Security First
Skills with the best security audit scores
Showing 5,941–6,000 of 13,251 skills · Page 100 of 221
matlab / matlab-connect-mavlink
1.1kEstablish MAVLink connections between MATLAB and PX4/ArduPilot autopilots
matlab / matlab-analyze-spectrum
1.1kAnalyze signal spectra in MATLAB using nonparametric and parametric estimators
matlab / matlab-analyze-time-frequency-content
1.1kPerform time-frequency analysis in MATLAB using CWT, STFT, synchrosqueezing, reassignment, wavelet coherence, cross spectrogram, EMD/VMD, multiresolution analysis, and time-frequency filtering.
matlab / matlab-evaluate-acoustic-metrics
1.1kSelect and use Audio Toolbox acoustic, psychoacoustic, and speech quality metrics
matlab / matlab-process-streaming-audio
1.1kDesign and implement real-time audio processing chains using Audio Toolbox streaming objects
matlab / matlab-generate-wlan-waveform
1.1kGenerate standard-compliant IEEE 802.11 waveforms using MATLAB WLAN Toolbox
agentlas-ai / hephaestus-storm
1.1kUse when the user types /hep-storm or /agentlas-storm, says @Hephaestus storm <goal>, or asks to drive a goal to verified completion through a force-robust Stormbreaker loop.
jiweiyeah / skills-manager-cli
998Drive the Skills Manager CLI (`skm`) to initialize the hub, adopt unmanaged skills, list/enable/disable skills per AI tool, and doctor/fix symlink sync
nexscope-ai / dynamic-pricing-ecommerce
983Design a controlled dynamic-pricing or repricing system for ecommerce products
microsoft / generate-codeful-mcp-tool
919Generate a self-contained JavaScript server runtime and registration metadata for an MCP codeful tool
microsoft / activate-site
919Activates and provisions a Power Pages website in a Power Platform environment via the Power Platform REST API
karanb192 / itr-wala
871File Indian income tax returns (ITR) for FY 2025-26 / AY 2026-27
AgriciDaniel / seo-cluster
747SERP-based semantic topic clustering for content architecture planning. Groups keywords by actual Google SERP overlap (not text similarity), designs hub-and-spoke content clusters with internal link matrices, and generates interactive visualizations.
AgriciDaniel / seo-dataforseo
747Live SEO data via DataForSEO MCP server. SERP analysis (Google, Bing, Yahoo, YouTube, Google Images), keyword research (volume, difficulty, intent, trends), backlink profiles, on-page analysis (Lighthouse, content parsing), competitor analysis, content analysis, business listings, AI visibility (Cha…
product-on-purpose / utility-pm-skill-validate
697Audits an existing pm-skills skill against structural conventions and quality criteria. Produces a structured validation report with pass/fail checks, severity-graded findings, and actionable recommendations
Ar9av / section-writing-agent
664Step 4 of the PaperOrchestra pipeline (arXiv:2604.05018). ONE single multimodal LLM call that drafts the remaining paper sections (Abstract, Methodology, Experiments, Conclusion), extracts numeric values from experimental_log.md into LaTeX booktabs tables, splices the generated figures from Step 2,…
firecrawl / firecrawl-scrape
639Read a known webpage or execute a discovered workflow or data-provider capability. Use for page content or structured results once the URL or tool is selected.
firecrawl / firecrawl
639Any live-web task via the Firecrawl CLI — including ordinary web research: searching the web, reading or extracting pages, gathering sources, discovering site URLs, bulk extraction, downloading a site, change alerts, or pages needing clicks/login — web only; local files route to firecrawl-parse.
nWave-ai / nw-bdd-methodology
617BDD patterns for acceptance test design - Given-When-Then structure, scenario writing rules, pytest-bdd implementation, anti-patterns, and living documentation
nWave-ai / nw-cicd-and-deployment
617CI/CD pipeline design methodology, deployment strategies, GitHub Actions patterns, and branch/release strategies. Load when designing pipelines or deployment workflows.
