Executa protocolos completos de auditoria e hardening de segurança para qualquer ambiente de TI. Use esta skill SEMPRE que o usuário mencionar: auditoria de segurança, hardening, pentest, vulnerabilidades, CVE, firewall, SSL/TLS, OWASP, segurança de servidor, VPS, domínio, API, Docker, banco de dados, CI/CD, segurança…
Security scanner for Claude skills. Runs seven checks against a skill to detect known threat patterns including exfiltration, behavioral manipulation, obfuscation, remote code execution, filesystem overreach, credential harvesting, and dependency risk. Use whenever the user wants to check, audit, verify, review, or…
Reference implementation showing how to add agent sign-in/sign-up to any software tool. Demonstrates dual authentication (human + agent), SKILL.md creation, and ClawHub publishing.
Configure CORS correctly and safely — allowlist real origins, handle preflight, scope credentials and headers narrowly, and never reflect arbitrary origins.
Audit professionnel complet d'un projet logiciel couvrant architecture, code mort, dette technique, dépendances, API, authentification, autorisation, sécurité applicative, CI/CD, performance, production et validation finale.
Secure coding practices and vulnerability prevention. Audits dependencies for vulnerabilities, enforces secure coding patterns, protects API routes, and prevents OWASP Top 10 vulnerabilities. Use when building applications, reviewing code for security issues, adding API protection, or ensuring production-ready…
A converter for CNNVD XML files, where CNNVD is China’s national database of information-security vulnerabilities. It changes newer XML files into the older format by renaming tags and normalising their structure.
Use when designing, implementing, reviewing, refactoring, or maintaining software in any programming language where security is a requirement. Apply secure-by-design principles, identify vulnerabilities, and recommend industry best practices throughout the software development lifecycle.
Deterministic simulation testing for containerized services. Write Lua scripts to inject chaos (pause, kill, resource deprivation) into Docker containers with reproducible, seeded fault injection. Use when writing chaos experiments, testing service resilience, or debugging distributed systems.
Use when you want to reverse-engineer an active Auth0 tenant into a structured, multi-environment Terraform project for replicating that tenant into new empty tenants. Runs auth0 tf generate, then restructures the flat output into a flat modules/ directory (one foreach block per resource type with typed map…
Perform a "red team" security and risk assessment of the codebase. Use when user says "/redteam", "red team this code", or asks for a security/vulnerability audit.
Systematically identify and classify technical and business risks using the risk-centric PASTA threat modeling framework. Use when the user says "run PASTA", "do PASTA threat modeling", or "identify risks".
Apply Matt Shumer's Gauntlet Loop to ambitious software, game, product-design, writing, research, and creative tasks. Establish a concrete inspectable quality bar, let a lead agent decompose the work, use separate builder and critic agents, inspect the real artifact, and iterate until the work meets the bar or the…
Perform a strict, fail-closed production-readiness review of the exact staged change before initial PR/MR submission or an explicit direct-to-default fast track. Use when asked to prepare changes for submission, inspect every staged file and hunk, discover and run mandatory build, test, security, and performance…
Set up and operate an encrypted credentials vault with cryfs (FUSE) on any OS. Covers installation across Linux distros (Debian/Ubuntu, Fedora, Arch, NixOS, Alpine), macOS (macFUSE), and Windows (WinFsp + cryfs). Includes migration of an existing plaintext folder into cryfs, daily open/close workflow, auto-lock via…
Sigil Protocol - AI agent identity, integrity attestation, and cryptographic verification. Use when generating agent identity, signing documents, attesting soul files, verifying agent integrity, or issuing interaction receipts.
★not rated 2 9mo agoA43 tokens
originalMIT
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: