安全
4,732 个结果
- VitestsentimonyYou MUST use this when configuring, writing, debugging, running, migrating, or auditing Vitest tests in JavaScript/TypeScript projects - Vite, Vue, Nuxt, React, Next.js, Node libraries, workspaces, coverage, mocks, snapshots, flaky tests, CI parity, or Jest migration.
- Zero-Day Hunting MethodologymacaughSystematic approach to discovering novel vulnerabilities through code analysis, fuzzing, and attack surface research
- 1password Direnv SecretsclearfunctionConfigures 1Password CLI with direnv for fast, secure credential loading. Activates for: 1Password + direnv setup, slow secrets (>2 sec), .env.op files, op:// references, AWS credentials via env vars, --reveal flag issues, repeated biometric prompts, creating 1Password items programmatically, op item get errors. Not for: 1Password GUI usage, SSH keys (use 1Password SSH agent).
- Accessibility AuditNoibuAudit a website for WCAG 2.1 AA accessibility violations using automated scanning and Noibu traffic data, and optionally draft the fixes. Use when you want to know what's inaccessible across the store, check WCAG or ADA compliance, find contrast or heading errors, audit for screen reader support, generate an accessibility report, or fix accessibility violations with pull requests or tickets.
- Anti Corruption Investigations1366560Anti-corruption investigation toolkit for analyzing chat logs and communications to detect suspicious patterns, corruption indicators, and generate investigation reports. Supports Chinese and English chat logs in JSON/TXT formats. Includes automated keyword detection, behavior analysis, risk assessment, and evidence preservation workflows.
- Audit HarnessguilhermebkelAnalyzes this project's coding-agent harness (instruction files, skills, subagents, commands, hooks, MCP servers, plugins) against the session transcripts already saved on this machine, and suggests evidence-based changes.
- Audit HostingHostinger InternationalAudit a Hostinger web hosting account (Shared, Cloud and Agency plans) and report what needs attention: every plan and website, SSL problems, broken or vulnerable WordPress installs, failed Node.js builds and vulnerable npm packages, databases and Agency Plan orders near their limits, and hosting plans about to lapse.
- Backend Devdy9759Comprehensive backend development workflow that orchestrates expert analysis, architecture design, implementation, and deployment using the integrated toolset. Handles everything from API design and database architecture to security implementation and DevOps automation.
- Certifications TrainingpluginagentmarketplaceProfessional certifications, CTF competitions, and training resources for AI security practitioners
- Clawhub Skill VettinghugomrtzVet ClawHub skills before installation. Use when the user asks about evaluating, auditing, or safely installing OpenClaw/ClawHub skills, or when a skill’s trustworthiness is in question.
- Critic ReviewTianMingKanaeReview an engineering design, code change or result against requirements and raw evidence. Use for independent correctness, security, reliability, performance and evidence review before integration or consequential claims.
- DiataxisarisngCreate and evaluate documentation using the Diátaxis framework. Use when writing, organizing, or auditing documentation to ensure it serves distinct user needs through four systematic categories (Tutorials, How-to Guides, Reference, Explanation). Ideal for diagnosing documentation problems, separating mixed content, and ensuring each piece serves a single, clear purpose.
- Groove Work AuditandreadellacorteReview current branch for blindspots; fix now / needs spec / create issues.
- Hushomarei-omotoUse for any task involving API keys, credentials, .env files, or tokens — running a CLI that needs auth (stripe, gh, vercel, fal, supabase, aws, psql), setting up a service, choosing between several accounts for one service ("use my acme fal key"), adding a new key, or diagnosing missing environment variables. Keys stay encrypted and never enter the conversation.
- List TestsVantaShow failing Vanta compliance tests, prioritized by what can be fixed from this repository
- Luau Best Practicesdig1tUse when writing, reviewing, or refactoring Luau code for Roblox - modules, services, controllers, error handling (pcall), memory leaks and connection cleanup, server-authoritative security, input validation, naming conventions, or project organization. Triggers include "best practices", "clean code", "code review", "refactor", "memory leak", "server authority".
- Maintain WordpressHostinger InternationalKeep WordPress sites on Hostinger web hosting updated and secure: checks core, plugin and theme versions, known vulnerabilities and install health on one site or every site in the account, reports what needs doing, applies updates in a safe order, and confirms each site still loads. Also covers cache purges, the Memcached object cache, maintenance mode and one-click wp-admin login links.
- Openspec To BeadslucastamoiosPROACTIVELY convert approved OpenSpec specs into Beads issues when user applies a change or explicitly approves implementation. Creates trackable work with dependencies, discovers gaps, and maintains audit trail between planning and execution.
- Sumup Best PracticesSumUpPick the right SumUp integration path and apply security best practices. Use when deciding between Hosted Checkout, Card Widget, Checkouts API, mobile SDKs, terminal SDKs, or Cloud API; choosing API key vs OAuth vs restricted keys; or reviewing SumUp integration security.
- Troubleshoot WebsiteHostinger InternationalDiagnose and fix a website on Hostinger web hosting (Shared, Cloud or Agency plans) that is down, slow, erroring, insecure or failing to build. Checks the site from outside, reads builds, runtime logs, WordPress health, SSL, cache and PHP settings through the Hostinger MCP, names the cause with evidence, and applies the fix once the user agrees.
- Vulnerability DiscoverypluginagentmarketplaceSystematic vulnerability finding, threat modeling, and attack surface analysis for AI/LLM security assessments
- 05 Security Reviewerk1lgorUse when performing security audits, reviewing code for vulnerabilities, checking auth flows, or validating OWASP compliance — before any approval or merge
- 09 Infra Architectk1lgorUse when designing Infrastructure as Code (Terraform, CloudFormation), setting up cloud resources, defining IAM policies, or configuring networking — with security and verification discipline
- 16-eyeskigielaSecurity audits with four subcommands — `/16-eyes init` (configure: detect quality gates, exclude patterns, output location, and design the repo's tailored investigation lenses — auto-runs non-interactively if skipped), `/16-eyes audit` (run every persisted lens across the WHOLE repo, verify every finding skeptically, adversarially re-check high-impact ones, produce a classified safe/risky…