安全
4,732 个结果
- Event Vip ManagementsamberReceive named guests who are neither speaking nor sponsoring but whose presence creates escort, protocol, security or discretion obligations the general attendee flow cannot absorb - public officials, dignitaries, major funders, executives with no booth duty.
- FixusmanmaniiFix the problems a RealityGate audit or check found — replace stubs and placeholders with real implementations, remove invented packages, add input validation, stop swallowing errors, and add missing tests — then re-run until the score improves. Use after an audit, or when the user asks to make their vibe-coded app real, production ready, or to raise its Reality Score.
- Guardrails SafetydoanchienthangdevProtecting AI applications - input/output guards, toxicity detection, PII protection, injection defense, constitutional AI. Use when securing AI systems, preventing misuse, or ensuring compliance.
- Hardening User PrivilegesCockroachDBHardens CockroachDB user privileges by auditing and tightening role-based access control, reducing admin grants, restricting PUBLIC role permissions, and applying least-privilege principles. Use when reducing excessive privileges, cleaning up admin access, or implementing RBAC best practices.
- Managing Cluster SettingsCockroachDBReviews, audits, and modifies CockroachDB cluster settings. Self-Hosted has full control over all settings and start flags. Advanced/BYOC can modify most SQL-level settings but infrastructure settings are managed by CRL. Standard has limited settings access — session variables are the primary tuning mechanism. Basic has minimal settings — use session variables and Cloud Console.
- Managing IntegrationsceligoManage Celigo integrations -- the named containers that group flows, APIs, Tools, connections, scripts, and settings so a body of automation is organized, secured, and evolved as one unit. Covers plain integrations vs Integration Apps, parent/child hierarchies, cloning with connection remap, moving resources between integrations, notifications, aliases, and Integration Lifecycle Management (ILM)…
- Managing On Premise AgentsceligoManage Celigo on-premise agents -- lightweight software you install on a host inside your own network that opens a secure OUTBOUND tunnel to integrator.io, letting the platform reach private systems (on-prem databases, file shares, internal apps) without opening inbound firewall ports.
- Managing UsersceligoManage Celigo account users -- inviting users, updating permissions, configuring access levels (administrator, manage, monitor, integration-only), enforcing MFA/SSO, and disabling accounts. Use when adding team members, changing permissions, auditing access, or managing user lifecycle.
- Novu Framework IntegrationnovuhqBuild code-first notification workflows with @novu/framework. Use when defining workflows in TypeScript (Zod / JSON Schema / Class Validator), composing channel steps (email, SMS, push, chat, in-app) with action steps (delay, digest, custom), exposing Step Controls for non-technical teammates, rendering React/Vue/Svelte Email templates, hosting the Bridge Endpoint inside Next.js, Express…
- Novu Inbox IntegrationnovuhqIntegrate Novu's in-app notification inbox into web applications. Supports React, Next.js, and vanilla JavaScript. Includes the Inbox component (bell icon + notification feed), composable components (Bell, Notifications, InboxContent, Preferences), headless hooks, branded theming, custom render props, multi-tenancy via contexts, tabs, localization, and HMAC security.
- Pipeline PulseHubSpotQuick pipeline snapshot — deals by stage, activity age, next step status, and closing timeline. Surfaces deals with no next step, highlights stalled deals, and proactively generates follow-up tasks you can add to HubSpot by replying.
- Preparing Compliance DocumentationCockroachDBGuides preparation of compliance documentation for CockroachDB Cloud deployments, covering SOC 2, PCI DSS, ISO 27001, HIPAA, and GDPR certifications. Use when responding to compliance questionnaires, preparing for audits, locating certification documents, or assessing cluster configuration for compliance readiness.
- Production ReadinessGladiarnUse when asked whether an app, API, or service is production ready, launch ready, or safe to go live; before a first production launch or a major release; or when reviewing security, rate limiting, CI/CD, deployment, scaling, monitoring, error tracking, backups, or disaster recovery for a web application.
- Public API Design ReviewsamberAudit an existing or proposed public REST API surface as a checklist-driven design review - resource and URI naming, HTTP method and status-code correctness, field-naming consistency, pagination pattern choice, filtering/sorting/field-selection conventions, one consistent error envelope, and Hyrum's-Law backward-compatibility risk - every finding bucketed Must-change or Improvement against a…
- Realitygate AuditusmanmaniiAudit a codebase for fake, unfinished or unsafe AI-generated code and give it a Reality Score from 0 to 100. Use when the user asks whether their app is production ready, real, finished or safe to launch; asks to audit, review or health-check AI-generated or vibe-coded code; or mentions stubs, TODOs, placeholder or mock data, hallucinated or invented npm packages, leaked API keys, or a Reality…
- Realitygate FixusmanmaniiFix the problems a RealityGate audit or check found — replace stubs and placeholders with real implementations, remove invented packages, add input validation, stop swallowing errors, and add missing tests — then re-run until the score improves. Use after an audit, or when the user asks to make their vibe-coded app real, production ready, or to raise its Reality Score.
- Realitygate ReviewusmanmaniiPrepare an independent cross-model code review and check the Proof Ledger — bundles a task spec plus its diff into a review pack for a reviewer from a different model family, and reports which completed tasks carry real evidence (failing tests first, green gate, approved review, real execution, existing commit).
- Realitygate ScanusmanmaniiCheck whether an agent skill, Claude Code plugin, MCP config or AI coding extension is safe before installing it — scans for remote code execution, obfuscated payloads, hidden Unicode instructions, credential or .env access, data-leak endpoints, prompt injection, permission bypass, hooks, MCP servers and install scripts.
- ReviewAltimateAIReview dbt project changes — dbt models (models/**/*.sql), schema.yml, dbt_project.yml, sources.yml, macros, snapshots, seeds. Use whenever the user asks to "review my dbt changes", "audit my dbt models", "check my mart / staging / marts before shipping", requests a second opinion on incremental / SCD2 / semantic-layer / cross-model semantic changes, or asks to "review this PR" AND the PR's diff…
- ReviewusmanmaniiPrepare an independent cross-model code review and check the Proof Ledger — bundles a task spec plus its diff into a review pack for a reviewer from a different model family, and reports which completed tasks carry real evidence (failing tests first, green gate, approved review, real execution, existing commit).
- Rook Code ReviewjhoblittUse when reviewing, auditing, or sanity-checking rook (github.com/rook/*) code, tests, docs, or workflows — a working tree, branch, commit range, or PR; when checking a branch before opening a PR; when reviewing, critiquing, or stress-testing a rook design proposal, design doc, enhancement doc, or design/** change before it becomes code; when bulk-reviewing open rook PRs or evaluating a…
- ScanusmanmaniiCheck whether an agent skill, Claude Code plugin, MCP config or AI coding extension is safe before installing it — scans for remote code execution, obfuscated payloads, hidden Unicode instructions, credential or .env access, data-leak endpoints, prompt injection, permission bypass, hooks, MCP servers and install scripts.
- Security Revieweroneafrikan<!-- SKILL.md — Security Reviewer operating manual. Runtime: Claude Code + ACP (swappable coding CLI). Content stays LCD — no assumptions about a specific language/framework unless injected via overlay. Stack-specific commands (scanners, CVE tooling) are NOT here — they live in stacks/<stack>/ overlays. Injection points are marked: `STACK: ...` -->
- Solidity Gas OptimizationpseudoyuSolidity smart contract gas optimization guidelines based on RareSkills. Use when writing, reviewing, or auditing Solidity code. Triggers on tasks involving smart contracts, EVM development, gas optimization, or Solidity best practices.