Security First
Skills with the best security audit scores
Showing 5,581–5,640 of 13,206 skills · Page 94 of 221
Tiger3807861189 / j-space
3.0kOperate a selective workspace for complex reasoning, long tasks, repository engineering, coordinated agents, and authorized security analysis
xstongxue / pptgen-drawio
2.9k根据论文或汇报内容生成多页 Draw.io 格式 PPT，支持论文答辩与通用汇报两种模式，自动导出为 .pptx。当用户提到论文答辩 PPT、答辩幻灯片、通用 PPT、汇报 PPT、根据模板生成 PPT、drawio2pptx 时使用。
xstongxue / wechat-article-writer
2.9k公众号/自媒体全流程。根据用户表述自动匹配：撰写文章、封面图、正文插图、风格提取。支持多种写作风格。当用户提到写公众号、技术博客、公众号封面、正文插图、步骤图、演示图、流程示意、分析写作风格、克隆文风、模仿爆款、提取风格时使用。详见 reference 目录。
cloudflare / agents-sdk
2.9kBuild, debug, or review Cloudflare Agents SDK applications using the agents package.
cloudflare / sandbox-stable
2.9kBuild or maintain Cloudflare Sandbox apps on the stable @cloudflare/sandbox package. Use sandbox-next for preview apps and sandbox-migrate-to-next for stable-to-preview migrations.
tradermonty / cot-contrarian-detector
2.9kDetect crowded speculative positioning in CFTC futures markets (COT report analysis) to find contrarian setups using Jason Shapiro's methodology.
tradermonty / downtrend-duration-analyzer
2.9kAnalyze historical downtrend durations and generate interactive HTML histograms showing typical correction lengths by sector and market cap.
tradermonty / dual-axis-skill-reviewer
2.9kReview skills in any project using a dual-axis method: (1) deterministic code-based checks (structure, scripts, tests, execution safety) and (2) LLM deep review findings
tradermonty / edge-candidate-agent
2.9kGenerate and prioritize US equity long-side edge research tickets from EOD observations, then export pipeline-ready candidate specs for trade-strategy-pipeline Phase I
tradermonty / edge-pipeline-orchestrator
2.9kOrchestrate the full edge research pipeline from candidate detection through strategy design, review, revision, and export
tradermonty / market-breadth-analyzer
2.9kQuantifies market breadth health using TraderMonty's public CSV data. Generates a 0-100 composite score across 6 components (100 = healthy). No API key required
tradermonty / skill-integration-tester
2.9kValidate multi-skill workflows defined in CLAUDE.md by checking skill existence, inter-skill data contracts (JSON schema compatibility), file naming conventions, and handoff integrity
tradermonty / stanley-druckenmiller-investment
2.9kDruckenmiller Strategy Synthesizer - Integrates 8 upstream skill outputs (Market Breadth, Uptrend Analysis, Market Top, Macro Regime, FTD Detector, VCP Screener, Theme Detector, CANSLIM Screener) into a unified conviction score (0-100), pattern classification, and allocation recommendation
tradermonty / stockbee-20pct-study
2.9kBuild and maintain a Stockbee-style daily 20% mover study for US equities by scanning +20%/-20% movers, classifying catalysts and setup context, updating forward outcomes, and summarizing cohort patterns
tradermonty / stockbee-exhaustion-hammer-screener
2.9kScreen US stocks for Stockbee-style selling-exhaustion hammer setups using prior momentum, pullback depth, undercut/reclaim, long lower-wick geometry, close-location, volume confirmation, quality/liquidity gates, and risk-distance scoring
tradermonty / stockbee-setup-fluency-trainer
2.9kBuild a Stockbee-style setup model book from momentum-burst screener candidates, then update 3-day and 5-day forward outcomes with MFE/MAE, stop-hit status, outcome tags, and cohort statistics
tradermonty / trading-skills-navigator
2.9kRecommend the right trading workflow, skillset, API profile, and setup path from a natural-language goal. Use this as the on-ramp when a user expresses a trading or investing goal and needs to know which skill/workflow to use, where to start, or whether something works without paid API keys — e.g.
rohitg00 / agent-teams
2.9kCoordinate multiple Claude Code sessions as a team — lead + teammates with shared task lists, mailbox messaging, and file-lock claiming. Patterns for team sizing, task decomposition, and when to use teams vs sub-agents vs worktrees.
rohitg00 / batch-orchestration
2.9kDecompose large-scale changes into independent units and spawn parallel agents in isolated worktrees. Use for migrations, refactors, codemods, and any change touching 10+ files with the same pattern.
rohitg00 / insights
2.9kShow session analytics, learning patterns, correction trends, heatmaps, and productivity metrics. Computes stats from project memory and session history
rohitg00 / llm-gate
2.9kLLM-powered quality verification using prompt hooks. Validates commit messages, code patterns, and conventions using AI before allowing operations. Use to set up intelligent guardrails.
