kb-severity-mapping
Reference data, not a reviewer. Canonical severity level definitions and cross-domain mapping for web, document, and markdown audits. Score impact ranges, WCAG…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-22 00:14
Security & auditing
7,295 results
whatsapp-cli
Use when the user wants to authenticate, sync, read, search, or send WhatsApp messages through the local whatsapp-cli user-account client. Also covers…
docyrus-acl-design
Design, configure, and validate a Docyrus tenant ACL (Access Control Layer) end-to-end using the `docyrus acl` CLI commands. Use when the user wants to define…
healthcheck
Host security hardening and risk-tolerance configuration for Otto deployments. Use when a user asks for security audits, firewall/SSH/update hardening, risk…
epic-security
Guide on security practices including CSP, rate limiting, and session security for Epic Stack
security-review
Security code review for vulnerabilities. Use when asked to "security review", "find vulnerabilities", "check for security issues", "audit security", "OWASP…
threat-hunting
Use when hunting threats or engineering detections — ATT&CK Detection-Strategies, Sigma + correlation with Detection-as-Code CI, Windows endpoint hunting…
vulnerability-analysis
Use when auditing source code for vulnerabilities — drive CodeQL/Semgrep/Joern to taint untrusted data source-to-sink across injection, memory safety,…
code-analyze
Perform static analysis, security scan, and dependency check in .NET code. Use it for tasks that involve code quality, security auditing, or vulnerability detection.
authentication-pattern
Security pattern for implementing authentication in software systems. Use when designing or reviewing authentication mechanisms, implementing login systems,…
full-stack-audit
Comprehensive website and web app audit covering security, UX, performance, accessibility, SEO, compliance, and revenue protection. Use this skill whenever the…
customerio-security-basics
Apply Customer.io security best practices. Use when implementing secure credential storage, PII handling, webhook signature verification, or GDPR/CCPA…
guidewire-enterprise-rbac
Implement Guidewire RBAC: API roles, user permissions, and security policies. Trigger: "guidewire enterprise rbac", "enterprise-rbac".
code-audit-readonly
Use when the user asks for a full read-only repository audit, security/performance/architecture review, file-by-file analysis, or technical debt map where…
mobile-security
Use when auditing an Android or iOS application for security issues, reviewing React Native or Flutter code, checking mobile authentication or insecure data…
cache-architecture
Cache storage locations, permissions, context scoping, isolation rules, and lifecycle management in quota-axi.
book-security-privacy-checker
Use to scan academic book source material, manuscripts, files, metadata, or app/frontend code for credentials, API keys, tokens, private student/respondent…
review-deps
Audit project dependencies for vulnerabilities, license compliance risks, and staleness by running native audit tools (npm audit, pip-audit, cargo audit,…
moai-platform-firebase-auth
Firebase Authentication specialist covering Google ecosystem, social auth, phone auth, and mobile-first patterns. Use when building Firebase-backed or Google…
operating-sliver-c2
Stand up a Sliver C2 server and mTLS listeners, generate cross-platform implants and beacons, and run post-exploitation, pivoting, and BOF/.NET tooling via the…
account-abstraction
Comprehensive expertise in ERC-4337 account abstraction, smart contract wallets, paymasters, bundlers, and user operation handling. Covers social recovery,…
mcp-security
Security patterns for MCP servers including OAuth 2.0, rate limiting, input validation, and audit loggingUse when "mcp security, mcp authentication, mcp oauth,…
security
One breach = game over. Threat modeling, OWASP Top 10, secure coding, security architecture, zero trust. The complete security skill for protecting your…
sensitive-logging-audit
Audit or fix sensitive-data exposure in Python SDK diagnostics, exceptions, logging, and telemetry.