Security
4,732 results
- Car Corrective ActionRBraga01Write a corrective action report, CAPA, respond to an NCR or audit finding, or document an 8D D5 root cause action. Covers the full CAR structure: root cause analysis, corrective actions, implementation evidence, and verification of effectiveness (VOE) per ISO 9001 §10.2. Use for any quality escape requiring documented systemic corrective action.
- Control PlanRBraga01Control Plan — build, review, or audit a Prototype, Pre-launch, or Production Control Plan linked to PFMEA failure modes and controls. Use when creating a new control plan, updating after a process change or corrective action, or auditing an existing CP for completeness and PFMEA alignment. Covers AIAG Control Plan reference manual and IATF 16949 §8.5.1.
- Fmea ReviewerRBraga01PFMEA and DFMEA gap audit against AIAG-VDA FMEA Handbook 2019 — reviews an existing FMEA for missing failure modes, incorrect AP ratings, unaddressed H-AP items, missing special characteristics, and PFMEA-to-Control Plan linkage gaps. Returns a structured gap report with specific findings and required actions before PPAP or audit submission.
- Iatf 16949 AuditRBraga01Conduct an IATF audit, check supplemental requirements, or prepare for a manufacturing process audit or IATF 16949:2016 third-party assessment. Covers customer-specific requirements (CSR), all 16 automotive supplemental clauses, and the three required audit types: QMS audit, manufacturing process audit, and product audit.
- Iso 9001 Internal AuditRBraga01Conduct an internal audit by clause, answer ISO 9001 internal audit questions, or prepare evidence for §4 §5 §6 §7 §8 §9 §10. Provides key audit questions by clause, finding classification (Major NC / Minor NC / OFI), and audit report writing. Use when planning or conducting an ISO 9001:2015 internal audit or preparing for third-party certification.
- Legend List Best PracticeslegendappImplement or audit @legendapp/list usage, including recycling, measurement, invalidation, and scroll anchoring.
- Legend State Best PracticeslegendappImplement or audit @legendapp/state ownership, subscriptions, persistence, and sync.
- Msa Gauge RrRBraga01Measurement System Analysis (MSA) and Gauge Repeatability & Reproducibility (Gauge R&R) — plan, execute, and interpret an MSA study for variable or attribute measurement systems. Use when qualifying a gauge for a new part, validating a measurement system before PPAP, interpreting Gauge R&R results, or auditing MSA studies for adequacy. Covers AIAG MSA 4th edition.
- Ncr WritingRBraga01Write a non-conformance report, NCR, reject a supplier, or document a defect with objective-evidence language and correct severity grading (Critical/Major/Minor). Covers disposition recommendations and segregation requirements for incoming inspection failures, in-process defects, customer returns, and audit findings.
- PpapRBraga01Production Part Approval Process (PPAP) — verify PPAP submission level, audit all 18 elements, check completeness for customer approval, prepare PSW. Use when a supplier needs to submit parts for approval, when reviewing a PPAP package, or when determining which PPAP level is required. Covers AIAG PPAP 4th edition with Ford, BMW, VW, and Stellantis OEM-specific requirements.
- Skill AuditorRBraga01Audit a SKILL.md or REFERENCE file, score it 0–10, identify major and minor findings, and generate copy-paste improvements. Use when reviewing a new skill before merging, auditing an existing skill for gaps, checking cross-skill consistency, or validating that a skill meets the Quality-Engineering-Skills framework standards.
- Source ReconciliationadityaagarwUse when the work must match, reconcile or audit records from several sources (ledgers, bank statements, invoices, contracts, logs) and explain every difference.
- Spc Control ChartsRBraga01Statistical Process Control (SPC) — select the correct control chart, interpret out-of-control signals using Western Electric rules, calculate and interpret Cp, Cpk, Pp, Ppk. Use when setting up SPC for a new characteristic, interpreting control chart signals, responding to special cause variation, or auditing SPC implementation. Covers AIAG SPC 2nd edition and IATF 16949 §8.3.3.
