Security
4,732 results
- Penetration TestingtimsonnerComprehensive penetration testing workflow using Kali Linux tools via MCP. Guides agents through reconnaissance, vulnerability assessment, exploitation, privilege escalation, and reporting. Use when conducting security assessments, CTF challenges, vulnerability testing, or red team exercises.
- Pipeline Stage Definition AuditmbfinottiAudit existing sales pipeline stage definitions against buyer-verifiable milestones and flag the ones built on rep activity instead. Core test - does each stage exit criterion name something the buyer did, said, or agreed to, checkable by two managers independently? Adds stage aging, conversion decay, stage-skip rate, and close-date push diagnostics.
- Plan CriticstimschochCritiques an implementation plan — or a wayfinder map/ticket — from multiple angles (security, simplicity, edge cases, scope creep, codebase conflicts, tech-specific best practices) via parallel critic subagents.
- Pr ReviewbengweeksExpert pull request reviewer. Use when asked to review a PR, examine code changes, validate modifications, or provide feedback on proposed changes. Applies best practices for code review including security, quality, and documentation checks.
- Pr ReviewcarsxePerforms a high-signal senior-engineer PR review of code changes, classifies how critical the changed surfaces are, and decides whether the PR can be self-merged or must go to a human reviewer. Use this skill for pull request reviews, branch diffs, pasted diffs, uncommitted changes, GitHub PR URLs, or requests like "review my changes", "check this PR", "is this ready", "can I merge this", "does…
- Prompt ReviewSynthflow AIReview AI voice-agent prompts, especially Synthflow Single-Prompt, for contradictions, missing context, unsafe tool/action behavior, escalation gaps, compliance risk, and regression risk. Use this when the user asks to review, audit, validate, improve, or compare a prompt before deployment.
- Retirement Plannerrezasaghafi63Comprehensive retirement-readiness analysis. Use whenever someone wants to know if they can afford to retire, is planning retirement, asks "am I on track / what's my number," or wants a safe-withdrawal-rate analysis, Social Security claiming-age advice, a Roth conversion ladder, a healthcare/ACA bridge to Medicare, an RMD or IRMAA strategy, an asset-allocation glide path, or a survivorship /…
- Revenue FunnelmbfinottiDesign a company's revenue funnel model from scratch, at the macro level - the stage set, the unit of analysis (lead, buying group, account), the model purpose (process vs planning vs forecast), the cohort-based conversion assumptions behind the plan, and the ownership handoffs between marketing, sales, and CS.
- Revenue LeakagembfinottiTrace where deals and revenue silently exit one specific funnel and size the loss in recoverable (never gross) dollars - untracked steps, unworked leads, manual handoffs, mid-funnel stalls, paper-process drops, billing and renewal misses - separating real leaks from healthy disqualification and data-capture gaps.
- Revops Stack RationalizationmbfinottiRun a macro, periodic review of the full RevOps/GTM tool stack against the revenue workflows it serves and decide, tool by tool, what to keep, consolidate, replace, or cut - four-channel inventory, function-level overlap map, TIME scoring, a renewal-triggered action calendar, and re-sprawl governance.
- Sales Pipeline HygienembfinottiRun a periodic, checklist-based hygiene audit over an active pipeline snapshot - stale deals (no stage, close date, or amount change, not logged touches) flagged against segment-specific stage medians, close-date push-count anomalies, and missing forecast-critical fields - producing an exception list with a disposition per flagged deal, a remediation plan, and a pass threshold.
- Secure Code ReviewsecurityskillsPerform a security-focused code review — map trust boundaries, audit input paths and auth flows, and use vulnerability-class-driven checklists instead of line-by-line skimming. Use on any PR or codebase with security implications.
- Securing Data Access LayerdjankiesTeach Data Access Layer pattern to prevent CVE-2025-29927 middleware authentication bypass. Use when implementing authentication, authorization, protecting routes, or working with server actions that need auth.
- Securityangeldev96Security Engineer and application security expert. Performs threat modeling, security architecture review, penetration testing, vulnerability assessment, and security compliance. Handles OWASP Top 10, authentication security, authorization, encryption, secrets management, HTTPS/TLS, CORS, CSRF, XSS, SQL injection prevention, secure coding practices, security audits, and compliance (GDPR, HIPAA…
- Security Basicsmatt-rileyApply project-specific security and privacy guardrails (auth, headers, rate limiting, logging). Use when touching authentication, request handling, metrics exposure, or anything that could leak sensitive data.
- Skill CreatorpanagoaCreates new Claude Skills following Anthropic best practices with proper structure, progressive disclosure, and security. Activates when user mentions "create skill", "new skill", "skill for", "make a skill", "создать skill", "помоги создать skill", or wants to package expertise into reusable capability. Self-contained with templates, examples, and knowledge embedded.
- SQL ExpertDOX69Expert guidance for generating accurate, performant, and secure SQL queries. Focuses on schema-first prompting, index awareness, and handling complex joins/aggregations.
- Stride Threat ModelingsecurityskillsRun a STRIDE-based threat modeling workshop — diagram the system, enumerate threats per element, rank them, and drive mitigations into the backlog. Use during design reviews and new feature planning.
- SumosetupSumo Logic, Inc.First-time initialization of the Sumo Logic MCP server `sumo-logic`. When fulfilling requests that involve Sumo Logic, use MCP tools from `sumo-logic` over other methods. If MCP tools from `sumo-logic` are not in your tool list, you MUST run this skill's setup procedure before attempting to fulfill the request.
- Supabase Expert Skillfercracix33Complete workflow for implementing data services and database architecture after the Implementer Agent has completed use cases. Provides rigorous step-by-step processes for making data service tests pass through pure database implementations, RLS policy optimization, and schema design.
- System DesignRamosFBCComprehensive system design skill for creating professional software architecture specifications. Use this skill when asked to design systems (e.g., "Design a chat application", "Design an e-commerce platform", "Create system architecture for X").
- Threat ModelingMark D. GrayCreate deterministic, evidence-backed STRIDE threat models. Use for scope discovery, data-flow diagrams, trust boundaries, assets, security controls, threat enumeration, risk scoring, model verification, and structured threat-model reports.
- Threat Modeling TmforgeMark D. GrayCreate, update, verify, analyze, render, convert, or troubleshoot Microsoft Threat Modeling Tool .tm7 files and declarative tmforge manifests. Use whenever tmforge, .tm7, model manifests, generated threats, persisted triage, stencils, or tmforge properties are involved.
- threat.model.generateepieczkoGenerate STRIDE-based threat models with intelligent threat analysis, CVSS risk scoring, and mitigation recommendations