Навыков: 4 624. Сортировка по числу звёзд.
Complete guide for Arabic Pki
Complete guide for Arabic Saml
Complete guide for Arabic Sast
Complete guide for Arabic Siem
Complete guide for Arabic Sso
Complete guide for Arabic Ssrf
Complete guide for Arabic Vpn
Complete guide for Arabic Xss
Complete guide for Arabic Xxe
Create Security architecture diagram showing trust boundaries, validation layers, and process isolation. Security lens a...
[Architecture] Use when reviewing code for security vulnerabilities, implementing authorization, or ensuring data protec...
Trigger: architecture decision, API contract, ADR, integration boundary. Record reversible and consequential technical c...
Assign each capability to the right side and concentrate trust in the host. This skill packages 17
Explicit-invocation Skill to create or update an ADR from a real architectural problem, evidence, alternatives, tradeoff...
Explicit-invocation, read-only analysis of evidence-backed architecture friction and migratable, reversible deepening op...
Create, edit and query ARCHITECTURE.md and its docs/: creating or continuing an architecture, editing sections, generati...
Sweep addressed callouts older than a threshold (default 180 days) into the target note's
Activate arifOS Full Autonomy Governance mode. Use when the user types /fag, asks to enter full autonomy governance, or...
CVE research and security patch workflow for Ark. Provides CVE API integration, mitigation strategies, and security-focu...
Guidance for ASP.NET Core Identity authentication and user management. USE FOR: user registration, login/logout flows, p...
Audit the repository’s CI coverage against its documented quality requirements and report evidence-backed gaps.
This skill should be used when the user asks to "score a codebase", "rate code quality", "generate assessment score", "c...
Analyze threats, vulnerabilities, dependencies, and attack surfaces. Use for explicit security work or changes to auth,...
Use when doing structural code search and rewriting - ast-grep linting, refactoring, multi-language patterns
Aster DEX trading skill for futures, spot, and market data via MCP tools
Security patterns for Astro lead generation websites on Cloudflare. Forms, headers, bot protection, GDPR. Use for any pr...
Use when auditing an ATC (ACM SIGOPS Annual Technical Conference, formerly USENIX ATC) submission for HotCRP readiness —...
Full 9-phase workflow for complex features, epics, and security-critical changes (2-4 hours)
Hunt full Account Takeover (ATO) by chaining lower-severity findings — IDOR-to-email-disclosure, password-reset-token-th...
Detect multi-step exploit sequences where individual steps may appear benign but combine into critical vulnerabilities....
CORS misconfiguration testing — origin reflection, wildcard bypass, null origin, credential leakage
GraphQL vulnerability testing — introspection exposure, complexity DoS, batch abuse, mutation auth bypass
Host header injection — password reset poisoning, cache poisoning, routing bypass, SSRF via Host
Open redirect exploitation — URL parameter manipulation, OAuth token theft, phishing chains
Review a repository, architecture, or local folder and simulate plausible attacker paths by orchestrating multiple secur...
security-scan結果をMarkdownレポートに変換。脆弱性をCVSSスコア降順でソートし、Executive Summary・推奨事項を含むレポートを生成。「レポート生成」「attack report」「脆弱性レポート」「スキャ...
HTTP request smuggling — CL.TE, TE.CL, TE.TE desync attacks for cache poisoning and auth bypass
Server-Side Request Forgery — internal network access, cloud metadata theft, filter bypass techniques
Modern attack surface management + pen testing methodology for AI-era environments — NIST 800-115, OWASP WSTG, PTES, ATT...
Build comprehensive attack trees to visualize threat paths. Use when mapping attack scenarios, identifying defense gaps,...
Use when preparing an Australian CGT event register, cost-base evidence or capital-loss reconciliation.
Use when preparing Australian tax records from crypto exchange and wallet exports, including disposals, rewards and tran...
Use when preparing Australian foreign-pension or annuity income, undeducted purchase price (UPP), treaty and arrears wor...
Use when assembling Australian SMSF annual accounts, member reconciliations and an independent-auditor hand-off.
Audit who your ads actually target and where they run, compare it against the STRATEGY.md Persona, and surface exclusion...
将用户提供的混音歌曲音频自动分轨、扒谱并改编为可演奏的五件校园乐队伴奏总谱，交付 MIDI、PDF 和可编辑 MSCZ。用于音频到乐队谱、歌曲扒带、乐队改编与难度调整；不用于语音转写、歌词翻译或仅下载现成曲谱。
The Supreme Verifier for the Synthetic Economy. Autonomous inspection of code, contracts, and capital flows. Ensuring t...
Full fleet audit in an isolated agent — one prioritised report with a ready repair line under every finding Arguments: [...