Навыки: Безопасность

Verify a claim before stating it, and verify a test before trusting it, in OpenAlgo Desktop. Use before asserting that a...

Goal-native live verification. Drives a TRD's implementation to "all assertions pass" under /goal — one assertion of pro...

Trace authoritative spec requirements to existing code evidence; not general diff or design review.

Verify code for security issues including hardcoded secrets, input validation, error exposure, and dependency vulnerabil...

Bump the OpenAlgo Desktop version and prepare a release. Use when asked to release, cut, tag or bump the desktop to a ne...

Safely plan and apply a project release version bump with ecosystem-aware file discovery, previewed diffs, changelog evi...

Judge every behaviour against the negotiated protocol revision, not the newest. This skill packages

Evaluate an incoming workflow upgrade — a skill, MCP server, subagent, library, external service, prompt, or pattern — t...

Measure a candidate library's real maintenance state and its behavior against the protocol, schema, or API version the p...

Evaluate a candidate library against this project's required version, behavior, and maintenance evidence.

Authors and validates OpenVEX documents - produces `not_affected`, `affected`, `fixed`, and `under_investigation` statem...

This skill helps Claude write secure web applications. Use when working on any web application to ensure security best p...

Comprehensive secure coding guide covering OWASP web vulnerabilities with prevention patterns and checklists. Use when w...

Security-first code review & vulnerability prevention (IDOR, XSS, CSRF, SSRF, SQLi, Auth/JWT, Mass Assignment, Sensitive...

This skill helps Claude write secure web applications. Use this when working on any web application or when a user reque...

Secrets 漏れと .env の追跡を防止します。

You are an expert in Viem, the TypeScript interface for Ethereum that provides low-level, type-safe primitives for inter...

Use when reviewing Vite configuration, validating a Vite project, checking for common mistakes, or auditing Vite code be...

Deploy self-hosted LLMs with vLLM, PagedAttention, continuous batching, and tensor parallelism.

VMware vSphere / vCenter Server external attack matrix — version fingerprinting, the high-impact CVE chain (CVE-2021-219...

Foundational voice authority and AI humanizer — writes content in the user's authentic voice with built-in AI detection,...

Turn customer notes, call transcripts, sales feedback, and research into PMM-ready voice-of-customer inputs: pains, trig...

Produce a complete OTA update system design — partition layout, update flow, rollback conditions, validation checks, fle...

Receive and verify Volume (getvolume.com) pay-by-bank / open banking payment webhooks. Use when setting up Volume webhoo...

Cross-platform comparison and architecture guidance for all VPN technologies: IPsec/IKEv2, WireGuard, SSL VPN, remote ac...

Deploy secure point-to-point and site-to-site VPN tunnels using modern WireGuard and enterprise IPsec/IKEv2.

Configure and troubleshoot VPN connections for privacy and remote access.

Configure WireGuard, OpenVPN, and cloud VPNs. Implement secure remote access and site-to-site connectivity. Use when set...

Provision, secure, and manage virtual private servers with practical hosting guidance.

Baseline-harden a Debian or Ubuntu VPS in roughly thirty minutes. Covers SSH key-only authentication, UFW firewall, fail...

Use when setting up a new VPS or cloud droplet. Hardened first boot: snapshot, non-root sudo user, SSH keys only, root l...

Spin up intentionally vulnerable environments from the terminal using Docker. Use when the user wants to practice securi...

Manage explicit GPU pipelines, command buffers, descriptor sets, and synchronization with the Vulkan API.

Three-phase vulnerability chain analysis — parallel agents find individual weaknesses, then a synthesis step identifies...

Prepare an evidence-bound vulnerability publication and publish the exact approved advisory through any compatible provi...

Use when reviewing changes or committing ANY Go code in this project — catches security vulnerabilities that scanners mi...

Vulnerability intelligence & 0day-adjacent research workflow: CVE tracking, N-day analysis, patch-tuesday triage, exploi...

NIST vulnerability database lookup and CVE analysis

Write a vulnerability report. Use when the user says "vulnerability report", "vuln report", "security finding", "write u...

Version and Vulnerability Verification

Identify security vulnerabilities in code and configurations — CVE lookup, SAST findings, and remediation guides.

Triage a vulnerability or scanner finding — assess real severity, exploitability, and how urgently to fix. Use when aske...

Turn verified exact-version vulnerability evidence into bounded remediation and advisory packets without inventing expos...

Dependency auditing, CVE detection, configuration security review, CVSS scoring, and prioritized vulnerability reporting

Use when auditing source code for vulnerabilities — drive CodeQL/Semgrep/Joern to taint untrusted data source-to-sink ac...

Procedures for scanning dependencies and assessing vulnerabilities.

<!-- Copyright (c) 2026 defconxt. All rights reserved. -->

Vulnerability lifecycle management including CVE tracking, CVSS scoring, risk prioritization, remediation workflows, and...