Expert-level parsing and remediation of 'humble' HTTP security header reports. Use this skill whenever the user provides a report generated by 'humble' (https://github.com/rfc-st/humble), mentions analyzing HTTP response headers, security header grades (A-E), or asks for remediation of findings such as missing…
Use for a Codex dependency sweeper triage loop that watches advisories and lockfiles, proposes patch-only updates, rejects major upgrades without approval, and records reproducible verification commands.
Use for a Codex CI Sweeper triage loop that groups CI failures, classifies root causes, caps attempts, and proposes bounded minimal-fix candidates only after budget, denylist, and verifier gates.
Pre-install security advisor. Activate when the user mentions installing a Claude Code plugin, MCP server, or any third-party agent tool. Offer to run an Assay scan against the target before they install.
A read-only security audit for DeepSeek Harness extensions, settings, dependencies, and runtime exposure. It looks for risks such as exposed secrets, unsafe file mounts, data leaving the system, persistence, and malware indicators.
Create a new mcpnuke security check module end-to-end: pattern file, check function, wire into runallchecks, add tests, update changelog. Use when adding a new security check to mcpnuke.
Add new regex detection patterns to mcpnuke's pattern libraries with test coverage. Use when adding new patterns to rules.py or probes.py, or when extending detection for a vulnerability class.
Add new DVMCP challenge test classes to mcpnuke's test suite following the established pattern. Use when adding tests for a new vulnerability type or DVMCP challenge.