Security
4,732 results
- Secure ReviewemgiezetSecurity review subagent: reads session findings and the AP-* catalogue, produces a structured security assessment. Cannot write or edit files — a reviewer that can edit is not a reviewer. Invoke with /secure-review.
- Security FundamentalsJulia MuiruriQuiz on application security concepts grounded in the student's codebase. Use when: student selects Security Fundamentals from brainmax, wants to test security knowledge, auth patterns, input validation, OWASP understanding.
- Security ReviewemgiezetThe lens a reviewer applies to a diff to find security findings — trust boundaries, the ten review lenses, what counts as a finding and what does not. Use when reviewing a PR that touches authentication, authorization, session handling, secrets, input validation, or external requests.
- Seo Geo Audittechsaurabh-394Audit a web page or site for technical SEO and GEO (generative engine optimization, i.e. being cited by AI answer engines). Use when the user asks for an SEO audit, ranking fixes, schema markup review, Core Web Vitals triage, or how to get cited by ChatGPT, Perplexity, Gemini or Claude.
- Seo Offpage ChecklistraulveneriQuality gate for off-page analysis (link profile, authority, brand mentions, and NAP). ANALYSIS and report only. Requires an authorized backlink export or a declared Moz/DataForSEO binding. Use when asked to audit backlinks, authority, or local brand consistency.
- SkilldrkostasUse when an assistant has to act on a person's Mac or reach that person on an Android phone, through the claude-human package and @drkostas/expo-ntfy. Covers building and signing the sckshot and vhid_type helpers, the macOS grants each needs and what resets them, capturing the screen or one window, typing a password at the lock screen or into a SecurityAgent password panel with the person's…
- Skill Collision AuditehnruizFind skills whose descriptions fight over the same request, so Claude picks one at random or the wrong one, and fix the descriptions. Use when the user asks to audit, clean up or deduplicate their skills, when a skill fires that should not have, after installing a plugin, or before adding a new skill to a large library.
- SpecializedpluginagentmarketplaceLinux specialized topics - kernel, security hardening, performance
- Subproject DiscoveryStepenkoAnatoliEvidence-based research of an existing project to find and rank the three subprojects that would most reduce its manual work, fragility, or repeated effort. Use this whenever the user asks what to build next for a project, which subprojects, tools, or automation would help it, where its bottlenecks or manual steps are, or to audit a repository and recommend improvements — whether they provide a…
- Syncfusion React CommonsyncfusionCommon utilities and features for Syncfusion React components. Use this skill when the user needs to implement animations, drag-and-drop, state persistence, RTL support, localization, globalization, security, templates, and advanced features for Syncfusion React components.
- Syncfusion React Speech To TextsyncfusionImplement the Syncfusion React SpeechToText component. Use this skill to convert speech to text, manage microphone input, control listening states, process speech events, customize UI, support accessible voice-enabled forms, and handle globalization and security in React applications.
- System AuditgasseraneRun a quality, sanity and efficiency audit of Ane's MEL/SRHR system (Ann/Vi/Li/Researcher team, wiki, harness, three-repo architecture): surfaces drift, inconsistencies, hygiene issues and architectural ceilings, categorised by severity, as a Tier 1 working brief with sequencing. Does NOT auto-execute fixes.
- Team RefactorplasmindsUse when code needs refactoring or cleanup, or its structure judged — god functions, tangled responsibilities, duplication, over-engineering, legacy code without tests, or code that resists the next change. Also when the user invokes Uncle Bob, Fowler, Beck, Feathers, Ousterhout, SOLID, KISS, YAGNI or clean code on existing code. Not for bugs, security or whether a change can merge: team-review.
- Team ReviewplasmindsUse when a change needs reviewing before it merges — a merge or pull request, a branch (yours or a colleague's), or an audit of a path or module for bugs, security holes, swallowed errors, missing tests, slow paths or a gap with what was asked. Also when the user asks for a code review, a security review, or whether a branch is ready to merge. Not for restructuring code that works: team-refactor.
- Tech Employer BrandingsamberDesigns an employer-brand strategy for attracting software engineers - the engineering EVP, the channel plan (engineering blog, OSS presence, referrals, conference talks, compensation-transparency artifacts), a verification-surface audit (employer-review sites, compensation databases, anonymous forums), and the measurement baseline.
- Token Burnerwu529778790Use when autonomously burning tokens on productive project improvements — code review, tests, docs, dependency audit, refactoring. Each task isolated in a git worktree with verification before merge.
- Traceknotjin-dohApply Traceknot's ISTQB-aligned, evidence-bound QA process to repository changes across OMP, Codex, GajaeCode, Claude Code, and OpenCode, including session-scoped QA Board publication. Use for implementation verification, bug fixes, release checks, repository audits, defect confirmation, and residual-risk decisions without treating an agent's own completion claim as proof.
- Upgrade ShippoShippoGuide for Shippo API version changes, webhook payload versioning, and how the hosted MCP server handles updates. Use when reasoning about backward compatibility, handling new fields in webhook payloads or API responses, troubleshooting OAuth/version-mismatch errors against the hosted MCP, or auditing an existing Shippo integration before a change.
- Ux CopyLeahyCCUse when writing or reviewing UI text — buttons, error messages, empty states, onboarding, confirmation dialogs, notifications, tooltips, labels, and any user-facing copy in React/Next.js components. Covers voice and tone calibration, microcopy patterns, copy auditing, and refactoring existing copy for consistency and clarity.
- Validate Implementation Planb-mendozaAudits an implementation plan for requirements traceability, avoidable complexity, risky assumptions, and evidence gaps. Use when reviewing an AI-generated or human-authored plan, design proposal, implementation outline, task breakdown, or architecture plan and the user wants a standalone audit report without overwriting the source plan.
- Version Migration GuidesamberWrites or audits the migration guide for a breaking change - what breaks, ordered by blast radius, with a detection signal and before/after code per entry, a deprecation timeline, the codemod's coverage boundary, and verification by a cold upgrade of a real project.
- Wcag AccessibilityLeahyCCWCAG 2.2 Level AA for web UI. Use when the task is accessibility, contrast, ARIA, keyboard access, focus, screen readers, alt text, or an accessibility audit. Do not use for styling, performance, or copy that is not an accessibility fix.
- Adrtornikebolokadze1-cyberRecord an architectural decision as docs/adr/ADR-NNNN-slug.md with status proposed — context, options considered, decision, consequences, and how we will confirm it. Use whenever a choice is hard to reverse or shapes several parts of the system (stack, data, hosting, model, channel, security, process), and to replace an accepted decision (supersedes).
- Ai Citation VerificationalivirgoVerify AI citations across structural schema, resolvability (registry/URL/DOI), and semantic support of each claim by the cited span—not the whole context. Use for RAG answers, research agents, and regulated audit trails.