Навыки: Безопасность

Treido non-negotiables and safety rails. Use for pause conditions (DB/auth/payments), security/PII rules, i18n, Tailwind...

SOC alert triage, correlation, and incident prioritization

Turn incoming reports, external PRs and alerts into evidence-based decisions and agent-ready briefs. Use when: intake ar...

Expert guidance for security alert triage. Use this when the user asks to "triage" an alert or case.

Adopt / Adapt / Avoid evaluation for any external candidate (project, library, tool, model, idea). Returns a graded verd...

Triage a security alert or case. Use when given an ALERT_ID or CASE_ID to assess if it's a real threat. Enriches IOCs, s...

Use when the user supplies or imports existing security findings, vulnerability reports, or security/vulnerability Jira/...

Triage a suspected malicious file hash. Use when investigating malware alerts or suspicious files. Analyzes GTI file rep...

Triage suspicious login alerts like impossible travel, untrusted location, or multiple failures. Use when investigating...

Validate a bug bounty finding before writing a report — the 7-Question Gate, 4 pre-submission gates, always-rejected lis...

Finding validation before writing any report — 7-Question Gate (all 7 questions), 4 pre-submission gates, always-rejecte...

Performs initial triage of security incidents to determine severity, scope, and required response actions using the NIST...

Performs initial triage of security incidents using the NIST SP 800-61r3 and SANS PICERL frameworks, classifying inciden...

Verify an external or AI-generated security report against the actual codebase before acting on it. Use when handed a sc...

The deep, rarely-convened whole-codebase audit lane. Routed to when the user invokes {{CMD:tribunal}}. Seven gated phase...

This skill should be used when scanning container images, filesystems, or repositories for vulnerabilities using Trivy....

Scan containers and dependencies for vulnerabilities with Trivy

Review product designs and implementation for abuse through user-generated content and interactions, including phishing,...

The Beamix R3.x security model for agent-to-agent trust: HMAC signature verification, nonce replay prevention, sentinel-...

Implements compliance with Turkey's Personal Data Protection Law (Kisisel Verilerin Korunmasi Kanunu, KVKK, Law No. 6698...

Drive a live TradingView Lightweight Charts widget end-to-end via PyWry MCP tools — symbol, interval, indicators, marker...

Receive and verify Twitch EventSub webhooks. Use when setting up Twitch webhook handlers, debugging signature verificati...

Govern X (Twitter) account work through three lanes: evidence reads, typed act plans for posting and account hygiene, an...

Generate, repair, or verify a cryptographically secure JWT_SECRET in .env for Node.js and NestJS projects when code unde...

Provides security review capability for TypeScript/Node.js applications, validates code against XSS, injection, CSRF, JW...

Use when styling or reviewing text in any medium; choosing fonts, size, spacing, measure, headings, emphasis, punctuatio...

United Arab Emirates Governance, Risk & Compliance advisor — a jurisdiction-first compliance router. In the UAE, WHERE a...

Implements compliance with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDP Law) an...

Configure asynchronous serial communication, baud rates, parity verification, circular ring buffers, and flow control.

Implement the UCP Buyer Consent extension — GDPR/CCPA consent collection, consent fields in checkout sessions, and priva...

Verify UK law citations — primarily case law via neutral citation format (UKSC, UKHL, EWCA, EWHC, UKUT) against BAILII,...

Generate templated responses for common legal inquiries under English law (England & Wales). Covers DSARs (UK GDPR), dis...

Navigate UK data protection and privacy compliance (UK GDPR, DPA 2018, PECR), review DPAs, handle data subject requests,...

Review contracts against your organisation's negotiation playbook under English law (England & Wales). Flags deviations,...

Screen incoming NDAs under English law (England & Wales), classify as GREEN (standard), YELLOW (needs review), or RED (s...

Assess and classify legal risks under English law (England & Wales) using a severity-by-likelihood framework with escala...

Understand the OCSF schema. Use when working with OCSF, looking up classes or objects, normalizing security events, or a...

Use when an agent keeps guessing wrong about a UniFi network, when starting recurring agent work against a gateway, or w...

Curate .unikit/bridge-notes/<bridge>.md — the project's log of findings about one engine bridge. Four jobs: re-stamp (th...

Curate .unikit/MCP-RECHECK-NOTES.md — the project's log of findings about the configured engine MCP server. Four jobs: r...

Security-first assistance for building Uniswap v4 hooks — threat modeling, permission flags analysis, NoOp attack preven...

Develop 2D/3D games with Unity, C# scripting, prefab workflows, render pipelines (URP/HDRP), and asset bundles.

Enforces completion discipline for substantial autonomous work by writing acceptance gates before execution, decomposing...

Detects code that consumes third-party API responses without type validation or sanitization. Use when writing code that...

Comprehensive review of unsafe code — audits safety invariants, demands benchmark+ASM proof of performance benefit, and...

Load this skill before implementing a fix for a barrier that may originate in a shared component, design system, rendere...

Parse a URL and return its scheme, host, path, and query params

Maps the US federal privacy landscape including sectoral laws (HIPAA, GLBA, FERPA, COPPA, FCRA, ECPA, VPPA), FTC Section...