Security First
Skills with the best security audit scores
Showing 4,021–4,080 of 13,206 skills · Page 68 of 221
Aaronontheweb / type-design-performance
1.2kDesign .NET types for performance. Seal classes, use readonly structs, prefer static pure functions, avoid premature enumeration, and choose the right collection types.
Aaronontheweb / dotnet-local-tools
1.2kManaging local .NET tools with dotnet-tools.json for consistent tooling across development environments and CI/CD pipelines.
Aaronontheweb / microsoft-extensions-configuration
1.2kMicrosoft.Extensions.Options patterns including IValidateOptions, strongly-typed settings, validation on startup, and the Options pattern for clean configuration management.
Aaronontheweb / dependency-injection-patterns
1.2kOrganize DI registrations using IServiceCollection extension methods. Group related services into composable Add* methods for clean Program.cs and reusable configuration in tests.
Aaronontheweb / mjml-email-templates
1.2kBuild responsive email templates using MJML markup language. Compiles to cross-client HTML that works in Outlook, Gmail, and Apple Mail. Includes template renderer, layout patterns, and variable substitution.
Aaronontheweb / playwright-ci-caching
1.2kCache Playwright browser binaries in CI/CD pipelines (GitHub Actions, Azure DevOps) to avoid 1-2 minute download overhead on every build.
Aaronontheweb / sdk-container-publishing
1.2kPublish .NET services as container images with the built-in SDK tooling (dotnet publish /t:PublishContainer, Microsoft.NET.Build.Containers) - no Dockerfile required. Covers the MSBuild property surface, base-image inference, self-contained and AOT implications, and CI/CD publishing.
Aaronontheweb / serialization
1.2kChoose the right serialization format for .NET applications. Prefer schema-based formats (Protobuf, MessagePack) over reflection-based (Newtonsoft.Json). Use System.Text.Json with AOT source generators for JSON scenarios.
Aaronontheweb / dotnet-slopwatch
1.2kUse Slopwatch to detect LLM reward hacking in .NET code changes. Run after every code modification to catch disabled tests, suppressed warnings, empty catch blocks, and other shortcuts that mask real problems.
Aaronontheweb / snapshot-testing
1.2kUse Verify for snapshot testing in .NET. Approve API surfaces, HTTP responses, rendered emails, and serialized outputs. Detect unintended changes through human-reviewed baseline files.
Aaronontheweb / testcontainers-integration-tests
1.2kWrite integration tests using TestContainers for .NET with xUnit. Covers infrastructure testing with real databases, message queues, and caches in Docker containers instead of mocks.
Aaronontheweb / verify-email-snapshots
1.2kSnapshot test email templates using Verify to catch regressions. Validates rendered HTML output matches approved baseline. Works with MJML templates and any email renderer.
microsoft / search-consumption-cli
1.2kFinds Fabric items across every workspace with the Catalog Search API when the workspace is unknown, locating an item by display name, inventorying one item type tenant-wide, and returning the workspace and item IDs later calls need. Dataflow Gen1 and Gen2 items are not supported.
xuzhougeng / research-integrity-audit
1.2k学术审查 / research-integrity screening of a manuscript's figures and reported numbers. Finds duplicated, reused, or transformed image panels and data anomalies: copied value blocks, fixed differences/ratios between groups, digit patterns, Benford deviations, GRIM/GRIMMER-inconsistent means and SDs, p-v…
xuzhougeng / singlecell-qc
1.2kUse when designing, reviewing, or implementing single-cell RNA-seq QC in Python or R with a human-in-the-loop, data-driven approach.
fcakyon / hetzner-deploy
1.2kThis skill should be used when user asks to "deploy to Hetzner", "create Hetzner server", "manage Hetzner Cloud", "hcloud CLI", or works with Hetzner Cloud infrastructure including servers, networks, firewalls, load balancers, DNS zones, and volumes.
fcakyon / humanize
1.2kThis skill should be used when writing or revising text, including responses, documentation, comments, emails, posts, reports, and messages, especially when the user asks to "humanize", "write naturally", "remove AI tone", or "avoid AI writing".
fcakyon / spreadsheet
1.2kUse when tasks involve creating, editing, analyzing, or formatting spreadsheets (`.xlsx`, `.csv`, `.tsv`) with formula-aware workflows, cached recalculation, and visual review.
matlab / simulink-curating-library-kg
1.1kUse this skill when the user wants to curate the SATK library knowledge index for a Simulink project — mark commonly used blocks, correct auto-assigned block categories, or improve block descriptions so the model-building agent picks better blocks from custom libraries.
matlab / simulink-use-c-function-block
1.1kUse when integrating legacy code, custom code, or C/C++ code into Simulink via C Function blocks. Configure Simulink C Function blocks programmatically using the SymbolSpec API.
