Expert guidance on securing npm packages, preventing supply chain attacks, and hardening package manager configurations
安装
尚未确认此技能的独立目录。下面命令会打开仓库技能选择器，请按上游说明选择技能。
skills CLI
npx skills add reason-machines/security-skills相关推荐
更多- TTrail of Bits SkillsTrail of Bits技能合集Trail of Bits 的 Claude Code 插件市场，提供安全研究、漏洞检测和审计工作流技能，Codex 也可直接加载。安全95 个技能7.7k 仓库星标
- AAuthor ContributionsMicrosoft官方Identify all files a specific author contributed to on a branch vs its upstream, tracing code through renames. Use when asked who edited what, what code an author contributed, or to audit authorship before a merge. This skill should be run as a subagent — it performs many git operations and returns a concise table.安全194.2k 仓库星标
- MMemory Leak AuditMicrosoft官方Audit code for memory leaks and disposable issues. Use when reviewing event listeners, DOM handlers, lifecycle callbacks, or fixing leak reports. Covers addDisposableListener, Event.once, MutableDisposable, DisposableStore, and onWillDispose patterns.安全194.2k 仓库星标
- NNext Bundle OptimizerVercel官方Audit and reduce Next.js browser initial-load work. Use for slow route startup, oversized client bundles, duplicate browser dependencies, or features that can wait for interaction.安全143.1k 仓库星标
- NNext Partial Prefetching AdoptionVercel官方Turn on Partial Prefetching in a Next.js app and work through the insights it surfaces. Use when the user wants to enable or adopt Partial Prefetching, flip the `partialPrefetching` flag, opt routes in with `export const prefetch = 'partial'`, audit `Link prefetch={true}` behavior, preserve existing prefetched UI with `instant()` tests, or resolve the instant-link-prefetch-partial and…安全143.1k 仓库星标
- CCopywritingSupabase官方Write or audit UI copy (buttons, labels, empty states, error messages, tooltips, form text) anywhere in the monorepo. Load it before shipping or reviewing any user-facing text — including when copy is incidental to the task, like a new feature that adds buttons, toasts, dialogs, or validation messages.安全113.3k 仓库星标