安全
4,732 个结果
- Sonatype GuideSonatypeMUST use before installing, adding, or upgrading any dependency. Trigger when: running pip install, npm install, cargo add, go get, or any package manager command; adding a package to requirements.txt, package.json, pyproject.toml, Cargo.toml, go.mod, pom.xml, build.gradle, or Gemfile; choosing which library to use for a task; upgrading or changing dependency versions; or auditing existing…
- Spec ScoutoneafrikanAudit a repo's OpenSpec adoption and report drift between openspec/specs/ and the code. Use when the user says "spec-scout", "audit specs", "are our specs current" or "check spec drift".
- SQL Jdbc Access DesignsamberDesign customer-facing SQL access to a product's data - a JDBC/ODBC endpoint, warehouse share, or hosted query surface. Covers the architecture gate by scan frequency (zero-copy share, replicated copy, per-tenant compute isolation), engine-level tenant isolation with secure views and row-level security, an additive-only schema-stability contract enforced in CI, BI-tool connectivity and driver…
- Startup Pitch ContestsamberRun a startup pitch contest or demo day inside a technical event - the pre-event application and selection funnel, the pitch format and the time it costs, the rubric dimensions an investor judge actually scores, the conflict of interest of a judge who may invest in the company just ranked, and a prize the winner can use - introductions, committed slots or equity-free cash.
- Vibe Security0x8506Security intelligence for code analysis. Detects SQL injection, XSS, CSRF, authentication issues, crypto failures, and more. Actions: scan, analyze, fix, audit, check, review, secure, validate, sanitize, protect. Languages: JavaScript, TypeScript, Python, PHP, Java, Go, Ruby. Frameworks: Express, Django, Flask, Laravel, Spring, Rails.
- Amphoreus Cipherxi-kariSupports natural daily chat from the first line. 日常开场直接说角色的话；必要启用提示也仅用「赛飞儿」等自然称呼，不说 skill／技能、调用标识、读文件或审计流程。 Designs authorization-bounded adversarial tests, boundary cases, input-validation probes, and private vulnerability reports with Cipher's three rules of thievery. Use when 用户经 amphoreus 路由分派安全边界、输入校验、越权／注入思路或对抗测试，或显式点名 amphoreus-cipher／赛飞儿；仅经总路由或显式点名，不得被动触发。
- Analyzing Component QualityC0ntr0lledCha0sExpert at analyzing the quality and effectiveness of Claude Code components (agents, skills, commands, hooks). Assumes component is already technically valid. Evaluates description clarity, tool permissions, auto-invoke triggers, security, and usability to provide quality scores and improvement suggestions.
- Ane VoicegasseraneAudit and rewrite AI-generated or AI-edited prose to match Ane's IPPF MEL/SRHR voice, preserving rigour: strips hedging, filler, nominalisations, em-dashes, passive voice, abstract openings, misplaced framework name-dropping, and inline citations where an evidence-base line belongs. Tier-aware, defaulting to the Tier 1 working-brief register.
- Api SecurityLeahyCCOWASP API Security Top 10 (2023) with production Next.js App Router code — access control, authentication, input validation, rate limiting, security headers, data exposure, supply chain, SSRF
- App Security ScanNightVision SecurityDAST-first NightVision scan for an app you just built or changed. Use when a user, or a project or org agent-instructions rule, wants a local, private, staging, or internal web app/API security-scanned. Drives the NightVision MCP `run-app-security-scan` harness.
- AuditdheerajjhaAudit recent coding-agent sessions for claims like "tests pass" that had no matching check after the last edit.
- Audit Mimis ImacwhoamimiInstalls or verifies and runs a macOS security audit toolchain (Lynis, rkhunter, chkrootkit, osquery and nmap) on the user's iMac, then summarises the logs into one status table with a plain-language verdict. Use when the user wants to check their Mac for security issues, hacking indicators, rootkits, suspicious startup items or open ports.
