Audit HTTP security headers for any URL and receive a grade (A+ to F) with specific recommendations for missing headers
لغة النص الأصلي: الإنجليزية
Skills في هذا المستودع
جمع SkillsMP عدد ٣٬٠٥٩ من skills من aibot88/sec_skill_store. افتح أي skill لمراجعة مصدره وتفاصيله.
aibot88/sec_skill_storeعرض ٤٠ من أصل ٣٬٠٥٩ skills مجمعة.
Audit HTTP security headers for any URL and receive a grade (A+ to F) with specific recommendations for missing headers
لغة النص الأصلي: الإنجليزية
Auditoria de segurança para skills do OpenClaw. Verifica código malicioso, prompt injection, APIs perigosas e práticas inseguras. Protege contra ClawHavoc e outros ataques.
لغة النص الأصلي: البرتغالية
Continuous self-improvement loop — AuthorClaw learns from mistakes, successes, and user feedback to get better over time
لغة النص الأصلي: الإنجليزية
Facilitator for a student doing Agents 102 Bootstrap alone — no in-person trainer. Invoke on first session to set up the working directory and orient the student; invoke subsequent sessions with "continue" to pick up where they left off. Runs as the Teacher…
لغة النص الأصلي: الإنجليزية
Access the Semantic Scholar Graph API to search papers and retrieve paper/author/citation data when you need literature discovery or citation graph exploration.
لغة النص الأصلي: الإنجليزية
Use this agent when you need deterministic static analysis security scanning using semgrep. This agent complements security-sentinel by running rule-based pattern matching to catch known vulnerability signatures, hardcoded secrets, insecure function calls,…
لغة النص الأصلي: الإنجليزية
Use when designing or auditing icon systems, colors/badges/shapes, visual metaphors, interface signs, or naming-plus-visual surfaces that users misread. Covers semiotic reasoning across icon/index/symbol, signifier/signified, denotation/connotation/myth,…
لغة النص الأصلي: الإنجليزية
Use when the user wants to send an SMS or WhatsApp marketing message via Twilio or Brevo, with compliance checks, consent verification, and delivery tracking.
لغة النص الأصلي: الإنجليزية
Principal-level product development and architecture skill for modern professional web platforms. Covers advanced frontend engineering, Next.js App Router patterns, React component architecture, React Hook Form, state management, system design, Firebase…
لغة النص الأصلي: لغات متعددة
Static security analysis agent. Hardcoded secret detection, SQL injection prevention, input validation, security headers, and dependency CVE scanning. Don't use for runtime exploit verification (Probe), general code review (Judge), CI/CD management (Gear), or…
لغة النص الأصلي: الإنجليزية
SEO, AEO (Answer Engine Optimization), and GEO strategy for search engines and AI visibility. Use when working on "SEO audit," "technical SEO," "on-page SEO," "AI search optimization," "AEO," "GEO," "AI visibility," "optimize for ChatGPT," "optimize for…
لغة النص الأصلي: الإنجليزية
Comprehensive 2026 SEO audit covering classic technical SEO (crawl, render, index, Core Web Vitals with INP), on-page (titles, meta, headings, internal linking), content (topical authority, entity density), and the new mandatory layer — Generative Engine…
لغة النص الأصلي: الإنجليزية
Audit content gaps and decay using Ahrefs MCP data: missing topics, thin coverage, outdated content, and decaying pages. Use this skill when planning a content roadmap, refreshing a stale catalog, building topical authority, or identifying which existing…
لغة النص الأصلي: الإنجليزية
Plan and execute off-page SEO including link building, digital PR, brand mentions, citation building, and external authority signals. Use this skill whenever the user wants to build backlinks, plan a digital PR campaign, list local citations, run guest post…
لغة النص الأصلي: الإنجليزية
Expert skill for binary and text serialization formats, schema design, and optimization
لغة النص الأصلي: الإنجليزية
Use when designing or reviewing Server Actions: the 'use server' directive contract, how a server-side function becomes invokable from the browser without an API route, form integration via the `action` attribute, the React 19 hooks useActionState /…
لغة النص الأصلي: الإنجليزية
Use when designing or reviewing React Server Components: what an RSC can do (async, data fetching, server-only imports) versus what it cannot (state, effects, event handlers, browser APIs), where to draw the server/client boundary in the tree, and how RSC…
لغة النص الأصلي: الإنجليزية
Server-side Swift development with Vapor and Hummingbird. Covers project setup, routing, Fluent ORM, authentication, deployment, and shared client-server code. Use when building backends or APIs in Swift.
