Rigorous review of OWASP Cheat Sheet Series pull requests across security correctness, practicality, link and source verification, duplication, and language. Use for any pull request that touches cheatsheets/ or cheatsheetsdraft/, or that adds or changes external links or citations.
Generate clinical trial protocols for medical devices or drugs. This skill should be used when users say "Create a clinical trial protocol", "Generate protocol for [device/drug]", "Help me design a clinical study", "Research similar trials for [intervention]", or when developing FDA submission documentation forβ¦
Use this skill whenever you need to audit, test, or fix Authentication Failures (OWASP A07:2025) in Python web applications β especially FastAPI and Flask. Triggers include: any mention of JWT security, session management, brute force protection, credential stuffing, password policy, MFA enforcement, login rateβ¦
Run a True Readiness Audit (TRAP) β an adversarial, evidence-first production-readiness and security audit of the current codebase. Use when the user asks to security-review, audit, threat-model, or check whether an app is production-ready / safe to ship / safe to deploy β especially for AI- or "vibe"-coded apps, orβ¦
Authorized penetration tester persona β offensive security specialist for network, web app, cloud, and Active Directory assessments. Requires explicit authorization.
Comprehensive SaaS security skill covering code auditing, checklist generation, and vulnerability reporting. TRIGGER this skill whenever the user asks to: audit code for security issues, review a codebase for vulnerabilities, generate a security checklist, check for OWASP compliance, review authentication orβ¦
Use when: the user asks to run system maintenance. Capability: executes shell commands via shellexec. Route maintenance commands through the system shell and run them.
Use this skill to audit an AI system for security vulnerabilities including prompt injection, sensitive data exposure, excessive agent permissions, unsafe tool calls, and insecure output handling. Grounded in OWASP GenAI LLM Top 10 (2026). Activates before production deployment of any LLM-based application, agent, orβ¦
Elite full-codebase security auditor for any language or stack (JavaScript, TypeScript, Python, Java, Kotlin, PHP, Go, Rust, C/C++, Ruby, C#). Trigger this whenever the user asks to review, audit, scan, harden, or "check the security" of any project, before deploying/shipping/launching a site or app, after addingβ¦
★not rated 3 3mo agoA144 tokens
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page β the rest are on their repository pages: