ddd4j-mybatis
DDD4J MyBatis-Plus persistence-layer convention skill. Covers ActiveRecord mode (Entity must extend BaseEntity→Model<T>), @TableLogic logical deletion, audit field auto-fill (createBy/createTime/updateBy/updateTime), @Param("mod…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-19 00:11
Security & auditing
7,227 results
insecure-deserialization-checker
Validate insecure deserialization checker operations. Auto-activating skill for Security Fundamentals. Triggers on: insecure deserialization checker, insecure…
owasp-security-review
Review code and architectures against the OWASP Top 10:2025 — the ten most critical web application security risks. Use when: (1) reviewing code for security…
localstack-iam
Analyze and enforce IAM policies in LocalStack. Use when users want to enable IAM enforcement, detect permission violations, auto-generate least-privilege…
falcosecurity
Falcosecurity integration. Manage data, records, and automate workflows. Use when the user wants to interact with Falcosecurity data.
frontegg
Frontegg integration. Manage data, records, and automate workflows. Use when the user wants to interact with Frontegg data.
signicat
Signicat integration. Manage data, records, and automate workflows. Use when the user wants to interact with Signicat data.
implementing-iso-27001-information-security-management
Guides implementation of an ISO/IEC 27001:2022 Information Security Management System (ISMS) end to end: gap analysis and scoping, risk assessment methodology,…
implementing-zero-trust-in-cloud
Guides zero trust implementation across AWS, Azure, and GCP per NIST SP 800-207 and BeyondCorp principles, covering identity-centric access,…
performing-gcp-penetration-testing-with-gcpbucketbrute
Performs authorized GCP security testing using GCPBucketBrute to enumerate publicly accessible storage buckets, combined with gcloud CLI IAM enumeration to…
c-drive-cleaner
AI-driven C drive space diagnosis and safe cleanup advisor. Through NTFS actual allocated space measurement, parent-child directory deduplication, application-level growth and post-cleanup regeneration tracking, vendor-managed caches/toolchains, Windows update remnants, infrequently used software, and miscellaneous space inventory, it identifies why space grows and why cleanup is ineffective. When users ask about insufficient C drive space, cleanup not working, available space not increasing, caches regenerating, wanting to check infrequently used software/large files/hidden usage, migrating...
isms-audit-expert
Senior ISMS Audit Expert for internal and external information security management system auditing. Provides ISO 27001 audit expertise, security audit program…
metamask-openclaw-desktop-security-analysis
Analyze and understand the security risks of the Metamask Openclaw desktop executable distribution
security-detections-mcp
Query unified database of 8,200+ Sigma, Splunk, Elastic, KQL, Sublime, and CrowdStrike security detections via MCP with MITRE ATT&CK mapping
security-scan
Resolve npm dependency vulnerabilities detected by security scans.
abuse-fraud-risk-review
Review abuse, fraud, spam, promotion abuse, payment fraud, refund abuse, account takeover risk, marketplace trust, game economy exploits, referral abuse,…
data-deletion-erasure-review
Design and audit data deletion and erasure workflows covering user/account deletion, DSAR/RTBF, retention schedules, backups, logs, analytics, billing records,…
privacy-and-data-retention-review
Review privacy, data retention, deletion, export, consent, telemetry, analytics, backups, account closure, children/minors, store disclosures, and data…
efficiency-rules
Penetration testing efficiency rules. Prevent inefficient behaviors such as blind enumeration and tool blocking, ensuring the maximum number of vulnerabilities are discovered within a limited time. Use when starting a penetration test, when a scanning tool is found to run for too long, when stuck in a blind brute-force loop, or when needing to decide the next attack direction. It is recommended to read before each round of penetration testing
ddd4j-satoken
DDD4J Sa-Token authentication extension skill. Covers the StpKit extension payload pattern (writing user/org/role at login, retrieving with StpUtil.getExtra), SaTempKit one-time tokens, integration with ApiRestResponse exception handling, cross-service Same-Token configuration, @SaCheckPermission in DDD4J…
acuant
Acuant integration. Manage data, records, and automate workflows. Use when the user wants to interact with Acuant data.
recorded-future
Recorded Future integration. Manage data, records, and automate workflows. Use when the user wants to interact with Recorded Future data.
ubiq-security
Ubiq Security integration. Manage data, records, and automate workflows. Use when the user wants to interact with Ubiq Security data.
hunting-for-living-off-the-cloud-techniques
Hunts for adversary abuse of legitimate cloud services (Azure, AWS, GCP, and SaaS platforms) for command-and-control, data staging, and exfiltration, i.e.…