Навыки: Безопасность

Comprehensive security analysis including SAST, DAST, dependency scanning, secret detection, and vulnerability assessmen...

Perform practical security review for code, diffs, dependencies, configuration, auth flows, data handling, and deploymen...

Performs security audits for vulnerabilities, input validation, auth/authz, hardcoded secrets, and OWASP compliance. Use...

Debug and troubleshoot ettametta's SecuritySentinel — system integrity monitoring, threat detection, audit logging, and...

Configure and manage Claude Code security protections for sensitive files, credentials, and data. Use when the user invo...

**SECURITY SHIELD**: '보안', '인증', '로그인', '비밀번호', 'JWT', '토큰', '암호화', '취약점', 'SQL 인젝션', 'XSS', '보안 검사' 요청 시 자동 발동. .env/au...

Application security patterns - authentication, secrets management, input validation, OWASP Top 10. Use when: auth, JWT,...

Implement authentication, authorization, data protection, vulnerability checks, and security best practices. Use when ad...

Security auditing, vulnerability identification, secure coding practices, and secrets management. Use when asked to audi...

Runs security audits on codebases — full scans, diff reviews, threat models, vulnerability triage, remediation guidance,...

安全专家。专注于应用安全、威胁建模、安全合规和数据保护。提供安全审查、漏洞扫描、安全配置和合规检查。用于构建安全可靠的应用系统。

提供安全审计、风险评估和合规检查能力。当需要进行安全审查、风险评估或合规验证时使用。

Security audit for SvelteKit, Neon/Drizzle, WorkOS, Stripe, Vercel, Doppler, and GoHighLevel. First gate of the Ship Gat...

Run composable security analysis.

Composite skill — full security pass across secrets, dependencies, code paths, and OWASP risks. Chains security-audit (b...

Sécurité & RGPD - Atoll Tourisme. Use when reviewing security, implementing auth, or hardening code.

基于NFR安全要求，生成STRIDE/OWASP威胁模型和测试场景。L3级别专用，当设计和需求确认后使用。

Use this skill when you need to design security testing around OWASP risks, vulnerability scanning, and penetration scen...

Use when selecting and configuring security testing tools for your CI/CD pipeline. Covers SAST, DAST, SCA, container sca...

Use when analyzing a specific security threat from a referenced source (CVE, GHSA, security advisory, blog post, or writ...

Threat-model product features, APIs, data flows, secrets, permissions, supply-chain changes, auth boundaries, and risky...

Perform repository-grounded threat modeling by enumerating trust boundaries, assets, attacker capabilities, abuse paths,...

Repository-grounded threat modeling that enumerates trust boundaries, assets, attacker capabilities, abuse paths, and mi...

Use when the user supplies existing security findings or vulnerability reports — SARIF results, CVE/GHSA or advisory tex...

Secure boot and firmware update workflows for Zephyr RTOS. Covers MCUboot integration, production image signing, DFU pro...

Top username lists for enumeration: common usernames, default credentials, names. Curated essentials for authorized test...

Security-first visual testing combining URL validation, PII detection, and visual regression with parallel viewport supp...

Web shell samples for detection and analysis: PHP, ASP, ASPX, JSP, Python, Perl shells. Use for security research and de...

Run an OWASP ZAP baseline security scan locally using Docker. Checks for the ZAP baseline script, executes the scan, and...

Input Validation security skill

Terminal Security security skill

Threat Modeling security skill

Automate Securitytrails tasks via Rube MCP (Composio). Always search tools first for current schemas.

Protecao de dados do cidadao (LGPD+)

Analizar y comprobar ciberseguridad, seguridad de IA y agentes, gobierno de IA, GRC, privacidad, cloud, IAM, AppSec, API...

Autonomous error recovery — detect failures, diagnose root cause, apply fixes, and resume without stopping

Audit and safely improve any existing agent skill when authoritative documentation, product features, APIs, policies, st...

Run a Semgrep scan with automatic language detection, parallel execution, and structured triage. Uses Semgrep Pro for cr...

Write and run Semgrep rules, triage findings, and tune CI scanning to reduce irrelevant alerts.

Run Semgrep static analysis scan on a codebase using single-session review passes. Supports two scan modes — "run all" (...

Scan Python, JavaScript and TypeScript agent code with 36 Semgrep rules (model output flowing into shells, subprocess, S...

Analyze code with Semgrep for security vulnerabilities and code quality issues, then create a prioritized fix plan

Generate a complete Semgrep rule bundle (rule.yml + tests.md + README.md) from a CVE description and a bad-code example....

Creates language variants of existing Semgrep rules. Use when porting a Semgrep rule to specified target languages. Take...

Run Semgrep SAST analysis for security and code quality

Semgrep code security scanning and SAST analysis

Embody Seneca - AI persona expert with integrated methodology skills

SecOps for application security, vulnerability management, compliance, and secure development. Use when implementing sec...