982 skills found · Page 28 of 33
oliver-kriska / codex-abRun an A/B codex review experiment — holistic codex review vs 3 focused dimension passes (security, ecto, liveview) on the branch diff, classify findings, report a panel-value verdict
oliver-kriska / auditProject health audit and health check — architecture, performance, tests, dependencies, code quality
oliver-kriska / deps-auditAudit Hex deps for supply-chain security risk — bidi chars, compile-time exec, maintainer changes, typosquats, CVEs. Use after mix deps.update, when checking if a package upgrade is safe, or reviewing mix.lock PR diffs.
oliver-kriska / deps-updateBump outdated Hex deps — inventory, snapshot changelogs, update, fix breaks, split reviewable PRs (patches bundled, majors solo). Use to upgrade/bump Elixir dependencies or when versions fall behind
oliver-kriska / securityBuild and harden Phoenix auth and security — OAuth login, password hashing, sessions, RBAC, rate limiting, CSRF, XSS, SQL injection, secrets
oliver-kriska / ash-frameworkAsh Framework — resources, actions, policies, aggregates, calculations, AshPhoenix.Form, LiveView, migrations
oliver-kriska / phx-deps-auditAudit Hex deps for supply-chain security risk — bidi chars, compile-time
oliver-kriska / phx-deps-vetRecord a vetted Hex package version in hex_vet.exs after a security review
oliver-kriska / brainstormBrainstorm Elixir/Phoenix features — explore ideas, compare approaches, gather requirements
oliver-kriska / phx-brainstormBrainstorm Elixir/Phoenix features — explore ideas, compare approaches,
oliver-kriska / phx-deps-updateBump outdated Hex deps — inventory, snapshot changelogs, update, fix
oliver-kriska / phx-reviewReview changed Elixir/Phoenix code read-only. Check requirements, cite
oliver-kriska / phx-auditProject health audit and health check — architecture, performance, tests,
vibeeval / concurrency-securityTOCTOU prevention, distributed locking, idempotency keys, race condition detection for Node.js and serverless environments.
vibeeval / differential-reviewSecurity-focused differential code review with blast radius analysis, risk-adaptive depth (DEEP/FOCUSED/SURGICAL), git history correlation, and structured finding format. Adapted from Trail of Bits
vibeeval / fp-checkSystematic false positive verification for security findings. Provides structured methodology to confirm or dismiss scanner results, manual audit findings, and automated alerts. Adapted from Trail of Bits
vibeeval / insecure-defaultsDetect fail-open configurations, hardcoded secrets, weak authentication defaults, permissive CORS, disabled security features, and other insecure-by-default patterns. Adapted from Trail of Bits. Use during security review or when auditing configuration and initialization code.
vibeeval / config-security-scanScan .claude/ directory for security misconfigurations, exposed secrets, unsafe permissions
vibeeval / handoff-templatesAgent arasi iletisim sablonlari. Standard handoff, QA verdict (PASS/FAIL), escalation, bug report, security finding ve status update formatlari.
posit-dev / critical-code-reviewerRigorously review code or pull requests for correctness, security, accessibility, maintainability, tests, and edge cases
posit-dev / r-tidyverse-styleUse when the user asks to review or clean up R code for tidyverse style, standardize formatting or names, remove redundant comments or wrappers, or make a behavior-preserving style pass.
bitwize-music-studio / researchers-securityResearches malware analysis, CVEs, attribution reports, and hacker community sources
mxyhi / diagram-designCreate branded architecture, architecture delta, IT current-state, flowchart, sequence, state machine, ER/data model, timeline, swimlane, quadrant, radar/spider, polar chart (polar/radial lollipop), loop/flywheel, nested, tree, org chart, layer stack, exploded axonometric, axonometric plan, Venn, py…
firebase / firestore-rules-creationDesigns, authors, refactors, and hardens production-grade Cloud Firestore Security Rules (firestore.rules). IMPORTANT: If subagent delegation AND the firestore-rules-author subagent are available in your environment, delegate authoring firestore.rules to the firestore-rules-author subagent.
firebase / firebase-firestoreSets up, manages, queries, and configures Cloud Firestore databases (Standard/Enterprise edition), including data modeling, security rules, indexes, and SDK integrations (Web, Python, iOS, Android, Flutter)
firebase / firebase-security-rules-auditorAudits Firebase (Firestore, Cloud Storage) security rules for vulnerabilities, privilege escalation, role bypasses, create vs update inconsistencies, resource exhaustion, type safety, size limits, and hasOnly ownership checks
Masriyan / 03-exploit-developmentProof-of-concept development, payload crafting, shellcode analysis, and
Masriyan / 05-malware-analysisStatic and dynamic malware analysis, YARA rule generation, sandbox configuration,
Masriyan / 06-threat-huntingIOC extraction, threat intelligence correlation, MITRE ATT&CK mapping,
Masriyan / 07-incident-responseIR playbook execution, evidence collection, forensic timeline analysis,
