1,114 skills found ¡ Page 31 of 38
Masriyan / 01-recon-osintPassive and active reconnaissance, subdomain enumeration, DNS analysis,
Masriyan / 02-vulnerability-scannerDependency auditing, CVE detection, configuration security review, CVSS
Masriyan / 16-ai-llm-securityLLM and AI application security testing â prompt injection, jailbreak
Masriyan / 19-grc-complianceGovernance, risk, and compliance â risk assessment and scoring, control
Masriyan / 20-supply-chain-securitySoftware supply chain security â SBOM generation and analysis, dependency
Masriyan / 21-threat-intelligenceCyber threat intelligence production â the intelligence cycle, IOC extraction/normalization/enrichment,
jabrena / 112-java-maven-pluginsUse when you need to add or configure Maven plugins in your pom.xml â including quality tools (enforcer, surefire, failsafe, jacoco, pitest, spotbugs, pmd), security scanning (OWASP), code formatting (Spotless), version management, container image build (Jib), build information tracking, and benchmaâĻ
notque / cve-source-checkAudit CVE/vulnerability source coverage for a technology stack. Maps each component (container, library, base image, runtime) to authoritative CVE feeds, flags gaps, and produces audit-ready reports. Generic: works for any service or stack.
notque / researchResearch: structured investigation, fact-checking, explanation traces.
notque / securitySecurity: review git changes for vulnerabilities, threat-model a system's attack surface, audit supply-chain risks.
Masriyan / 17-mobile-securityAndroid and iOS application security testing â static and dynamic analysis,
Masriyan / 18-ot-ics-securityOperational Technology and industrial control system security â Purdue
jabrena / 812-regulations-eu-product-liability-directiveUse when reviewing, designing, or modifying Java enterprise software products, AI-enabled products, RAG assistants, AI agents, generated instructions, related services, automated updates, vulnerability handling, corrective updates, warnings, instructions, or product-safety evidence under Directive (âĻ
notque / workflowStructured work: multi-phase tasks, feature builds, planning, objective loops, hill climbing.
jabrena / 804-regulations-eu-nis2Use when reviewing, designing, or modifying Java enterprise systems from a maintainer-authored or maintainer-sanitized NIS2 engineering evidence inventory.
jabrena / 805-regulations-eu-cyber-resilience-actUse when reviewing, designing, or modifying Java enterprise products, services, libraries, agents, plugins, connected components, or platform modules that may qualify as products with digital elements and need EU Cyber Resilience Act secure-by-design, vulnerability handling, security update, SBOM, pâĻ
jabrena / 814-regulations-iso-25010Use when reviewing, designing, or modifying Java enterprise systems and need a structured, repeatable ISO/IEC 25010:2023 quality-attribute review covering Functional Suitability, Performance Efficiency, Compatibility, Interaction Capability, Reliability, Security, Maintainability, Flexibility, and SâĻ
notque / deployDeploy and infrastructure: web deploy, dev branches, cron, package install, shell configuration.
aiskillstore / vibe-securitySecurity intelligence for code analysis. Detects SQL injection, XSS, CSRF, authentication issues, crypto failures, and more. Actions: scan, analyze, fix, audit, check, review, secure, validate, sanitize, protect. Languages: JavaScript, TypeScript, Python, PHP, Java, Go, Ruby.
aiskillstore / firebase-development-add-featureThis skill should be used when adding features to existing Firebase projects. Triggers on "add function", "create endpoint", "new tool", "add api", "new collection", "implement", "build feature". Guides TDD workflow with test-first development, security rules, and emulator verification.
aiskillstore / firebase-development-validateThis skill should be used when reviewing Firebase code against security model and best practices. Triggers on "review firebase", "check firebase", "validate", "audit firebase", "security review", "look at firebase code". Validates configuration, rules, architecture, and security.
aiskillstore / fresh-eyes-reviewThis skill should be used as a mandatory final sanity check before git commit, PR creation, or declaring work done. Triggers on "commit", "push", "PR", "pull request", "done", "finished", "complete", "ship", "deploy", "ready to merge".
aiskillstore / security-patternsSecurity patterns and OWASP guidelines. Triggers on: security review, OWASP, XSS, SQL injection, CSRF, authentication, authorization, secrets management, input validation, secure coding.
aiskillstore / code-reviewUse this skill when user asks to "review code", "check for issues", "analyze code quality", "find bugs", or wants feedback on code implementation.
sanjay3290 / azure-devopsManage Azure DevOps projects, work items, repos, PRs, pipelines, wikis, test plans, security alerts, variable groups, environments/approvals, branch policies, and attachments
fcakyon / reviewer-defenseUse when the user wants to anticipate reviewer questions, select the strongest ablations to present, prepare rebuttals, or identify paper weaknesses before submission.
tobihagemann / review-codeReview code for bugs, security vulnerabilities, API misuse, consistency issues, simplicity problems, or test coverage gaps and low-value tests by running internal reviews and a peer review in parallel and returning combined findings.
tobihagemann / create-threat-modelAnalyze a codebase and produce a structured threat model at .turbo/threat-model.md covering assets, trust boundaries, attack surfaces with existing mitigations, attacker stories, and calibrated severity
jamditis / supply-chain-hardeningInstall-time cooldowns for npm/bun plus a sandboxed pre-install scan for bypasses. Use for supply-chain attacks or npm security.
prekuter / migrationBring an existing codebase into Dryforge, once. Reads the code, asks what code cannot show â business rules, security policy, what is intentional â and writes the project docs at the entry points agents already read
