auditing skills

warpdotdev/oz-skills

Skill Claude CodeCodex

Audit web applications for WCAG accessibility compliance. Use when asked to run accessibility checks, identify common violations, and provide remediation guidance.

GRCEngClub/claude-grc-engineering

Skill Claude CodeCodex

Guide a research project through the full academic lifecycle — from raw idea to concrete research question, literature grounding, methodology, writing, feedback, and publication. Use this skill whenever the user shares a research idea, asks to "flesh out" a topic, wants sources or a literature review, asks about…

GRCEngClub/claude-grc-engineering

Skill Claude CodeCodex

Expertise in evaluating AWS accounts for compliance — what checks are meaningful, which SCF controls they map to, and how to interpret aws CLI output.

GRCEngClub/claude-grc-engineering

Skill Claude CodeCodex

Swiss Federal Act on Data Protection (nFADP) expert. Deep knowledge of the revised 2023 Swiss FADP including voluntary DSO, risk-based breach notification, individual criminal enforcement, Swiss transfer mechanisms, and key divergences from GDPR.

Frankcastleauditor/safe-solana-builder

Skill Claude CodeCodex

Use this skill whenever the user wants to write, scaffold, or build a Solana smart contract or program from scratch. Triggers on: "write a Solana program", "create a smart contract", "build an anchor program", "write a native Rust Solana program", "scaffold a Solana program", "help me write a program that does X on…

MrPunyapal/laravel-auditor

Skill Claude CodeCodex

Run a read-only, orchestrated audit of a Laravel codebase for data structures, state representation, algorithms, and ownership. Use when asked for a DSA audit, subsystem inventory, or Aaron-style bounded agent audit.

MrPunyapal/laravel-auditor

Skill Claude CodeCodex

Audit a Laravel application's performance deeply and safely: unnecessary queries, N+1, collection vs database work, memory amplification, repeated computation, I/O, queues, and rendering cost — verifying that every proposed optimization preserves behavior before reporting it. Use when auditing performance or…

MrPunyapal/laravel-auditor

Skill Claude CodeCodex

Perform a deep, structured, evidence-based audit of a Laravel application and produce actionable findings backed by concrete project evidence. Use when asked to audit, review, assess, or evaluate an existing Laravel codebase.

playbookTV/Ironclad

Skill Claude CodeCodex

Evidence-driven application audit protocol for security, authorization, privacy, concurrency, state integrity, reliability, performance, accessibility, visual consistency, responsive behavior, and release readiness. Use for incremental checks, pre-merge review, pre-launch audits, high-stakes deep audits, AI-generated…

playbookTV/Ironclad

Skill Claude CodeCodex

Map and attack the authentication, authorization, session, tenant, federation, and machine-identity boundaries of a system, proving whether access controls actually hold rather than whether they appear to. Use whenever work touches login, sessions, tokens, roles, permissions, multi-tenancy, password reset…

playbookTV/Ironclad

Skill Claude CodeCodex

Reproduce, isolate, and diagnose a specific software failure before changing production behaviour, then propose the smallest safe fix with regression protection. Use whenever the user reports a bug, crash, error, stack trace, flaky test, incorrect output, "works on my machine," intermittent failure, regression after a…

mishoko/solidity-auditor-pulse

Skill Claude CodeCodex

Use when auditing Solidity contracts for security vulnerabilities. Trigger on "audit", "check this contract", "review for security", or "/contract-auditor".

mishoko/solidity-auditor-pulse

Skill Claude CodeCodex

Security audit of Solidity code while you develop. Trigger on "audit", "check this contract", "review for security". Modes - default (full repo) or a specific filename.

Ctrl1CandV/Atlas

Skill Claude CodeCodex

Operate Atlas when orchestration adds value. Use its eight MCP tools to validate, save, preview, run (sync or async), list runs, inspect, cooperatively cancel, and safely resume interrupted workflows. Always validate and dry-run before a billable run.