安全
4,732 个结果
- Sca TrivyrohunjSoftware Composition Analysis (SCA) and container vulnerability scanning using Aqua Trivy for identifying CVE vulnerabilities in dependencies, container images, IaC misconfigurations, and license compliance risks.
- Content Quality Auditoraaron-he-zhuUse when auditing content quality, E-E-A-T, or publish readiness; runs 80-item CORE-EEAT scoring with veto checks and a fix plan. Not for structural on-page tags/headers â use on-page-seo-auditor; not for domain/citation trust â use domain-authority-auditor. å 容质é/EEATè¯å
- Domain Authority Auditoraaron-he-zhuUse when auditing domain authority, trust, or citation credibility; runs 40-item CITE scoring with veto checks (TRUSTED/CAUTIOUS/UNTRUSTED). Not for page-level content quality â use content-quality-auditor; not for backlink profiling alone â use backlink-analyzer. ååæå¨/ç½ç«å¯ä¿¡åº¦
- Memory Managementaaron-he-zhuUse when the user asks to "remember project context"; manages the SEO/GEO memory lifecycle â hot-cache, active work, archive tiers, and privacy cleanup. Not for content or domain scoring â use the auditors. 项ç®è®°å¿/è·¨ä¼è¯
- On Page Seo Auditoraaron-he-zhuPerforms comprehensive on-page SEO audits to identify optimization opportunities including title tags, meta descriptions, headers, content quality, internal linking, and image optimization.
- Technical SEO Checkeraaron-he-zhuPerforms technical SEO audits covering site speed, crawlability, indexability, mobile-friendliness, security, and structured data. Identifies technical issues preventing optimal search performance.
- AnydesignKeroExtract the design of a screenshot, website URL or Figma file into a design.md with tokens, components, layout and brand rules, or copy one element (navbar, card, illustration) into an element.md with a rebuild or image-generation prompt. Use when the user wants to document, replicate, audit or reverse-engineer a visual design: its design system, palette, typography or style.
- Gcs Security AssessmentGoogle Cloud PlatformAssesses the security posture of Google Cloud Storage (GCS) buckets and projects. Grounds every finding in gathered telemetry, evaluates buckets against Google security best practices (public access, IAM over-granting, CMEK, VPC Service Controls, audit logging), and correlates signals to flag toxic combinations of individually low-risk settings, with actionable remediation.
- Google Cloud Storage Bucket ArchitectGoogle Cloud PlatformCreates Cloud Storage (Google Cloud Storage, or GCS) buckets. Analyzes the workload (sensitive data, media hosting, ingestion, web hosting, archiving, backup, logging, analytics, AI/ML, or general-purpose), validates project-level security settings, and designs a secure-by-default, cost-effective configuration (location, storage class, uniform bucket-level access, public access prevention, soft…
- Better Auth Security Best Practicesbetter-authConfigure rate limiting, manage auth secrets, set up CSRF protection, define trusted origins, secure sessions and cookies, encrypt OAuth tokens, track IP addresses, and implement audit logging for Better Auth. Use when users need to secure their auth setup, prevent brute force attacks, or harden a Better Auth deployment.
- Email And Password Best Practicesbetter-authConfigure email verification, implement password reset flows, set password policies, and customise hashing algorithms for Better Auth email/password authentication. Use when users need to set up login, sign-in, sign-up, credential authentication, or password security with Better Auth.
- Two Factor Authentication Best Practicesbetter-authConfigure TOTP authenticator apps, send OTP codes via email/SMS, manage backup codes, handle trusted devices, and implement 2FA sign-in flows using Better Auth's twoFactor plugin. Use when users need MFA, multi-factor authentication, authenticator setup, or login security with Better Auth.
- Aquaculture ScientistK-DenseThink and work like an expert Aquaculture Scientist. Use when a task calls for Aquaculture Scientist judgment. Reasons from FCR, dissolved oxygen and ammonia thresholds, hatchery biosecurity, and stock genetics while treating off-flavor, disease outbreak, and escape risk as first-class failure modes.
- AudiologistK-DenseThink and work like an expert Audiologist. Use when a task calls for Audiologist judgment. Reasons from auditory transduction, site-of-lesion localization, audibility, and noise dose-response through calibrated pure-tone/masking audiometry, immittance, OAE and ABR/ASSR, and real-ear verification against NAL-NL2/DSL targets while treating unmasked cross-hearing, collapsed ear canals, transducer…
- Climate Risk AnalystK-DenseThink and work like an expert Climate Risk Analyst. Use when a task calls for Climate Risk Analyst judgment. Reasons from TCFD/IFRS S2 four-pillar disclosure, NGFS Phase V orderly/disorderly/hot-house scenarios, hazard–exposure–vulnerability and RMS/AIR/CLIMADA cat economics, transition carbon-price and stranded-asset pathways, and PCAF financed emissions while treating exposure geocoding…
- Develop Secure ContractsopenzeppelinDevelop secure smart contracts using OpenZeppelin Contracts libraries. Use when users need to integrate OpenZeppelin library components — including token standards (ERC20, ERC721, ERC1155), access control (Ownable, AccessControl, AccessManager), security primitives (Pausable, ReentrancyGuard), governance (Governor, timelocks), or accounts (multisig, account abstraction) — into existing or new…
- EvaluateghaidaStructured UX evaluation that ranks specific issues by severity and routes each to the right Intent skill for resolution. Part of the Intent design strategy system. Runs heuristic evaluations, cognitive walkthroughs, anti-pattern detection, and task success analysis. Rates every finding P0 to P3, tags the heuristic it violates, and maps it to the skill that fixes it.
- LocalizeghaidaAdapts experiences across cultures and languages — not just translation, but cultural reconception. Part of the Intent design strategy system. When a product enters a new market, everything is in play: information density, navigation patterns, color meaning, icon comprehension, date formats, trust signals, payment flows, and the fundamental assumptions about how people make decisions.
- NextjspproencaNext.js 16 App Router performance, caching, server components, server actions, routing, and codebase-hygiene best practices — plus a category-major review/refactor algorithm with codebase-level (remove/dedup/reuse) findings.
- ReactpproencaReact 19/19.2 modern patterns for concurrent rendering, Server Components, actions, ref-as-prop, document metadata, resource hints, hooks, and memoization — plus a category-major review/refactor algorithm with codebase-level (remove/dedup/reuse) findings.
- TransposeghaidaRethinks experiences for different platforms and contexts — not just resizing, but reconceiving. Part of the Intent design strategy system. When an experience moves from desktop to mobile, web to TV, consumer app to kiosk, or visual interface to voice, the interaction model, information priority, and user context all change.
- Anti Money LaunderingjoellewisGuide BSA/AML compliance program design, ongoing transaction monitoring, and FinCEN reporting for broker-dealers, banks, and investment advisers. Use when the user asks about suspicious activity reports, currency transaction reports, OFAC screening, structuring detection, ongoing risk-rating reviews and escalation, or FinCEN requirements.
- Books And RecordsjoellewisGuide the design and maintenance of recordkeeping programs under SEC Rules 17a-3, 17a-4, and 204-2. Use when the user asks about document retention schedules, how long to keep trade records or customer complaints, WORM storage requirements, email or text message archiving, social media capture, BYOD compliance policies, or electronic storage audit trails.
- Counterparty RiskjoellewisGuide counterparty credit risk measurement and management for OTC and securities trading, organized around three workflows: assessing a new counterparty, responding to a credit-deterioration event, and executing a default close-out.