785 skills found · Page 1 of 27
DietrichGebert / ponytail-gainShow ponytail's measured savings (code, cost, speed) from the benchmark. One-shot display. Use for /ponytail-gain, "what does ponytail save", "ponytail impact".
addyosmani / code-review-and-qualityConducts multi-axis code review. Use before merging any change
addyosmani / doubt-driven-developmentSubjects every non-trivial decision to a fresh-context adversarial review before it stands
addyosmani / deprecation-and-migrationManages deprecation and migration
addyosmani / security-and-hardeningHardens code against vulnerabilities
nexu-io / brandkitPremium brand-kit image generation skill for creating high-end brand-guidelines boards, logo systems, identity decks, and visual-world presentations. Trained for minimalist, cinematic, editorial, dark-tech, luxury, cultural, security, gaming, developer-tool, and consumer-app brand systems.
nexu-io / html-ppt-zhangzara-retro-windowsAn IT security-awareness training on spotting phishing — the tells, the drill, and what to do in the first 60 seconds. Built as a decision-grade professional training deck for all employees.
nexu-io / html-ppt-taste-brutalist16:9 HTML deck in tactical-telemetry / CRT-terminal taste. Deactivated-CRT charcoal slides, white-phosphor monospace, hazard-red accent, scanline overlay, ASCII syntax, density over decoration. Distilled from Leonxlnx/taste-skill `brutalist-skill` (Tactical Telemetry mode).
nexu-io / html-ppt-obsidian-claude-gradientOpenDesign's enterprise AI-adoption brief: local-first agents at work, the risk controls, the ROI, and the rollout plan. Built as a decision-grade AI literacy deck for leadership, IT, security.
code-yeongyu / review-workPost-implementation gate review: run manual QA on the real surface yourself, then launch ONE gate reviewer (never a panel) to audit goal, constraints, code quality, security, missed context, and QA evidence. Use before a PR handoff or when the user explicitly asks to review completed work.
code-yeongyu / security-researchTeam Mode security research skill. Orchestrates 3 vulnerability hunters and 2 PoC engineers to audit a codebase in parallel, prove exploitability, classify root causes, and calibrate severity by actual exploitability.
cathrynlavery / diagram-designCreate branded architecture, architecture delta, IT current-state, flowchart, sequence, state machine, ER/data model, timeline, swimlane, quadrant, radar/spider, polar chart (polar/radial lollipop), loop/flywheel, nested, tree, org chart, layer stack, exploded axonometric, axonometric plan, Venn, py…
sickn33 / active-directory-attacksAssess Active Directory attack paths using scoped configuration review and controlled synthetic lab validation; identify prerequisites, evidence and mitigations.
sickn33 / agy-autoConfigure agy-auto PreToolUse security gate to run Antigravity CLI (agy) unattended with layered policy controls instead of --dangerously-skip-permissions.
sickn33 / api-endpoint-builderBuilds reviewable REST API endpoint scaffolds with validation, error handling, authentication, and documentation. Follows best practices for security and scalability.
sickn33 / api-fuzzing-bug-bountyProvide comprehensive techniques for testing REST, SOAP, and GraphQL APIs during bug bounty hunting and penetration testing engagements. Covers vulnerability discovery, authentication bypass, IDOR exploitation, and API-specific attack vectors.
sickn33 / access-reviewConduct periodic access reviews and certifications. Implement access
sickn33 / agent-evalsBuild automated evaluation suites for AI agents using golden datasets,
sickn33 / ai-agent-securitySecure AI agents against prompt injection, tool abuse, and data exfiltration
sickn33 / ai-coding-agent-guardrailsSecure AI coding agents (Claude Code, Cursor, Codex, Copilot) with permission
sickn33 / ai-engineering-toolkitOverview of six AI engineering workflows: prompt evaluation (8-dimension scoring), context budget planning, RAG pipeline design, agent security audit (65-point checklist), eval harness building, and product sense coaching.
sickn33 / ai-red-teamingRun structured AI red team exercises for jailbreak resistance, data exfiltration
sickn33 / ai-sre-incident-responseBuild AI-focused SRE incident response practices for LLM outages, degraded
sickn33 / api-security-best-practicesImplement secure API design patterns including authentication, authorization, input validation, rate limiting, and protection against common API vulnerabilities
sickn33 / aegisops-aiAutonomous DevSecOps & FinOps Guardrails. Guide to reviewing Linux kernel patches, Terraform cost changes and Kubernetes policy with a separately reviewed upstream tool and configured model.
sickn33 / agent-observabilityInstrument AI agents with tracing, token metrics, latency, and cost visibility.
sickn33 / ai-code-generation-guardrailsUse when reviewing AI-generated code before merge or execution: plan AST/security checks, isolated behavior tests and evidence, with language-specific coverage limits.
sickn33 / ai-inference-service-meshUse verified service mesh patterns for AI inference traffic management, mTLS,
sickn33 / ai-pipeline-orchestrationOrchestrate AI/ML pipelines for data ingestion, model training, batch
sickn33 / ai-security-hardeningHarden AI/LLM deployments against prompt injection, data exfiltration,