rohitg00 / safe-mode
2.9kPrevent destructive operations using Claude Code hooks. Three modes — cautious (warn on dangerous commands), lockdown (restrict edits to one directory), and clear (remove restrictions). Uses PreToolUse matchers for Bash, Edit, and Write.
rohitg00 / sprint-status
2.9kTrack parallel work sessions and prevent confusion across multiple Claude Code instances. Every major step ends with a status line. Every question re-states project, branch, and task.
rohitg00 / thoroughness-scoring
2.9kScore every decision point with a Thoroughness Rating (1-10). AI makes the marginal cost of doing things properly near-zero — pick the higher-rated option every time. Includes scope checks to distinguish contained vs unbounded work.
rohitg00 / wiki-research-loop
2.9kAuto-grow a pro-workflow wiki by running a budget-capped BFS research loop over pluggable source fetchers (web, arXiv, GitHub). Each iteration pops a seed from the queue, fetches sources, drafts a wiki page, dedupes claims against existing pages, enqueues follow-up seeds.
aaron-he-zhu / consent-registry
2.8kUse when the user asks to "log this subscriber''s opt-in", record unsubscribes/complaints, or query lawful basis; curates pseudonymous consent facts through the append-only consent stream and applies suppression/erasure tombstones immediately.
aaron-he-zhu / creator-registry
2.8kUse when the user asks "what did we pay this creator last time" or to "update the creator roster"; curates creator identity, rate, rights, exclusivity, compliance-event, and performance facts through the append-only creators event stream.
aaron-he-zhu / memory-management
2.8kUse when the user asks to "remember project context", review saved findings, initialize runtime memory, archive stale work, reconcile notes, or erase a subject; manages authorized HOT/WARM/COLD working memory across all disciplines while preserving registry event ownership and privacy controls.
aaron-he-zhu / narrative-registry
2.8kUse when the user asks to record/query the brand narrative canon, tagline, message hierarchy, voice/naming rules, or a canon re-version; curates complete versioned canon events through the append-only narrative stream and derived views.
aaron-he-zhu / offer-claims-registry
2.8kUse when the user asks to "register this claim", "log our current offers", or "where is the proof for this figure"; curates claim wording, evidence, disclosures, terms, review dates, and live offers through the append-only claims event stream.
aaron-he-zhu / ad-account-auditor
2.8kUse when auditing a paid ad account for incremental contribution, wasted spend, or measurement integrity before scaling; runs a typed 20-item ROAS profile with verified vetoes and a SHIP/FIX/BLOCK/UNDECIDED gate on own exported data.
aaron-he-zhu / budget-pacing-monitor
2.8kUse when the user asks to "check pacing", "am I over/under-spending", "is this campaign on track to hit budget", or "why did spend spike/stall mid-flight"; returns a spend-vs-target-curve read, learning-phase status, an over/under-delivery call, and a reallocation trigger.
aaron-he-zhu / fatigue-frequency-manager
2.8kUse when the user asks to "is my ad fatiguing", "why is CTR dropping at scale", or "should I rotate creative / widen the audience"; reads frequency, CTR and CVR decay against an early-flight baseline and returns Rotate-creative / Widen-audience / Hold triggers with a per-ad-set fatigue read.
aaron-he-zhu / paid-measurement-loop
2.8kUse when the user asks to "read back" a paid campaign change, "did this ad change work", or "compare ROAS/CPA before and after"; reads ROAS/CPA against a control over a fixed readback window and returns a Promote / Keep-testing / Rollback / Unproven readback decision with the math delegated to roi-c…
aaron-he-zhu / email-quality-auditor
2.8kUse when the user asks to "audit an email program" or "is this campaign safe to send"; runs a typed 20-item SEND profile with authentication, consent, opt-out, and claim veto checks on own evidence.
aaron-he-zhu / launch-readiness-auditor
2.8kUse when the user asks to "audit our launch plan", "are we ready to launch", or evaluate launch execution/outcomes; runs one typed RAMP preflight, execution, or outcome profile without mixing time horizons.
aaron-he-zhu / narrative-quality-auditor
2.8kUse when the user asks to "audit our brand narrative" or "is this message on-canon"; runs separate typed TALE truth, system, or effectiveness profiles and never averages them into one composite. Checks differentiation, canon, landing consistency, and evidence integrity.
aaron-he-zhu / geo-content-optimizer
2.8kUse when the user asks to "optimize for AI citations"; improves citation readiness for ChatGPT, Perplexity, AI Overviews, Gemini, and Claude. Not for structural on-page SEO — use on-page-seo-checker; not for net-new drafting — use content-writer. AI引用优化/GEO优化/AI搜索
aaron-he-zhu / social-quality-auditor
2.8kUse when the user asks to "audit our social presence" or "is this batch safe to publish"; runs either the typed ECHO asset gate or a separate program-maturity profile, with channel-truth, claim, disclosure, manipulation, UGC-rights, and denominator checks.
