安全
4,732 个结果
- Pmax AuditCognyPerformance Max campaign audit — asset group strength, asset coverage, search themes, audience signals, brand exclusions, channel distribution
- Revenue AuditCognyAudit an email marketing program for revenue leaks — missing flows, dormant high-value subscribers, under-segmentation, promo gaps, stale automations — ranked by estimated $ impact
- Search Campaign AuditCognySearch campaign audit for Google Ads (with Microsoft Ads parity) — match types, quality score, negative keyword gaps, search terms, ad strength, RSA asset coverage
- SEO AuditCognyFull technical + content SEO analysis — uses live Search Console + Bing data when connected
- Shopping Campaign AuditCognyGoogle Ads Shopping / retail audit (feed cross-checked against Shopify or WooCommerce when connected) — product feed coverage, listing-group granularity, zero-impression products, bidding, top wasted spend
- Website Migration AuditCognyCompare a production site against a staging/redesign version — SEO parity, content integrity, missing pages, and launch readiness
- Android Pentesthardw00tComprehensive Android mobile application penetration testing skill with full ADB shell access to rooted devices. This skill should be used when performing security assessments on Android applications including static analysis, dynamic analysis, runtime manipulation, traffic interception, and vulnerability identification.
- AnydesignAlexAnalyze images, websites, and Figma files to extract their design and generate a `design.md` with token system, component inventory, and reconstruction notes. Use this skill whenever the user wants to understand, document, replicate, or audit the design of something visual: a screenshot, a URL, a Figma link, a Pinterest reference, a mockup, a competitor's site, a component, a dashboard, a…
- API Securityhardw00tComprehensive API security testing skill for REST, GraphQL, gRPC, and WebSocket APIs. This skill should be used when performing API penetration testing, testing for OWASP API Top 10 vulnerabilities, fuzzing API endpoints, testing authentication/authorization, and analyzing API specifications.
- DiscoveryAlexStructured pre-design questioning to surface hidden constraints before any architecture decision is locked in. Forces the architect/auditor/reviewer to enumerate what they DON'T know before proposing.
- Network Pentesthardw00tInternal network and Active Directory penetration testing skill for corporate environments. This skill should be used when performing internal network assessments, testing Active Directory security, exploiting Windows/Linux hosts, lateral movement, privilege escalation, and post-exploitation activities.
- Prose StyleAlexReusable writing-style contract for agent outputs (reports, ARCH docs, verdicts, threat models). Forces direct prose with concrete evidence, no marketing voice, no hedge words. The single most-referenced skill across the pipeline — used by 28 agents.
- Secrets RotationAlexWhat to do the moment a secret is exposed — pasted into chat, committed, logged, shown in a transcript or a screenshot. The secret is compromised; only revoking and rotating it helps. Turns it into one tracked task with an escalation, not a reminder repeated every session.
- Well ArchitectedAlex6-pillar architecture review framework. Adapted from AWS Well-Architected for use by great_cto's architect agent on every non-nano ARCH document. Forces explicit answers across operational excellence, security, reliability, performance, cost, and sustainability — not just feature design.
- Audit WebsitesquirrelscanAudit a website with the squirrelscan CLI and fix the findings in code. Runs SEO, performance, security, technical, content, accessibility, and 16 other rule categories (300+ rules), returns an LLM-optimized report, then drives an iterative fix loop, mapping issues to source files, applying fixes, and re-auditing until the site scores well.
- Squirrelscansquirrelscansquirrelscan audits websites for SEO, performance, security, accessibility, content, and structured data issues (300+ rules) and scores site health, via the squirrel CLI. Use when the user wants to check, audit, or improve a website's SEO, ranking, speed, or health, and for anything squirrelscan itself, installing or updating the CLI, login and API keys, running audits, publishing and sharing…
- squirrelscan/skillssquirrelscan技能合集Agent skills for squirrelscan, the website QA tool for your coding agent (300+ audit rules).
- Code ReviewpaulrbergUse for code/PR review, audits, bug/security checks, reviewing diffs or changes, and finding issues in code.
- NewapiquantumnousAssistant for newapi (new-api), an open-source unified AI gateway platform (https://github.com/QuantumNous/new-api). Use when the user asks about New API, managing models, groups, balance, or tokens, or securely copying keys, applying them to config files, or using them in commands without exposing secrets.
- AdobesfkislevControl Adobe desktop apps - Photoshop, Illustrator, Premiere, After Effects, InDesign, Audition - from the shell via Flue, without an MCP server.
- AuditionsfkislevControl Adobe Audition from the shell via Flue - ExtendScript bridges without an MCP server.
- Clarification PhasemarcusgollExecutes the /clarify phase using AskUserQuestion tool to resolve ambiguities through structured questions (â¤3), prioritization, and answer integration. Use when spec.md contains [NEEDS CLARIFICATION] markers, when requirements need disambiguation, or when running /clarify command to resolve critical scope/security/UX ambiguities before planning. (project)
- Optimization PhasemarcusgollValidates production readiness through performance benchmarking, accessibility audits, security reviews, and code quality checks. Use after implementation phase completes, before deployment, or when conducting quality gates for features. (project)
- Spatie SecurityspatieApply Spatie's security guidelines when configuring applications, databases, servers, credentials, or signed Git commits, or when reviewing code for security concerns; use for SSL setup, CSRF protection, password hashing, database permissions, and server hardening.