MoizIbnYousaf / verification-agent
1.1kVerify claims, quotations, citations and references against live primary sources, and produce a reproducible audit record instead of an assertion
dpearson2699 / ios-ettrace-performance
1.1kUse when capturing or analyzing ETTrace profiles for a focused iOS launch or runtime flow, including exact-build dSYM UUID matching, Simulator or device capture, processed per-thread flamegraph JSON, sampled inclusive/exclusive time, unresolved symbols, and comparable verification.
dpearson2699 / swift-testing
1.1kWrites and migrates Swift Testing framework tests with @Test, @Suite, #expect, #require, confirmation, traits, withKnownIssue, Attachment.record, processExitsWith exit tests and capture lists, Test.cancel, Issue.record warnings/manual failures, XCTest-to-Swift Testing migration, Xcode 27 interoperab…
dpearson2699 / swiftui-layout-components
1.1kBuild SwiftUI layouts using stacks, grids, lists, scroll views, forms, and controls. Covers VStack/HStack/ZStack, LazyVGrid/LazyHGrid, List with sections and swipe actions, ScrollView with ScrollPosition and scroll-driven reveal surfaces, Form with validation, Toggle/Picker/Slider, .searchable, and…
dpearson2699 / swiftui-liquid-glass
1.1kImplement, review, or improve SwiftUI Liquid Glass effects for iOS 26+. Covers glassEffect modifier, GlassEffectContainer, glass button styles, glass toolbar/tab bar, static status badges vs interactive controls, morphing transitions, tinting, interactive glass, ToolbarSpacer, scrollEdgeEffectStyle,…
dpearson2699 / swiftui-navigation
1.1kImplement SwiftUI navigation patterns including NavigationStack, NavigationSplitView, sheet presentation, tab-based navigation, and deep linking
dpearson2699 / swiftui-webkit
1.1kEmbeds and controls web content in SwiftUI with WebKit for SwiftUI, including WebView, WebPage, navigation policies, JavaScript execution, observable page state, link interception, local HTML or data loading, and custom URL schemes
indranilbanerjee / check
832Run the scored pre-publish gate via eval-runner.py: claims, brand voice, compliance, AI tells. \"check this before we publish\"
indranilbanerjee / client-validation-document
832Produce the Part 5 client validation document: evidence-cited findings for client decisions. \"prepare v1 findings for client review\"
indranilbanerjee / content-engine
832Draft content in brand voice through a gated pipeline: blogs, ads, emails. Brief only → content-brief. \"write a blog post about X\"
indranilbanerjee / continuous-improvement-loop
832Run the Part 12 continuous improvement loop into a quarterly brief for leadership. \"produce the quarterly improvement brief\"
indranilbanerjee / four-core-documents
832Produce the Part 3 Four Core Documents: business, segmentation, positioning, DMFlow. \"produce the four core documents\"
coreyhaines31 / domain
824When you want to brainstorm and check available .com domains for a new project — brand naming, aftermarket pricing (HugeDomains / Afternic / Sedo / Dan), USPTO trademark screening, and social handle availability. Built on Laura Roeder's \"work backwards from availability\" method.
coreyhaines31 / skillify
824When you want to create, adapt, or update an Agent Skill (Claude Code, Codex, Cursor, and other hosts) in one of your repos (listed in ~/.config/makerskills/skillify/repos.yaml; defaults to makerskills). Modes — CREATE (from chat, video, dump, or scratch) turns a workflow into a new skill.
coreyhaines31 / slide-deck
824When you want to draft, update, convert, or export a slide deck for a React/Next.js slide system (${SLIDE_DECK_REPO:-$HOME/code/your-slide-deck-site}/src/app/slides/).
borghei / churn-prevention
817SaaS churn reduction covering cancel flow design, dynamic save offers, exit survey architecture, dunning sequences, payment recovery, win-back campaigns, and churn impact modeling.
