1,114 skills found ¡ Page 30 of 38
oliver-kriska / phx-auditProject health audit and health check â architecture, performance, tests,
graygnatconsole / mcp-audit-toolđĄī¸ Security audit CLI for Model Context Protocol (MCP) servers â scan AI agent configs for tool poisoning, rug pulls, hardcoded secrets, command injection & supply-chain risks. Pure Python, SARIF + CI ready.
vibeeval / concurrency-securityTOCTOU prevention, distributed locking, idempotency keys, race condition detection for Node.js and serverless environments.
vibeeval / differential-reviewSecurity-focused differential code review with blast radius analysis, risk-adaptive depth (DEEP/FOCUSED/SURGICAL), git history correlation, and structured finding format. Adapted from Trail of Bits
vibeeval / fp-checkSystematic false positive verification for security findings. Provides structured methodology to confirm or dismiss scanner results, manual audit findings, and automated alerts. Adapted from Trail of Bits
vibeeval / insecure-defaultsDetect fail-open configurations, hardcoded secrets, weak authentication defaults, permissive CORS, disabled security features, and other insecure-by-default patterns. Adapted from Trail of Bits. Use during security review or when auditing configuration and initialization code.
vibeeval / config-security-scanScan .claude/ directory for security misconfigurations, exposed secrets, unsafe permissions
vibeeval / handoff-templatesAgent arasi iletisim sablonlari. Standard handoff, QA verdict (PASS/FAIL), escalation, bug report, security finding ve status update formatlari.
posit-dev / critical-code-reviewerRigorously review code or pull requests for correctness, security, accessibility, maintainability, tests, and edge cases
posit-dev / r-tidyverse-styleUse when the user asks to review or clean up R code for tidyverse style, standardize formatting or names, remove redundant comments or wrappers, or make a behavior-preserving style pass.
bitwize-music-studio / researchers-securityResearches malware analysis, CVEs, attribution reports, and hacker community sources
mxyhi / diagram-designCreate branded architecture, architecture delta, IT current-state, flowchart, sequence, state machine, ER/data model, timeline, swimlane, quadrant, radar/spider, polar chart (polar/radial lollipop), loop/flywheel, nested, tree, org chart, layer stack, exploded axonometric, axonometric plan, Venn, pyâĻ
firebase / firestore-rules-creationDesigns, authors, refactors, and hardens production-grade Cloud Firestore Security Rules (firestore.rules). IMPORTANT: If subagent delegation AND the firestore-rules-author subagent are available in your environment, delegate authoring firestore.rules to the firestore-rules-author subagent.
firebase / firebase-firestoreSets up, manages, queries, and configures Cloud Firestore databases (Standard/Enterprise edition), including data modeling, security rules, indexes, and SDK integrations (Web, Python, iOS, Android, Flutter)
firebase / firebase-security-rules-auditorAudits Firebase (Firestore, Cloud Storage) security rules for vulnerabilities, privilege escalation, role bypasses, create vs update inconsistencies, resource exhaustion, type safety, size limits, and hasOnly ownership checks
Nayjest / GitoAn AI-powered GitHub code review tool that uses LLMs to detect high-confidence, high-impact issuesâsuch as security vulnerabilities, bugs, and maintainability concerns.
Masriyan / 03-exploit-developmentProof-of-concept development, payload crafting, shellcode analysis, and
Masriyan / 05-malware-analysisStatic and dynamic malware analysis, YARA rule generation, sandbox configuration,
Masriyan / 06-threat-huntingIOC extraction, threat intelligence correlation, MITRE ATT&CK mapping,
Masriyan / 07-incident-responseIR playbook execution, evidence collection, forensic timeline analysis,
Masriyan / 08-network-securityNetwork traffic analysis, PCAP parsing, IDS/IPS rule creation, firewall
Masriyan / 09-web-securityOWASP Top 10 testing, injection vulnerability detection, API security
Masriyan / 10-cloud-securityAWS/Azure/GCP security auditing, container and Kubernetes hardening,
Masriyan / 12-log-analysisSecurity log parsing, anomaly detection, SIEM query building, Sigma rule
Masriyan / 13-crypto-analysisSSL/TLS auditing, cipher suite analysis, hash algorithm identification,
Masriyan / 14-red-team-opsAuthorized red team engagement planning, C2 architecture design, attack
Masriyan / 15-blue-team-defenseSystem hardening, detection engineering, security baseline monitoring,
Masriyan / 22-purple-teamCollaborative purple-team operations â threat-informed adversary emulation
notque / kubernetesKubernetes operations: debugging, security, RBAC, and infrastructure tooling.
notque / reviewCode review: systematic single-file, parallel multi-reviewer, full-repo audit, PR diff review.