nWave-ai / nw-command-design-patterns
617Best practices for command definition files - size targets, declarative template, anti-patterns, and canonical examples based on research evidence
nWave-ai / nw-ddd-event-modeling
617Event Modeling facilitation technique — brainstorm events, identify commands and views, define aggregate boundaries, write Given-When-Then specifications
nWave-ai / nw-diverge
617Generates 3-5 divergent design directions through JTBD analysis, competitive research, structured brainstorming, and taste evaluation before convergence
nWave-ai / nw-execute
617Use when a DELIVER roadmap already exists and you need to dispatch exactly one identified step through its TDD cycle. Use nw-roadmap to create the plan, nw-deliver for the whole wave, and nw-continue to resume at the next inferred step.
nWave-ai / nw-finalize
617Archives a completed feature to docs/evolution/, migrates lasting artifacts to permanent directories, and cleans up the temporary workspace. Use after all implementation steps pass and mutation testing completes.
nWave-ai / nw-jtbd-bdd-integration
617Translating JTBD analysis to BDD scenarios - job story to Given-When-Then patterns, forces-based test discovery, job-map-based test discovery, and property-shaped criteria
nWave-ai / nw-jtbd-core
617Core JTBD theory and job story format - job dimensions, job story template, job stories vs user stories, 8-step universal job map, outcome statements, and forces of progress
nWave-ai / nw-jtbd-workflow-selection
617JTBD workflow classification and routing - ODI two-phase framework, five job types with workflow sequences, baseline type selection, workflow anti-patterns, and common recipes
nWave-ai / nw-roadmap-design
617Roadmap concision rules, step decomposition efficiency, AC abstraction guidelines, and step-to-scenario mapping. Load when creating implementation roadmaps.
nWave-ai / nw-speculative-dispatch
617Speculative parallel implementation methodology — dispatch N candidate implementations, audit all, score, pick best. Auditability mandate: ALL candidates logged (not just winner).
nWave-ai / nw-spike
617Runs a timeboxed PROBE to validate one core assumption, then optionally PROMOTES the probe into a walking skeleton — the first e2e thin slice of the feature, committed and demo-able. Use after DISCUSS when the feature involves a new mechanism, performance requirement, or external integration.
nWave-ai / nw-tdd-cross-language
617Port the state-delta + property-based testing paradigm to languages other than Python. DIY recipes per language; canonical Python ref shipped in nwave_ai.state_delta.
nWave-ai / nw-test-organization-conventions
617Test directory structure patterns by architecture style, language conventions, naming rules, and fixture placement. Decision tree for selecting test organization strategy.
nWave-ai / nw-user-story-mapping
617User story mapping for backlog management and outcome-based prioritization. Load during Phase 2.5 (User Story Mapping) to produce story-map.md and prioritization.md.
anombyte93 / customise-workflow
603Customise the prd-taskmaster plugin workflow via curated brainstorm questions. The AI asks, the user answers in plain English, and the skill writes their preferences to .atlas-ai/config/atlas.json.
anombyte93 / expand-tasks
603Expand all TaskMaster tasks with deep research before coding begins. Reads tasks.json, launches parallel research agents per task in waves using the research-expander agent. Writes findings back to tasks.json. Part of the prd-taskmaster toolkit. Use after PRD is parsed and before implementation.
anombyte93 / setup
603Phase 0 of the prd-taskmaster pipeline. Resolves the active backend, initializes the project, configures the provider stack when the TaskMaster backend is active (DETECT-FIRST — never overwrite a working user config), and verifies the AI pipeline.
solana-foundation / solana-dev
560Use when user asks to "build a Solana dapp", "write an Anchor program", "create a token", "debug Solana errors", "set up wallet connection", "test my Solana program", "fuzz my Solana program", "deploy to devnet", "send a v1 transaction", "support larger transactions", "fix maxSupportedTransactionVer…
vibeeval / accessibility-testing
535axe-core integration, WCAG 2.2 AA checklist, keyboard navigation testing, screen reader testing, and ARIA pattern validation.
vibeeval / agent-qa-testing
535Agent davranis testi ve protokol uyumluluk dogrulamasi. Agent'larin tanimli rollerine uygun davranip davranmadigini assertion-based test'lerle olcer. Personality drift, role violation ve output kalite regresyonu tespit eder.
vibeeval / animation-patterns
535Framer Motion patterns, page transitions, skeleton loading, scroll-linked animations, and gesture-based interactions for React.
