安全
4,732 个结果
- designing-databasesvstlmkhDesign, audit and tune relational databases on PostgreSQL and MySQL/InnoDB — table and key design, index strategy, slow-query and EXPLAIN-plan diagnosis, transaction isolation and locking, and zero-downtime migrations in any framework (Alembic, Django, Laravel, Doctrine, Prisma, TypeORM, Knex, Drizzle, Flyway, Liquibase, Atlas, golang-migrate).
- Developer Docs Structure AuditsamberAudits an existing developer documentation set's structure - a page-by-page inventory classified against the Diátaxis modes (tutorial, how-to, reference, explanation), mixed-mode and misplaced pages, coverage gaps per product surface, navigation drift against the file tree, a CNCF TechDocs rubric score, and a prioritized remediation queue.
- Developer Quickstart GuidesamberWrites or audits a developer quickstart that carries a reader from zero to one verified success - minimal path, copy-paste commands, expected output at every step, fail branches, and a cold-run time budget.
- Devopstomas-uExpert DevOps engineer specializing in secure CI/CD pipelines, infrastructure automation, container orchestration, and developer experience optimization. Covers GitHub Actions, Docker, Kubernetes, cloud platforms (AWS/Azure/GCP), monitoring, secrets management, and infrastructure as code. Security-first approach following DevSecOps principles.
- Devrel CareersamberPlans, lands and advances a developer relations career from the candidate side - developer advocate, developer evangelist, DevRel engineer, community manager, developer educator, DX engineer. Covers portfolio audits against real hiring signals, a zero-to-hireable artefact curriculum, the six-rung IC ladder, the interview formats DevRel loops use (talk round, content and coding take-homes…
- Devsecops Lookupnaporin0624Looks up OWASP DevSecOps Guideline phases, security tools, and pipeline checks. Returns tool configurations, CWE mappings, and integration patterns for CI/CD security. Use when user asks about "DevSecOps", "SAST", "DAST", "SCA", "container security", "IaC security", "secret detection", "gitleaks", "semgrep", "trivy", "pipeline security", "ã·ã¼ã¯ã¬ããæ¤åº", "éç解æ"…
- Electron ScaffoldchrisvoncsefalvayScaffold a native-looking, effective Electron app with best practices baked in. Creates a production-ready Electron application with security hardening, modern tooling, proper IPC patterns, auto-updates, native UI elements, and optimal build configuration. Use this skill when users want to start a new Electron project or modernize an existing one.
- Emerging Specialty SkillspluginagentmarketplaceMaster emerging technologies including blockchain, cybersecurity, QA testing, and specialized tech roles. Stay ahead with cutting-edge technologies.
- EufymbelinkyManage Eufy Security (HomeBase S380 + SoloCam S340/E340) from the `eufy` CLIâcapture snapshots, forward alarms to the Tuya hub, and change guard/alarm modes through eufy-security-ws.
- Four Dimension AuditStepenkoAnatoliGrade completed work honestly and precisely on four dimensions — SPEC, DESIGN, CORRECTNESS, QUALITY — each scored 0–10, to the standard of a demanding principal engineer and product reviewer, without changing anything.
- Gap AuditStepenkoAnatoliRigorous, answer-only audit of an existing project to find the gaps that would stop it producing accurate, complete, and reliable outputs for its stated purpose, benchmarked in repeated passes against real-world equivalents in its domain.
- Grade SystemgasseraneApply substantive quality and reliability grading to Ane's MEL/SRHR system (Ann/Vi/Li/Researcher team + wiki + harness + three-repo architecture): letter grades on 9 components and 10 dimensions plus OECD-DAC adapted criteria, three concrete risks, what an external evaluator would still want, and recommendations for moving the grade, with a mandatory self-grading bias note.
- Iac AntipatternsemgiezetForbidden IaC/container/CI patterns — public cloud resources, unencrypted storage, privileged containers, unpinned images, insecure CI workflows.
- Improve SystemgasseraneUse when Ane types /improve-system, asks to "mine recent sessions", "what is the system getting wrong", "improvement loop", "trend the rejection rate" — or asks "where are my tokens going", "token audit", "why was that session expensive" (spend-audit mode) — or when the SessionStart maintenance nudge reports improve-system due (14-day cadence).
- Install MessengerIntercomInstall the Intercom Messenger on a website or web application with secure JWT-based identity verification. Generates backend and frontend code for React, Next.js, Vue.js, Angular, Ember, and plain JavaScript. Supports Node.js, Python (Flask/Django), PHP, and Ruby backends.
- Jvm AntipatternsemgiezetForbidden JVM (Java/Kotlin) patterns — JDBC injection, insecure deserialization, weak random, trust-all TLS, Jackson misconfiguration.
- LocalisegasseraneProduce an MA-facing deliverable in Romanian, French, Spanish, or Russian to IPPF rigour, with English as the canonical source: curated SRHR glossary, register preservation, safeguarding-aware term choices, back-translation QA, native-review flags.
- nvsecurity/nightvision-skillsNightVision Security技能合集NightVision DAST and API Discovery skills plugin for Claude Code
- Oss Issue TriagesamberDesigns an issue and pull-request triage system a maintainer team can sustain - response targets sized against real capacity, the label taxonomy, intake cuts through structured forms and off-tracker routing, a separate security-report path, triage duty assignment, and the closing, staleness and volume-gating policy.
- PocketbaseWhampComprehensive PocketBase development and deployment skill providing setup guides, schema templates, security patterns, API examples, data management scripts, and real-time integration patterns for building backend services with PocketBase.
- Readme OptimizationsamberAudits and rewrites a repository README so a developer who has never seen the project can tell what it is, why it beats the alternative, and run the first command inside a minute - every claim and the documented install verified against the source, the page ordered into a bail-fast funnel, badges that earn nothing pruned.
- Resume IntelligencerahulbswUse when the user wants to build or tailor a resume, detailed interview resume, career master run, career coach, interview coach, career knowledge vault, Obsidian/LLM wiki, professional DOCX template, visual HTML/PDF resume, Canva-ready or Figma-ready resume, ATS/recruiter scorecard, cover letter, LinkedIn recommendations, interview prep, project interview briefs, technical-stack guide, job…
- Scan ReportNightVision SecurityGenerate a shareable NightVision security report as a PDF - an executive summary for AppSec and leadership plus a findings appendix for developers - for one scan, a scan compared with the previous one, or a whole project. Use when a user wants a PDF, a report, or something to send to a CISO, manager, auditor, or another team about NightVision scan results.
- Scan TriageNightVision SecurityGuide for agents to help users interpret and act on NightVision DAST scan results. Use when reading SARIF/CSV findings, explaining vulnerabilities, locating vulnerable code, validating findings with curl, prioritizing by severity, suggesting remediations, or marking false positives.