borghei / competitive-teardown
817Systematic competitor analysis covering product teardowns, 12-dimension scoring rubric, feature comparison matrices, SWOT analysis, pricing model deconstruction, UX audits, and strategic action plans with stakeholder presentation templates.
borghei / contract-and-proposal-writer
817Generate business documents — contracts, proposals, SOWs, NDAs, MSAs — with jurisdiction-aware clauses for US, EU, UK, and DACH
borghei / customer-success-manager
817Monitors customer health, predicts churn risk, and identifies expansion opportunities using weighted scoring models for SaaS customer success
borghei / free-tool-strategy
817Free tool marketing strategy covering idea evaluation, tool design, lead capture architecture, SEO landing pages, launch playbook, and ROI measurement for calculators, generators, checkers, graders, and interactive tools.
borghei / onboarding-cro
817Post-signup user onboarding optimization covering activation metrics, time-to-value reduction, onboarding flow design, empty state optimization, multi-channel coordination, and stalled user recovery.
borghei / page-cro
817Landing page and marketing page conversion rate optimization covering value proposition clarity, headline effectiveness, CTA hierarchy, visual flow, social proof placement, objection handling, and structured A/B testing.
borghei / paywall-upgrade-cro
817In-app paywall and upgrade screen optimization covering feature gate design, usage limit UX, trial expiration flows, upgrade trigger timing, save offer strategy, and ethical monetization patterns.
borghei / popup-cro
817Popup and modal optimization for conversion. Covers exit-intent, slide-ins, banners, timing optimization, frequency capping, audience targeting, compliance, and A/B testing frameworks for lead capture, promotions, and announcements.
borghei / revenue-operations
817Analyzes pipeline coverage, tracks forecast accuracy with MAPE, and calculates GTM efficiency metrics for SaaS revenue optimization
borghei / sales-engineer
817Analyzes RFP responses for coverage gaps, builds competitive feature matrices, and plans proof-of-concept engagements for pre-sales engineering
borghei / signup-flow-cro
817Signup and registration flow optimization covering SSO strategy, progressive profiling, field reduction, multi-step flow design, authentication UX, post-submit experience, and mobile registration patterns.
borghei / board-meeting
817Multi-agent board meeting protocol running a structured 6-phase deliberation with isolated C-suite contributions to prevent groupthink
borghei / decision-logger
817Two-layer memory for executive decisions, separating raw deliberation from approved decisions to prevent hallucinated consensus
borghei / financial-analyst
817Performs financial ratio analysis, DCF valuation, budget variance analysis, and rolling forecast construction for strategic decision-making
borghei / data-breach-response
817Data breach incident response with ENISA severity scoring, notification timelines, and compliance tracking. Use for breach assessment and response.
borghei / dpia-assessment
817GDPR Art. 35 Data Protection Impact Assessment with threshold checking, risk registers, and EDPB criteria scoring. Use for DPIA evaluations.
decebals / concurrency-review
747Review Java concurrency code for thread safety, race conditions, deadlocks, and modern patterns (Virtual Threads, CompletableFuture, @Async)
decebals / logging-patterns
747Java logging best practices with SLF4J, structured logging (JSON), and MDC for request tracing. Includes AI-friendly log formats for Claude Code debugging
decebals / security-audit
747Java security checklist covering OWASP Top 10, input validation, injection prevention, and secure coding. Works with Spring, Quarkus, Jakarta EE, and plain Java
nexscope-ai / amazon-a-plus-content
712Amazon A+ Content strategy and creation. Module layouts, persuasive copy, comparison charts, image briefs, and conversion optimization
nexscope-ai / amazon-advertising-strategy
712Comprehensive Amazon advertising strategy and campaign optimization. Sponsored Products, Sponsored Brands, Sponsored Display campaign management, budget allocation, ACoS optimization, and performance tracking
nexscope-ai / amazon-backend-keywords
712Amazon backend search term optimization and strategy. 250-byte limit management, keyword deduplication, prioritization frameworks, and search visibility optimization
nexscope-ai / amazon-buy-box
712Amazon Buy Box strategy and optimization framework. Eligibility factor analysis, competitive pricing strategies, FBA vs FBM impact assessment, seller performance optimization, and Buy Box winning tactics
nexscope-ai / amazon-deal-finder
712Amazon deal planning and promotional strategy optimization. Lightning Deals, Best Deals, Coupons, Prime Exclusive Discounts analysis and ROI calculation. Deal eligibility assessment, timing optimization, and promotional campaign planning