- Vda 6 3 AuditRBraga01VDA 6.3 Process Audit — conduct or prepare for a process audit using the VDA 6.3 methodology, evaluate process elements P1–P7, calculate degree of fulfillment, classify findings, and generate an audit report. Use when a customer requests a VDA 6.3 audit, when auditing a supplier's manufacturing process, or when preparing for a VDA process audit visit. Covers VDA 6.3 4th edition (2023).
- Swift Security Expertivan-magdaUse when working with iOS/macOS Keychain Services (SecItem queries, kSecClass, OSStatus errors), biometric authentication (LAContext, Face ID, Touch ID), CryptoKit (AES-GCM, ChaChaPoly, ECDSA, ECDH, HPKE, ML-KEM), Secure Enclave, secure credential storage (OAuth tokens, API keys), certificate pinning (SecTrust, SPKI), keychain sharing across apps/extensions, migrating secrets from UserDefaults…
- TailscaletailscaleGuide for installing, configuring, and managing Tailscale, headscale, and the Tailscale product family. Covers core mesh VPN (exit nodes, subnet routers, access controls, SSH, MagicDNS), Docker and Kubernetes integration, CI/CD pipelines, ephemeral nodes, infrastructure access, site-to-site networking, app connectors, Aperture (AI/LLM gateway for governance, cost control, usage visibility)…
- Accessibility Engineerdaffy0208Implement accessibility (a11y) best practices to make applications usable by everyone. Use when building UIs, conducting accessibility audits, or ensuring WCAG compliance. Covers screen readers, keyboard navigation, ARIA attributes, and inclusive design patterns.
- Codex Review Workflowdaffy0208Automated code review workflow using OpenAI Codex CLI. Implements iterative fix-and-review cycles until code passes validation or reaches iteration limit. Use when building features requiring automated code validation, security checks, or quality assurance through Codex CLI.
- Youtube Video AnalystshipshitdevForensic-level deconstruction of YouTube videos to extract viral formulas, hooks, retention mechanics, and emotional engineering. Use when analyzing video transcripts to clone success patterns for new content.
- Endor SetupclineUse when user asks to setup endorctl, install endorctl, run endorctl scan, scan for vulnerabilities, run endor scan or run Endor Labs scan or when any endorctl command fails with 'command not found', 'no such file or directory', authentication errors, 'unauthorized', '403', 'tenant not found', EOF error, or namespace/access errors.
- Review TeamclineUse when the user asks for a code review by a fleet of specialized reviewer agents, wants multiple independent reviewer perspectives, or asks to run reviewers in single-pass or iterative fix-until-clean mode. Launches focused subagents for correctness, security, architecture, conventions, simplicity, UX, reliability, telemetry, testing, compatibility, and documentation review.
- Twilio Messaging WebhooksTwilioReceive and respond to inbound messages and track outbound delivery status via Twilio webhooks — across SMS, MMS, WhatsApp, and RCS. Covers webhook request parameters, replying with TwiML, validating webhook signatures for security, and handling status callbacks. Use this skill whenever an agent needs to handle incoming messages on any channel or track outbound message delivery in real time.
- Twilio Security API AuthTwilioChoose the right Twilio authentication method and implement it correctly. Covers Auth Token (testing only), API Keys (production standard), OAuth2 client_credentials (time-limited bearer tokens), Access Tokens (client-side SDKs), and test credentials. Use this skill before making any Twilio API calls in production.
- Twilio Security Compliance HipaaTwilioConfigure Twilio accounts for HIPAA compliance. Covers BAA requirements, HIPAA Project designation (self-service and support), eligible services list, per-product requirements (Voice, SMS, ConversationRelay, Conversation Intelligence, Flex, Verify), message redaction, and what is NOT eligible. Use this skill when developers are building healthcare workflows on Twilio.