Навыков: 4 632. Сортировка по числу звёзд.
Build or audit interactive WordPress blocks with the Interactivity API: block.json interactivity support, viewScriptModu...
Scaffold and audit inbound custom WordPress REST API endpoints registered with register_rest_route on rest_api_init. Cov...
Scaffolds and reviews custom WordPress REST API endpoints registered via register_rest_route on rest_api_init — namespac...
Audits WordPress plugin or theme PHP code for the most common security mistakes — missing nonce checks, capability check...
Deep security audit for WordPress plugin/theme PHP code, covering issues beyond the basic sanitize/escape/nonce checklis...
Audits WordPress plugin/theme code for secret-handling and credential issues — hardcoded API keys, DB credentials, or si...
Extend or audit WordPress 7.1 entity list and form defaults through the View Config API used by DataViews-based screens....
Use when committing work or writing a commit message — produces a subject and body any developer from junior to CTO can...
Write website or landing-page copy from verified product facts, customer language, decision context, objections, and a d...
Use after completing any substantive security workflow with this project, including CTF, bug bounty, CVE validation, gui...
Review docs/prose for Writing Guidelines compliance. Use when asked to "review my docs", "check writing style", "audit p...
Creates behavioral rules in markdown to block dangerous commands or restrict AI behavior. Use when adding safety guardra...
Writes new science files following academic prose standards: third-person voice, present tense for laws, in-universe ter...
Fact-check audit: extract every claim of fact from a draft and report which are sourced, unsourced, or unverifiable, ran...
Testing for Weak Password Change or Reset Functionalities
Testing for Weaker Authentication in Alternative Channel
Test Business Logic Data Validation
Test for Process Timing
Testing Browser Storage
Testing for Cross-Site Script Inclusion (XSSI)
Test Network Infrastructure Configuration
Test HTTP Strict Transport Security
Test RIA Cross Domain Policy
Test Username Policy
Review Webserver Metafiles for Information Leakage
Identify Application Entry Points
Testing for HTTP Verb Tampering
Testing for LDAP Injection
Testing for XPath Injection
Testing for Host Header Injection
Testing for Server-Side Request Forgery (SSRF)
Testing for Session Management Schema
Testing for Session Fixation
Testing for Session Puzzling
Validates cryptographic implementations against Project Wycheproof's test vectors, which encode known attacks and edge c...
Wycheproof provides test vectors for validating cryptographic implementations. Use when testing crypto code for known at...
CISA Known Exploited Vulnerabilities (KEV) catalog. List actively exploited vulnerabilities prioritized by CISA. **Depe...
You inspect JWKS files and certificate chains for X9.150 implementations. You wrap the project's opencert.py and validat...
JWS security implementation guide — signing, verification, headers, certificate discovery, freshness, non-repudiation
You parse EMVCo QR content strings into their TLV structure, validate the CRC-16 checksum, and extract the X9.150 paymen...
X9.150 Secure Payment QR Code specification reference — OpenAPI schemas, field constraints, EMVCo TLV tags, JWS security...
You generate payment request template JSON files for testing the X9.150 specification. Templates are partial PaymentRequ...
You diagnose common issues with X9.150 implementations. You check the environment, validate key/cert setup, test server...
You validate JSON payloads against the X9.150 OpenAPI schema (spec/openapi.yaml). You auto-detect the schema type and re...
Assist with XRP transactions, destination tags, reserves, and XRPL features.
Professional XSS Prevention Expert skill. Implement enterprise-grade web application security controls and encryption st...
Encode output appropriately for the context (HTML, JavaScript, CSS, URL) Use when implementing security best practices....