Security
4,732 results
- Creating Agents In MedusamedusajsUse when building an internal admin-facing AI agent in a Medusa project. These agents are operated by merchants and store operators — not customers. Covers data models, module service, agent runtime (tools, system prompt, streamText), streaming API routes (NDJSON), and admin UI chat extensions.
- S4h Cognition Mental Modelshuman-avatarSurfaces and audits the internal representations that drive perception and decision-making. Use when asked 'what assumptions am I making', 'why do I keep seeing this the same way', 'what model is driving this decision', 'I think I'm missing something about how this works', 'what's my mental model here', or when a belief or decision pattern needs to be examined from the inside.
- S4h Communication Clarity Audithuman-avatarAudits a communication for places where the message will be lost, misread, or misunderstood — before it's sent. Triggers: 'clarity audit', 'will this be understood', 'check my message', 'edit for clarity', 'where will this be misread'.
- S4h Emotional Trust Audithuman-avatarMaps what is building and eroding trust in a relationship or situation — trust degrades silently until it fails loudly. TRIGGERS: 'trust audit', 'why don't they trust us', 'relationship health check', 'what's eroding trust', 'build trust with'.
- S4h Epistemology Epistemic Statushuman-avatarProduces an honest, rigorous calibration of what you know vs. believe vs. assume vs. hope across a domain. Assigns explicit epistemic statuses to claims and flags when high-confidence claims rest on lower-confidence foundations. Draws from the rationalist tradition of explicit epistemic labeling.
- S4h Ethics Bias Checkhuman-avatarEvaluate an algorithm, model, ranking system, recommendation engine, or automated decision process for discriminatory patterns and unfair outcomes. Use before deploying any system that makes decisions about people or ranks/filters/scores people.
- S4h Ethics Data Audithuman-avatarAudit a data collection, retention, or sharing decision against ethical standards. Use when the user is making decisions about what data to collect, how long to keep it, who can access it, or who it's shared with.
- Site Launch ChecklistsamberPre-launch checklist for shipping a new website or web app. Scope: analytics (GA4, PostHog, Google Search Console, Ahrefs), DNS, TLS and backups, legal and CNIL/GDPR compliance, security headers, SEO and GEO (robots.txt, sitemaps, llms.txt, hreflang, schema markup, keyword research), copywriting voice via TONE.md and a humanizer pass, OpenGraph and social previews, favicons and web manifest…
- Snyk Agent Scan CompliancesamberCompliance expert for snyk-agent-scan — the agent skill file scanner — NOT for other Snyk CLI tools (snyk test, snyk code SAST, snyk iac, snyk container). Fixes alerts through content restructuring, never by suppressing or deleting information. Covers every file in a skill directory: SKILL.md, references/, assets/, and any secondary markdown.
- V4 Security FoundationsuniswapSecurity-first Uniswap v4 hook development. Use when user mentions "v4 hooks", "hook security", "PoolManager", "beforeSwap", "afterSwap", or asks about V4 hook best practices, vulnerabilities, or audit requirements.
- API AuthenticationsecondskySecure API authentication with JWT, OAuth 2.0, API keys. Use for authentication systems, third-party integrations, service-to-service communication, or encountering token management, security headers, auth flow errors.
- API Rate LimitingsecondskyImplements API rate limiting using token bucket, sliding window, and Redis-based algorithms to protect against abuse. Use when securing public APIs, implementing tiered access, or preventing denial-of-service attacks.
- API Security HardeningsecondskyREST API security hardening with authentication, rate limiting, input validation, security headers. Use for production APIs, security audits, defense-in-depth, or encountering vulnerabilities, injection attacks, CORS issues.
- Cloudflare SandboxsecondskyCloudflare Sandboxes SDK for secure code execution in Linux containers at edge. Use for untrusted code, Python/Node.js scripts, AI code interpreters, git operations.
- Github Project AutomationsecondskyGitHub repository automation (CI/CD, issue templates, Dependabot, CodeQL). Use for project setup, Actions workflows, security scanning, or encountering YAML syntax, workflow configuration, template structure errors.
- Gitops KnowledgefluxcdFlux CD and Flux Operator expert — answers questions and generates schema-validated YAML for all Flux CRDs (not repo auditing or live cluster debugging). Use when users ask about Flux concepts, want manifests for HelmRelease, Kustomization, GitRepository, OCIRepository, ResourceSet, FluxInstance, or any Flux resource.
- Gitops Repo AuditfluxcdAudit and validate Flux CD GitOps repositories by scanning local repo files (not live clusters) — runs Kubernetes schema validation, detects deprecated Flux APIs, reviews RBAC/multi-tenancy/secrets management, and produces a prioritized GitOps report. Use when users ask to audit, analyze, validate, review, or security-check a GitOps repo.
- Security Headers ConfigurationsecondskyConfigures HTTP security headers to protect against XSS, clickjacking, and MIME sniffing attacks. Use when hardening web applications, passing security audits, or implementing Content Security Policy.
- Seo OptimizersecondskySEO optimization with keyword analysis, readability assessment, technical validation, content quality. Use for search rankings, blog posts, content audits, or encountering keyword density, readability scores, meta tags, schema markup errors.
- Vulnerability ScanningsecondskyAutomated security scanning for dependencies, code, containers with Trivy, Snyk, npm audit. Use for CI/CD security gates, pre-deployment audits, compliance requirements, or encountering CVE detection, outdated packages, license compliance, SBOM generation errors.
- Web Performance AuditsecondskyWeb performance audits with Core Web Vitals, bottleneck identification, optimization recommendations. Use for page load times, performance reviews, UX optimization, or encountering LCP, FID, CLS issues, resource blocking, render delays.
- Build Loop Claude CodebuildgreatproductsUse when building features with **Claude Code** in any codebase and the work should go through a disciplined build → review → test → fix loop. Triggers on "run the build loop", "build the next task", "continue the plan", "build this feature properly", or any request to implement work from a plan file or a direct feature prompt.
- Launch ChecklistbuildgreatproductsUse when the user's product is built (or nearly built) and they want to get it live and accessible to customers. Triggers on phrases like "create my launch checklist", "how do I deploy this", "help me launch", "get this live", "put this in production", "ship it to customers", "what do I need to do to go live", or any request for a step-by-step path from working code to a product customers can…
- PytmrohunjPython-based threat modeling using pytm library for programmatic STRIDE analysis, data flow diagram generation, and automated security threat identification. Use when: (1) Creating threat models programmatically using Python code, (2) Generating data flow diagrams (DFDs) with automatic STRIDE threat identification, (3) Integrating threat modeling into CI/CD pipelines and shift-left security…