Security
4,732 results
- Evidence Calibration ReviewParth SanganiUse when you want a per-claim evidence-tier audit on a text artifact before it ships — assign T1-T6 tiers to every load-bearing claim, surface calibration mismatches (high confidence on weak evidence, or honesty-theater under-claiming), and flag P11 (citation-as-decoration), P17 (pile-of-anecdotes-as-evidence), P54 (unverifiable single-source) patterns.
- Find Skillsagentspace-soDiscover, vet, and install agent skills by searching ACROSS every major registry at once — skills.sh, clawhub.ai, and GitHub — presenting each board on its own native metric (installs / stars) with the top entry per board, security-scanning the top candidates' real SKILL.md for risky patterns, and flagging what's already installed.
- Friction AnalysisEngineering at FullstoryFinds where users struggle on a page or flow and whether a suspected problem is real. Ranks Fullstory's frustration and error signals, separates real problems from buttons people are meant to click many times, measures how many users each problem affects, and uses session replays to show what happened.
- Infra Engineersamhvw8Comprehensive infrastructure engineering covering DevOps, cloud platforms, FinOps, and DevSecOps. Platforms: AWS (EC2, Lambda, S3, ECS, EKS, RDS, CloudFormation), Azure basics, Cloudflare (Workers, R2, D1, Pages), GCP (GKE, Cloud Run, Cloud Storage), Docker, Kubernetes.
- Internship PracticeEtherealMingo高校教师实习实训与实践教学全流程辅助：从联系实习基地、核查基地资质、签校企合作协议，到设计实习方案、排实习安排表、做安全教育与应急预案、写现场指导记录、评实习成绩与鉴定、最后归档全套实践教学材料。当教师说「帮我联系实习基地」「排一下这学期的实习安排表」「今天去企业看了学生，指导记录怎么写」「实习安全承诺书和应急预案怎么弄」「学生实习报告和鉴定表怎么评」「实习材料要归档哪些」时使用。Triggers: 联系实习基地、实习基地资质怎么查、校企合作协议怎么写、排实习安排表、实习方案设计、实习大纲与指导书、实习安全承诺书、实习应急预案、实习指导记录、实习周报批阅、实习成绩怎么评、实习鉴定表盖章、实习总结报告怎么写、实习材料要归档什么、认识实习、生产实习、毕业实习、顶岗实习。
- Learning PathsEtherealMingo学习路径与进度追踪模型的命令层参考：收录 Tov-learn 智能导师系统 /learn 技能的 15 个功能模块文档，涵盖初始化设置、智能续学入口、教学循环、测验与间隔重复、进度存档与知识图谱、HTML 状态仪表盘、结业项目跟踪、项目架构访谈、幻灯片逐字朗读模式、部署选型向导、上线安全检查、学习数据导入导出，以及 CLI 优先的共享原则。当需要设计、理解或仿写一个「按课节推进、随堂提问、测验打分、间隔复习、进度落盘」的学习路径系统，或参考其命令分层、模块自治、每学习者数据隔离的写法时使用。Triggers: 帮我设计一个带进度追踪的学习路径系统；怎么给课程做间隔重复和复习提醒；我想参考一个 AI 导师技能的模块划分方式；学习进度和测验成绩数据应该怎么存；帮我做一个学习进度仪表盘。
- Postgres RlstroykellyMANDATORY when touching auth tables, tenant isolation, RLS policies, or multi-tenant database code - enforces Row Level Security best practices and catches common bypass vulnerabilities
- Risk Management Specialistmoag1000Expert IT Risk Manager with deep knowledge of ISO 27005 (IT risk management), ISO 31000 (enterprise risk management), and ISO 27001 integration. Specializes in optimizing workflows through the Data Reuse principle - leveraging existing Assets, Incidents, Controls, and Business Processes to streamline risk assessments.
- Study SkillEtherealMingo交互式学习导师：基于 FSRS 间隔重复、研究助手与可安全重启的学习工作区。当用户想学习新事物时使用：教教我、我想学习、帮我学、学习 X、创建某主题的课程、某主题的教程、带我入门。也适用于 study init、study start、study status、study review、study break 等命令，以及书籍目录的构建与检索。兼容 Claude Code、Codex、Hermes、Cline、OpenCode 及其他 Agent Skills 兼容客户端，适用于编程、数学、物理、科学、工程等结构化学习场景。Triggers: 教我学 Go 并发；帮我制定一个量子力学的学习计划；我想系统学习 Rust，带练习那种；陪我刷题复习之前学过的内容；帮我用这本 PDF 教材学习操作系统。
- Voice Identity ReviewParth SanganiUse when you want a line-level voice and identity audit on a text artifact before it ships — surface specific voice-rule violations (banned patterns, hype words, register mismatches), apply the CXO test, and check identity coherence with the operator's voice corpus and persona DNA. Encodes the Voice & Identity deliberator role from the agent-council 5-perspective quality gate.
