913 skills found · Page 25 of 31
vibeeval / config-security-scanScan .claude/ directory for security misconfigurations, exposed secrets, unsafe permissions
posit-dev / critical-code-reviewerRigorously review code or pull requests for correctness, security, accessibility, maintainability, tests, and edge cases
posit-dev / r-tidyverse-styleUse when the user asks to review or clean up R code for tidyverse style, standardize formatting or names, remove redundant comments or wrappers, or make a behavior-preserving style pass.
bitwize-music-studio / researchers-securityResearches malware analysis, CVEs, attribution reports, and hacker community sources
Nayjest / GitoAn AI-powered GitHub code review tool that uses LLMs to detect high-confidence, high-impact issues—such as security vulnerabilities, bugs, and maintainability concerns.
firebase / firestore-rules-creationDesigns, authors, refactors, and hardens production-grade Cloud Firestore Security Rules (firestore.rules). IMPORTANT: If subagent delegation AND the firestore-rules-author subagent are available in your environment, delegate authoring firestore.rules to the firestore-rules-author subagent.
firebase / firebase-firestoreSets up, manages, queries, and configures Cloud Firestore databases (Standard/Enterprise edition), including data modeling, security rules, indexes, and SDK integrations (Web, Python, iOS, Android, Flutter)
firebase / firebase-security-rules-auditorAudits Firebase (Firestore, Cloud Storage) security rules for vulnerabilities, privilege escalation, role bypasses, create vs update inconsistencies, resource exhaustion, type safety, size limits, and hasOnly ownership checks
notque / kubernetesKubernetes operations: debugging, security, RBAC, and infrastructure tooling.
notque / reviewCode review: systematic single-file, parallel multi-reviewer, full-repo audit, PR diff review.
notque / researchResearch: structured investigation, fact-checking, explanation traces.
notque / securitySecurity: review git changes for vulnerabilities, threat-model a system's attack surface, audit supply-chain risks.
notque / workflowStructured work: multi-phase tasks, feature builds, planning, objective loops, hill climbing.
notque / deployDeploy and infrastructure: web deploy, cron, package install, shell configuration.
Masriyan / 03-exploit-developmentProof-of-concept development, payload crafting, shellcode analysis, and
Masriyan / 05-malware-analysisStatic and dynamic malware analysis, YARA rule generation, sandbox configuration,
Masriyan / 06-threat-huntingIOC extraction, threat intelligence correlation, MITRE ATT&CK mapping,
Masriyan / 07-incident-responseIR playbook execution, evidence collection, forensic timeline analysis,
Masriyan / 08-network-securityNetwork traffic analysis, PCAP parsing, IDS/IPS rule creation, firewall
Masriyan / 09-web-securityOWASP Top 10 testing, injection vulnerability detection, API security
Masriyan / 10-cloud-securityAWS/Azure/GCP security auditing, container and Kubernetes hardening,
Masriyan / 12-log-analysisSecurity log parsing, anomaly detection, SIEM query building, Sigma rule
Masriyan / 13-crypto-analysisSSL/TLS auditing, cipher suite analysis, hash algorithm identification,
Masriyan / 14-red-team-opsAuthorized red team engagement planning, C2 architecture design, attack
Masriyan / 15-blue-team-defenseSystem hardening, detection engineering, security baseline monitoring,
Masriyan / 22-purple-teamCollaborative purple-team operations — threat-informed adversary emulation
Masriyan / 01-recon-osintPassive and active reconnaissance, subdomain enumeration, DNS analysis,
Masriyan / 02-vulnerability-scannerDependency auditing, CVE detection, configuration security review, CVSS
Masriyan / 16-ai-llm-securityLLM and AI application security testing — prompt injection, jailbreak
Masriyan / 19-grc-complianceGovernance, risk, and compliance — risk assessment and scoring, control