- auditor-processuallucianummEntrada universal para usar a skill Legal Process Parser por link do GitHub em Manus, Gemini, Grok, ChatGPT, Claude ou outra IA; roteia a plataforma e a tarefa sem carregar instruções irrelevantes.
- Auth AntipatternsemgiezetForbidden authentication and session-management patterns — weak token generation, insecure password hashing, session fixation, JWT algorithm confusion, missing rate limits, and account enumeration. Applies when writing auth, login, session, token, password, or OAuth code.
- Auto BuildStepenkoAnatoliTake a task from idea to a reviewed pull request and an owner-approved merge. Researches external facts through Fetchproof, writes traceable requirements, presents the Mandate for design approval, builds with lead-orchestrator, hardens with break-test and audits with gap-audit.
- Automation ValidatorMacroMan5Validates automation workflow JSON before deployment for Power Automate, n8n, Make, Zapier and other platforms. Checks syntax, structure, best practices, and potential issues. Analyzes workflow JSON files for platform compliance, missing error handling, performance issues, and security concerns. Use when user wants to validate, review, or check a workflow before deployment/import.
- Catalyst AuthenticationCatalyst by ZohoCatalyst Authentication — user login/signup, ZAID, Web SDK auth flows, and OAuth token management via Connections. Trigger on 'authentication', 'login', 'signup', 'getCurrentUser', 'ZAID', 'isUserAuthenticated', 'signOut', 'Connections', or 'getAccessToken'.
- Catalyst FunctionsCatalyst by ZohoCatalyst serverless functions — all 7 types (Basic I/O, Advanced I/O, Event, Cron, Job, Integration, Browser Logic), handler signatures, catalyst-config.json, Security Rules, API Gateway routing, file uploads, busboy, Express middleware, environment variables, function URL, and function testing. Requires MCP connection — check for the ZohoMCP_* meta-tools before any operation.
- CI CD IntegrationNightVision SecurityGuide for agents to help users integrate NightVision DAST scanning into CI/CD pipelines. Use when setting up security scans in GitHub Actions, GitLab CI, Azure DevOps, Jenkins, BitBucket, or JFrog pipelines, configuring NightVision tokens, creating targets, running scans, exporting results as SARIF/CSV, or detecting API breaking changes.
- Claude Code Token CostshangliyCut Claude Code token cost and prompt-cache waste. Use when the user asks why Claude Code (or Codex CLI, Gemini CLI, OpenCode) burns so many tokens, how much their sessions cost, whether the prompt cache is working, whether to /compact, or how to reduce the bill. Runs the local kvleak audit (no API key, no network) and turns its numbers into the one or two settings that actually move the bill.
- Coding Agent Docs OptimizationsamberMakes SDK, API or protocol documentation something a coding agent can integrate from unattended - crawler access, machine-readable entry points (llms.txt, markdown endpoints, OpenAPI and JSON Schema files), self-contained copy-paste-safe pages, and a measured first-attempt agent success rate.
- css-i18nglobalize-nowAudit and convert CSS to use logical properties for RTL/bidirectional layout support. Use when the user asks to "make CSS RTL-safe", "use logical properties", "replace left/right with start/end", "audit CSS for i18n", "CSS internationalization", "fix CSS for RTL", "convert to logical properties", or when setting up any project that targets RTL locales (Arabic, Hebrew, Persian, Urdu).
- Cve AuditMearmanScan project dependencies for known vulnerabilities. Automatically detect and parse package files (package.json, requirements.txt, Gemfile, go.mod, pom.xml) and check all dependencies against the CVE database. Use when you want to audit a project for security vulnerabilities, check if dependencies have known CVEs, or generate a vulnerability report for compliance.
- Dependency Auditwu529778790Use when auditing project dependencies for security vulnerabilities, outdated packages, or license compliance across npm/yarn/pnpm, pip, go, and cargo.