understanding-tauri-lifecycle-security
Assists developers with understanding Tauri application lifecycle security threats spanning development, build, distribution, and runtime phases, including…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-25 00:14
Security & auditing
7,428 results
understanding-tauri-runtime-authority
Explains how the Tauri runtime authority enforces security policies during application execution, covering ACL-based access control, capability resolution at…
senior-security
Use when the user asks for STRIDE threat modeling, DREAD risk scoring, data-flow-diagram threat analysis, or a quick secret scan — or when a security request…
security-audit
Comprehensive security review to identify and fix vulnerabilities in codebase. Use when the user types /security-audit.
security-review
Perform comprehensive security review of current code and provide specific remediation steps with code examples for each security issue identified. Use when…
avatar-naval-ravikant-thinking
Clarify career, entrepreneurship, wealth, happiness, freedom, and life choices using a Naval Ravikant-style framework of redefinition, desire audit, specific knowledge, and leverage. Use it to identify the wrong question, conflicting desires, unique competitive edge, AI replacement risk, permission dependence, marginal cost, and long-term compounding direction.
gpsr-sicherheitspruefung
Catalogue of obligations for manufacturers, importers, fulfilment service providers and online marketplaces under the GPSR (Regulation (EU) 2023/988, applicable from 13 December 2024) with…
ki-risikoassessment
Structured AI risk assessment per AI system – identification, risk classification (AI Act trigger + internal risk score), damage analysis (CIA,…
softwarelizenz-agb
Review of software licence and usage terms and conditions: Granting of rights of use (Section 31 UrhG), acts requiring consent and the exhaustion principle in…
ubuntu-server-audit-eu
Use when performing strict read-only SSH inspections of Ubuntu/Linux servers for security review, EU cybersecurity compliance evidence, server readiness,…
ghidra-headless-frida-evidence
Phase skill for import-only Frida dynamic evidence normalization, replay expectations, and audit of generated planning artifacts.
ghidra-headless-frida-runtime-injection
Phase skill for reproducible CLI/headless Frida runtime capture, reusable common script selection, and capture-manifest handoff into evidence import.
security-review
Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features.…
age-encryption
age — modern file encryption format and tool by Filippo Valsorda. Replaces GPG for most use cases (encrypted backups, exports, secrets in CI). Covers age…
ai-code-security
Security review of AI-generated code, and secure practices for working with coding assistants. USE WHEN: reviewing AI-generated code (GitHub Copilot, ChatGPT,…
bitcoin-privacy-tor
Bitcoin over Tor: Tor v3 hidden services, onion-only nodes, bitcoind torcontrol integration, Lightning over Tor. USE WHEN: hardening node privacy, configuring…
bitcoin-psbt
Partially Signed Bitcoin Transaction format: BIP174 (v0), BIP370 (v2), BIP371 (Taproot fields). Roles (Creator, Updater, Signer, Combiner, Finalizer,…
bitcoin-taproot
Taproot soft fork: BIP340 (Schnorr signatures), BIP341 (key tweak + script-path), BIP342 (Tapscript). x-only pubkeys, key-path vs script-path spending, control…
libsodium
libsodium — modern, easy-to-use, audited crypto library. Provides authenticated encryption (XSalsa20-Poly1305, XChaCha20-Poly1305, AES-GCM),…
php-security
PHP application security: vulnerability review and secure implementation patterns. USE WHEN: securing PHP applications, reviewing code for vulnerabilities, or…
security-architecture
System-level security architecture: threat modeling, secure-by-design, defense-in-depth, zero-trust, trust boundaries, TEE/confidential computing, and secure…
password-manager
Access 1Password secrets and inject environment variables via the op CLI. Use when user needs to retrieve credentials, inject secrets into commands, or look up…
security-audit
Perform focused security reviews on code, diffs, hooks, and MCP servers. Look for auth issues, injection, secret leakage, unsafe tool/MCP usage, and hook…
vulnerability-validation
Validate security findings for exploitability, reachability, and real-world impact using Bug Hunter-native findings artifacts. Use after security scans, before…