Навыки: Безопасность

Walk through how a subsystem works: architecture, runtime flow, ownership, layering. Apply when the user asks "how does...

Review and grade code in one pass: real findings, A-F ship verdict, auth/payment risk, OWASP checks, deploy safety, and...

Run a nine-lane evidence-based SEO and generative-search audit: access, intent, metadata, structure, supported schema, E...

Suede-owned signup conversion discipline. Use when auditing or redesigning account creation, registration, or trial-star...

Grade a public page for launch appeal: findability, first-screen clarity, CTA pull, proof quality, and AI citation readi...

Use when the user wants to audit Sui Move smart contracts, scan Sui-specific patterns including object ownership, shared...

可用能力目录

Cómo operar un agente Hermes de un cliente como staff de Sumanos (tier operador) — qué tools tenés, cuándo usar las type...

Scaffold a Supabase project with database schema, Row Level Security policies, and auth integration. Use for: setting up...

Manejo seguro de autenticación, RLS y conexión a base de datos y storage con Supabase.

Use when changing kasane's Supabase schema — adding or altering a table, column, index, policy or grant, regenerating `s...

Apply when implementing multi-tenant data isolation, user-specific data access, or any scenario requiring row-level auth...

Review Supabase/Postgres row-level security policies for tenant isolation, role boundaries, query coverage, and safe pri...

Apply Supabase security best practices for secrets and access control.Use when securing API keys, implementing least pri...

Scans a repository's source for security vulnerabilities with the supercov CLI, pointing to the line of each finding and...

Software supply chain security — SBOM generation and analysis, dependency confusion and typosquatting detection, malicio...

Detects supply-chain risks in dependency manifests, lockfiles, install commands, and CI pipelines — missing lockfiles, a...

Audits dependency supply chains for bad versions, lockfile drift, and artifact integrity. Use when adding deps, handling...

Discover supply-chain manifests, run structured supply-chain audits, and export SBOMs through a dedicated MCP surface.

Use when asked to harden a repository's software supply chain, pin GitHub Actions to commit SHAs, lock down workflow per...

Audits a project's dependencies for supply-chain risk: version-matched advisories for direct dependencies and the full l...

Identifies dependencies at heightened risk of exploitation or takeover. Use when assessing supply chain attack surface,...

Use when reviewing dependencies, lockfiles, package manifests, install scripts, CI actions, plugins, build inputs, SBOMs...

Software supply chain security guidance covering SBOM generation, SLSA framework, dependency scanning, SCA tools, and pr...

Typosquatting detection, install script analysis, dependency confusion prevention, and phantom dependency detection for...

You are **Infrastructure Maintainer**, an expert infrastructure specialist who ensures system reliability, performance,...

SSH version CVEs and post-auth tricks — regreSSHion, user enum, agent hijack. Use when SSH is open. Triggers - port 22,...

Take the keys that encrypt secrets in the database from a KMS (self-hosted OpenBao Transit, or a cloud KMS) instead of E...

Patterns for fanning out work across multiple parallel agents instead of doing everything serially in the main thread. U...

Run a multi-agent audit of a codebase by spawning specialized parallel subagents (security, performance, tests, architec...

Swarm audit of a repository: Workflow fleet of single-lens Sonnet investigators, adversarial verification, Opus interpre...

Orchestrate multi-bot trading swarms on Pump.fun with persona-driven agents

Expert SWIFT Customer Security Programme (CSP) advisor covering the Customer Security Controls Framework (CSCF v2025). U...

Use when working with iOS/macOS Keychain Services (SecItem queries, kSecClass, OSStatus errors), biometric authenticatio...

Symfony security voters — role hierarchy, voter pattern, access control, authorization, permissions, IsGranted attribute...

Use when symfony symfony voters

Secure API Platform resources with security expressions, voters, and operation-level access control

Bidirectional sync between .json (authoritative source of truth) and .md (human-readable derivative) files — command-tri...

Implements Syncfusion Vue DataManager for local/remote binding, CRUD, querying, caching, and middleware. Supports JsonAd...

Administer Synology DSM NAS over SSH: shares, packages, storage pools, crashed volumes, and btrfs recovery.

Review synthetic training data generation pipelines for distillation attack risks, model collapse vectors, privacy leaka...

Senior System Architect for SaaS specifications. Security-first design with ISO 27001 compliance. Use for system archite...

macOS and Linux security hardening toolkit providing configuration scripts, audit checklists, and remediation procedures...

4-phase code review: UNDERSTAND, VERIFY, ASSESS risks, DOCUMENT findings.

4-phase code review methodology: UNDERSTAND changes, VERIFY claims against code, ASSESS security/performance/architectur...

Manage optional skill modules for modular kits. Use for 'install module X', 'remove module Y', 'list available modules',...

Security audit using STRIDE threat model and OWASP Top 10 checklist. Use for 'security audit', 'security review', 'threa...

Audits all repository instruction files read-only for placement, duplicate content, deletion evidence, topology, load co...