vibeeval / caching-patterns
535Redis caching strategies, cache invalidation, write-through/write-behind, TTL management, and cache stampede protection.
vibeeval / ci-cd-pipeline
535GitHub Actions workflow patterns, matrix builds, caching strategies, deployment pipelines, artifact management, and rollback procedures.
vibeeval / circuit-breaker
535Agent hata toleransi ve devre kesici pattern. Ust uste hata yapan agent'i durdur, cooldown uygula, fallback'e gec. Kaskatli hatalari ve sonsuz retry dongularini onler.
vibeeval / codex-orchestration
535OpenAI Codex CLI + Claude Code (Hizir) birlikte kullanim rehberi. Is dagitim pattern'leri, GitHub Actions workflow ornekleri, review dongusu ve iki AI yazilim asistaninin guclu yanlarini birlestiren orchestration stratejileri.
vibeeval / compliance-patterns
535GDPR data handling, audit logging, data classification, retention policies, and consent management for regulatory compliance.
vibeeval / concurrency-security
535TOCTOU prevention, distributed locking, idempotency keys, race condition detection for Node.js and serverless environments.
vibeeval / content-marketing
535Icerik pazarlama ve SEO odakli yazi uretimi. AI slop temizleme (30+ pattern), icerik kalite skorlama (5 boyut), watermark temizleme, copywriting formulleri (AIDA, PAS, BAB), programmatic SEO ve icerik stratejisi.
vibeeval / continuous-learning-v2
535Instinct-based learning system that observes sessions via hooks, creates atomic instincts with confidence scoring, and evolves them into skills/commands/agents.
vibeeval / design-to-code
535Figma-to-code translation, design tokens, spacing/typography scales, responsive breakpoints, and design system bridge patterns.
vibeeval / differential-review
535Security-focused differential code review with blast radius analysis, risk-adaptive depth (DEEP/FOCUSED/SURGICAL), git history correlation, and structured finding format. Adapted from Trail of Bits
vibeeval / docker-ops
535Dockerfile best practices, multi-stage builds, docker-compose, container networking, volume management, and image optimization.
vibeeval / email-infrastructure
535Email delivery infrastructure - DNS authentication (SPF/DKIM/DMARC), subdomain isolation, provider abstraction, template systems, bounce handling, warmup strategy, and deliverability monitoring.
vibeeval / experiment-engine
535Otonom deney dongusu. Kod degisikligi yap, olc, karsilastir, kabul et veya geri al. Metrik bazli karar verme ile performans, boyut veya kalite optimizasyonu. Tek basina veya agent ile kullan.
vibeeval / experiment-loop
535Autonomous experiment loop: hypothesize > modify > test > evaluate > keep/discard > repeat. Run N experiments automatically with measurable metrics. Works for performance optimization, A/B testing, prompt engineering, and any measurable improvement task.
vibeeval / factcheck-guard
535Use this skill when making any factual claim about the codebase — existence, absence, or behavior. Converts the claim-verification rule into a systematic action protocol that prevents false assertions from grep-only results.
vibeeval / feature-flag-patterns
535Gradual rollout strategies, kill switches, A/B testing integration, flag lifecycle management, and technical debt prevention.
vibeeval / fp-check
535Systematic false positive verification for security findings. Provides structured methodology to confirm or dismiss scanner results, manual audit findings, and automated alerts. Adapted from Trail of Bits
vibeeval / insecure-defaults
535Detect fail-open configurations, hardcoded secrets, weak authentication defaults, permissive CORS, disabled security features, and other insecure-by-default patterns. Adapted from Trail of Bits. Use during security review or when auditing configuration and initialization code.
zenstory-ai / video-recap
529从输入视频生成中文解说成片或原声剧情短片。用户提供 .mp4 / .mov / .mkv / .webm，并要求剪辑、添加旁白、 配音、总结、短剧/电视剧/电影/纪录片/科普解说时使用。负责编排 video-* 技能链：视频理解 → Agent 制定故事与视听方案 → 剪辑 → 配音 → 合成。触发词：视频解说、视频旁白、生成解说、 视频 recap、video recap、voiceover、narration、auto-dub、recap。