- Ai Sast RemediationEndor LabsTriages Endor AI SAST findings using exploit-reproduction evidence, data-flow context, and remediation guidance to distinguish actionable vulnerabilities from noise. It can prepare targeted code fixes and, after explicit approval, edit files and open change requests.
- Asvs RequirementsZateOWASP ASVS 5.0 requirements database for security audits. Provides chapter structure, control objectives, and verification requirements for all 17 ASVS domains.
- Broker Configurationsvanman2024Message broker setup patterns (Redis, RabbitMQ, SQS) for Celery including connection strings, SSL configuration, high availability, and production best practices. Use when configuring message brokers, setting up Redis/RabbitMQ/SQS, troubleshooting broker connections, implementing HA/failover, securing broker communications with SSL, or when user mentions broker setup, connection issues…
- Chainaware Behavioral PredictionChainAware.aiUse this skill whenever a user asks about wallet safety, fraud risk, rug pull detection, wallet behavior analysis, DeFi personalization, on-chain reputation scoring, AML checks, token ranking by holder quality, airdrop screening, lending risk, token launch auditing, or AI agent trust scoring.
- Cicd PostureEndor LabsAssesses CI/CD and software supply-chain security across an Endor namespace, GitHub organization, selected repositories, or the current repository. It combines existing Endor SCPM, CI/CD, GitHub Actions, and supply-chain findings with read-only repository configuration evidence and optional local CI inspection to produce deterministic scores, critical overrides, prioritized improvements, and…
- Dependency ReviewerEndor LabsEvaluates an exact package version, summarizes package risk, or reviews dependencies declared by a repository through one focused workflow. It uses available vulnerability, malware, package-health, license, policy, and Endor evidence to provide a read-only recommendation and clearly identify missing information.
- endorlabs/ai-pluginsEndor LabsCollectionEndor Labs Agent Kit plugins for Claude Code, Codex, Gemini CLI, Antigravity CLI, Cursor, and Cursor SDK: packaged AppSec workflows for SCA remediation, AI SAST triage, CI/CD posture, malware response, findings review, Endor Labs setup, and more.
- Enhanced Message ContextlinguiAdd translator comments to Lingui messages so translations are accurate. Use when adding or modifying translatable messages, when strings are short or ambiguous ("Back", "Delete", "Post"), when placeholders are unclear ({count}, {name}), when deciding between comment and context, or when auditing extracted .po catalogs for missing translator context.
- Frontend CraftvecnodeUse when the user wants to design, redesign, shape, critique, audit, polish, simplify, harden, animate, or otherwise improve a frontend interface: websites, landing pages, dashboards, product UI, components, forms, settings, onboarding, empty states, and native iOS or Android screens.
- Human Intent Auditstudio-yebisuEnforce traceability from natural-language intent to machine predicates, final observables, evidence, and owner-readable acceptance. Use when conducting any audit, review, QA pass, parity or compliance check, security assessment, code or architecture review, visual or behavioral comparison, data validation, system verification, completion gate, or claim that an implementation satisfies a human…
- Malware ResponderEndor LabsCorrelates current software supply-chain malware intelligence for affected packages and versions with Endor inventory across a namespace and its child namespaces. It distinguishes confirmed exposure, possible exposure, not-observed exposure, and insufficient data using exact package, version, and inventory evidence.
- Python BackendjiatasticPython backend development expertise for FastAPI, security patterns, database operations, Upstash integrations, and code quality. Use when: (1) Building REST APIs with FastAPI, (2) Implementing JWT/OAuth2 authentication, (3) Setting up SQLAlchemy/async databases, (4) Integrating Redis/Upstash caching, (5) Refactoring AI-generated Python code (deslopification), (6) Designing API patterns, or (7)…
- Remediation InjectionZateSecurity fix patterns for injection vulnerabilities (SQL, Command, XSS). Provides language-specific code examples showing vulnerable and secure implementations.
- Sca RemediationEndor LabsPlans and applies dependency-vulnerability fixes using Endor SCA findings, VersionUpgrade and Upgrade Impact Analysis evidence, deterministic risk decisions, and local validation. It separates low-risk changes from upgrades requiring deeper compatibility review and requires explicit approval before editing files, pushing branches, opening change requests, or creating tickets.