لغة النص الأصلي: الإنجليزية
Use when designing credential rotation for integration users, connected apps, named credentials, and OAuth client secrets in Salesforce. Covers rotation cadence, zero-downtime handover, secret storage, and detection of stale credentials. Triggers: 'rotate…
لغة النص الأصلي: الإنجليزية
Audit customer service triage systems for ticket routing, classification, and SLA compliance. Use when you need to evaluate ticket auto-classification accuracy, priority scoring models, skill-based routing logic, escalation pathways, sentiment analysis…
لغة النص الأصلي: الإنجليزية
Fetch and render web pages using the Servo browser engine — a single binary with JS execution, CSS layout, screenshots, and content extraction. Use when a URL returns empty or incomplete content with plain HTTP fetch, when you need a screenshot without GPU,…
لغة النص الأصلي: الإنجليزية
Sets up authentication (login/logout via Microsoft Entra ID) and role-based authorization for a Power Pages code site. Configures identity providers, protected routes, and access control. Use when the user wants to add login, configure Entra ID, enable…
لغة النص الأصلي: الإنجليزية
Next.jsまたはReactプロジェクトでTailwind CSSとTypeScriptを設定します。 インストール、設定、カスタムテーマの拡張、コンポーネントパターン、 型安全なスタイリングユーティリティを扱います。既存のTypeScriptプロジェクトに Tailwind CSSを追加するとき、プロジェクトのデザインシステム向けにTailwind テーマをカスタマイズするとき、型安全なコンポーネントスタイリングパターンを…
لغة النص الأصلي: اليابانية
Salesforce Connected Apps and OAuth configuration with 120-point scoring. TRIGGER when: user configures OAuth flows, JWT bearer auth, Connected Apps, or touches .connectedApp-meta.xml / .eca-meta.xml files. DO NOT TRIGGER when: Named Credentials for callouts…
لغة النص الأصلي: الإنجليزية
Ensure Shaper CLI is installed, configure shaper.json, authenticate, and safely pull remote dashboards/tasks.
لغة النص الأصلي: الإنجليزية
Detect shell-company signals from live government registry data — single director, no accounts ever filed, overseas registered-office concentration, no employees, nominee address patterns. Pulls live unmodified registry records and scores the…
لغة النص الأصلي: الإنجليزية
Apply shell-command discipline for agent invocations — one command per call (no &&, ;, or inline cd dir && cmd chains), no inline env vars (VAR=value cmd), and gh auth login or gh auth switch for GitHub auth (never prefix with GH_TOKEN=...). Use when invoking…
لغة النص الأصلي: الإنجليزية
Use execFileSync with args array instead of execSync with string concatenation to prevent shell injection
لغة النص الأصلي: الإنجليزية
Issue-driven development orchestrator. Turns improvement intent into a well-specified, bilingual issue set; clusters issues into milestones that map 1:1 to semver versions; enforces branch, commit, and PR conventions (GitHub Flow — `<type>/<issue-N>-<slug>`,…
لغة النص الأصلي: الإنجليزية
Full cycle: audit site, check Dependabot alerts, fix issues, push, verify CI, deploy, close. Prioritizes Security > Availability > New features. Parallel dispatch for speed.
لغة النص الأصلي: الإنجليزية
Search Shodan for internet-connected devices, open ports, and services — host lookups and database queries
لغة النص الأصلي: الإنجليزية
Use this skill when reviewing Sigstore Cosign supply chain security for Kubernetes workloads. Trigger when the user asks whether images are properly signed, whether Kyverno imageVerify policy is correctly scoped, whether SLSA provenance attestations exist,…
لغة النص الأصلي: الإنجليزية
Author, run, and operate skelm pipelines — typed TypeScript orchestrations for agentic and deterministic workflows with default-deny permissions. Use when the user mentions skelm, agent permissions, pipeline.ts, AgentPermissions, skelm.config.ts, MCP servers,…
لغة النص الأصلي: الإنجليزية
Skeptic Engine v2.1 — falsification-first анализ в 4 режимах. Триггеры: 'skeptic:', 'сломай идею', 'стоит ли делать', 'проверь идею', 'аудит архитектуры', 'проверь решение', 'red-team архитектуры', 'разбор эксперимента', 'проверь метрики', 'это работает?',…
لغة النص الأصلي: الروسية
Guide to creating Claude Code skills using TDD methodology and persuasion principles. Use for new skill development.
لغة النص الأصلي: الإنجليزية
Buenas prácticas para crear commits de git claros, atómicos y bien estructurados en español. Activa esta skill siempre que el usuario pida hacer un commit, confirmar cambios, guardar cambios en git, o cualquier variación de "haz commit", "commitea", "sube los…
لغة النص الأصلي: الإسبانية
中文优先:用于技能合规检查相关任务,帮助识别、设计、实现或验证对应工作流。English keywords: Visualize whether skills, rules, and agent definitions are actually followed — auto-generates scenarios at 3 prompt strictness levels, runs agents, classifies behavioral sequences, and reports compliance…
لغة النص الأصلي: الإنجليزية
Local-first self-assessment for Claude Code skills. After you use any skill (your own or someone else's), call `skill-feedback log <skill> --rating N --outcome ... [--friction "..."]` to append one entry to `.agent-plus/skill-feedback/<skill>.jsonl`. The…
لغة النص الأصلي: الإنجليزية
Guidelines for authoring SKILL.md files with progressive disclosure. Apply when editing files under `.claude/skills/` or creating new skills. Use for pattern extraction, skill assimilation, simplification, bullet format. Keywords: skill creation, SKILL.md,…
لغة النص الأصلي: الإنجليزية
Use when designing the deterministic health-tooling layer for a skill library, diagnosing why an existing library is decaying invisibly, deciding which categories of automated check to add (inventory, protocol consistency, conflict detection, routing health,…
لغة النص الأصلي: الإنجليزية