate, conduct, and track safety inspections with automa...