addyosmani / core-web-vitals
2.8kOptimize Core Web Vitals (LCP, INP, CLS) for better page experience using field and lab evidence
mikubaka88 / ccf-common
2.8kRequired shared preflight for every CCFA skill after ccf-humanization: apply routing, scope, prerequisites, evidence rules, handoffs, and artifact contracts. Also maintain and audit these shared rules. Research deliverables remain with their specialist owners.
mikubaka88 / ccf-experiment-designer
2.8kDesign and interpret CCF experiments: datasets, baselines, metrics, ablations, execution specifications, observed feedback, and result-table contents. Use for 设计实验, 消融, benchmark planning, 实验结果分析, and evidence design within requested autonomous research. Preserve real values.
mikubaka88 / ccf-humanization
2.8kRequired first preflight before every CCFA skill, including research, review, retrieval, experiments, visuals, and maintenance. Keep reasoning and communication direct, remove empty defensive framing, and preserve evidence and uncertainty. Also use for 去防御性 and 论文人性化.
mikubaka88 / ccf-literature-monitor
2.8kScan recent arXiv/OpenReview papers, venue feeds, labs, and competitors for overlap. Use for 竞品监控, 新论文追踪, 论文跟踪, and recurring novelty watch. Give dated evidence and changes since the prior scan. Broad related-work retrieval belongs to ccf-literature-searcher.
mikubaka88 / ccf-rebuttal-writer
2.8kWrite CCF rebuttals, author responses, revision ledgers, response letters, and conservative resubmission plans. Use for 审稿意见回复, rebuttal, revision ledger, and 重投迁移. Ground promises in feasible changes and actual evidence. Ordinary manuscript writing has a separate owner.
mikubaka88 / ccf-skill-forger
2.8kMaintain and audit Codex/CCFA skills, triggers, references, scripts, docs/SVG diagrams, installation dependencies, and release validation. Use for skill维护, GPT model adaptation, and family routing cleanup. Do not perform research writing or review.
ScrapeCreators / outlier-post-finder
2.7kUse when the user wants to find posts, videos, reels, shorts, tweets, or social content that overperformed versus a creator, brand, or competitor baseline. Finds outliers, explains why they worked, extracts hooks and formats, and produces a practical swipe file.
heshengtao / officeCLI
2.7kCreate, analyze, proofread, and modify Office documents (.docx, .xlsx, .pptx) using the officecli CLI tool
runkids / skillshare-release
2.7kPrepare and review skillshare releases using the Release Please PR, verify the proposed version and changelog, inspect draft assets, and publish through the manual Publish Release workflow when explicitly authorized
expo / expo-migrate-module
2.6kMigrate an existing Apple/Swift Expo native module from the Expo Modules API 1.0 definition DSL to the 2.0 macro API (sometimes called v2) while preserving its JavaScript and TypeScript contract
expo / eas-update
2.6kConfigure and use EAS Update for over-the-air JavaScript and asset updates with expo-updates and EAS CLI
expo / expo-dev-client
2.6kBuild and distribute Expo development clients locally or via TestFlight for internal testing. For production TestFlight releases and store submission, use the eas-app-stores skill.
expo / expo-upgrade
2.6kGuidelines for upgrading Expo SDK versions and fixing dependency issues
softaworks / database-schema-designer
2.5kDesign robust, scalable database schemas for SQL and NoSQL databases. Provides normalization guidelines, indexing strategies, migration patterns, constraint design, and performance optimization. Ensures data integrity, query performance, and maintainable data models.
softaworks / design-system-starter
2.5kCreate and evolve design systems with design tokens, component architecture, accessibility guidelines, and documentation templates. Ensures consistent, scalable, and accessible UI across products.
softaworks / qa-test-planner
2.5kGenerate comprehensive test plans, manual test cases, regression test suites, and bug reports for QA engineers. Includes Figma MCP integration for design validation.
antonbabenko / terraform-skill
2.4kUse when writing, reviewing, or debugging Terraform/OpenTofu modules, tests, CI, scans, or state ops - diagnoses failure mode (identity churn, secrets, blast radius, CI drift, state corruption) with version-aware guards.
datopian / portaljs-check-data-quality
2.4kAudit a local or remote tabular file (CSV/TSV) for common data quality issues — schema, nulls, types, duplicates. Read-only
yaklang / ssti-server-side-template-injection
2.3kBefore using full engine-specific exploitation, you can first load:
wondelai / design-everyday-things
2.2kApply foundational design principles: affordances, signifiers, constraints, feedback, and conceptual models