ForceInjection/domain-driven-design-skills - الصفحة ٢٢

ops-security-audit

Structured workflow for infrastructure security audits including compliance validation, vulnerability assessment, and security posture review.

لغة النص الأصلي: الإنجليزية

optimization-phase

Standard Operating Procedure for /optimize phase. Covers performance benchmarking, accessibility audit, security review, and code quality checks.

لغة النص الأصلي: الإنجليزية

owasp-security-review

Security review and implementation support based on OWASP Cheat Sheet Series. Use for code review requests, security-related implementation/research, and vulnerability checks. Covers security topics such as XSS, SQL Injection, CSRF, and…

لغة النص الأصلي: الإنجليزية

owasp-top-10

OWASP Top 10 security vulnerabilities with detection and remediation patterns. Use when conducting security audits, implementing secure coding practices, or reviewing code for common security vulnerabilities.

لغة النص الأصلي: الإنجليزية

package-audit

Scan for security vulnerabilities using pnpm audit, Snyk, and automated tools. Use when checking security, before deployments, or resolving CVEs.

لغة النص الأصلي: الإنجليزية

picocom

Use picocom to interact with IoT device UART consoles for pentesting operations including device enumeration, vulnerability discovery, bootloader manipulation, and gaining root shells. Use when the user needs to interact with embedded devices, IoT hardware,…

لغة النص الأصلي: الإنجليزية

pop-assessment-security

Validates PopKit security posture using concrete vulnerability patterns, automated secret scanning, and OWASP-aligned checklists

لغة النص الأصلي: الإنجليزية

pop-assessment-security

Validates PopKit security posture using concrete vulnerability patterns, automated secret scanning, and OWASP-aligned checklists

لغة النص الأصلي: الإنجليزية

project-analysis-agent

Analyzes proposed projects before implementation, identifies issues and improvement opportunities across 8 dimensions (security, performance, requirements, etc.), presents findings to user for approval, then sends approved changes to Architecture Agent. Use…

لغة النص الأصلي: الإنجليزية

qa-scenario-authoring

Create well-formed quality attribute scenarios with measurable response criteria

لغة النص الأصلي: الإنجليزية

qa-security-scan

Security scanning templates and checklists for OWASP Top 10, authentication, authorization, data protection. Use when conducting security testing or vulnerability assessment. This skill provides comprehensive security testing: - OWASP Top 10 checklist with…

لغة النص الأصلي: اليابانية

repo-structure-reviewer

Audit a repository's structure and propose a safe, approval-gated reorganization plan. Use when asked to review repo anatomy, propose folder changes, or apply an approved reorg with rollback.

لغة النص الأصلي: الإنجليزية

reverse-engineering-firmware-analysis

Extended firmware analysis for embedded/IoT images with deep extraction, emulation, and vulnerability assessment.

لغة النص الأصلي: الإنجليزية

reverse-proxy

Manage incoming internet traffic and reverse proxy configuration on the home network gateway. Configure Caddy, OAuth2 authentication, fail2ban security, and traffic routing.

لغة النص الأصلي: الإنجليزية

review-security

보안 관점에서 코드를 검토합니다. OWASP Top 10, credential 노출, injection 공격 등을 체크합니다.

لغة النص الأصلي: الكورية

reviewing-authentication-and-authorization-security

Use when reviewing authentication or authorization code. Provides comprehensive security guidance on JWT validation, token exchange, OAuth 2.0/2.1 compliance, PKCE, Resource Indicators, MCP authorization, session management, and API authentication. Covers…

لغة النص الأصلي: الإنجليزية

reviewing-security

OWASP API Security Top 10 (2023) と Rust セキュリティベストプラクティス。脆弱性検出。Use when: セキュリティ、脆弱性、OWASP、認証、認可、監査を依頼された時。

لغة النص الأصلي: اليابانية

rust-security

Rust security best practices and vulnerability prevention. Use when handling user input, authentication, cryptography, secrets management, network security, or conducting security reviews.

لغة النص الأصلي: الإنجليزية

sandbox-configuration

Central authority for Claude Code sandboxing and isolation. Covers sandboxed bash tool, /sandbox command, filesystem isolation (blocked access, custom paths), network isolation (domain restrictions, proxy support), OS-level enforcement (bubblewrap on Linux,…

لغة النص الأصلي: الإنجليزية

sandbox-configuration

Central authority for Claude Code sandboxing and isolation. Covers sandboxed bash tool, /sandbox command, filesystem isolation (blocked access, custom paths), network isolation (domain restrictions, proxy support), OS-level enforcement (bubblewrap on Linux,…

لغة النص الأصلي: الإنجليزية

sbom-management

Software Bill of Materials management including generation, formats, vulnerability tracking, and supply chain security

لغة النص الأصلي: الإنجليزية

secops-engineer

Senior Security Engineer with 12+ years application security experience. Use when implementing authentication/authorization, configuring JWT/OAuth2, conducting security reviews, implementing rate limiting, ensuring GDPR compliance, or performing security…

لغة النص الأصلي: الإنجليزية

secrets-management-gha

GitHub Actionsワークフローでの安全な秘密情報管理を実現する。 リポジトリ/環境/組織/Dependabotの4種類のシークレット使い分け、OIDCによるクラウド認証、ローテーション、監査を包括的に提供する。 Anchors: • Web Application Security (Andrew Hoffman) / 適用: 脅威モデリング・セキュア設計 / 目的: シークレット管理戦略の基盤 • GitHub Actions Secrets API / 適用: シークレット設定・アクセス制御 /…

لغة النص الأصلي: اليابانية

security-analysis

Master skill for comprehensive security analysis. Identifies technology stack and delegates to specialized security sub-skills for deep vulnerability assessment.

لغة النص الأصلي: الإنجليزية

security-audit-logging

Implement comprehensive security audit logging for compliance, forensics, and SIEM integration. Use when building audit trails, compliance logging, or security monitoring systems.

لغة النص الأصلي: الإنجليزية

security-audit

Agent Skill: Security audit patterns for PHP/OWASP. Use when conducting security assessments, identifying vulnerabilities (XXE, SQL injection, XSS), or CVSS scoring. By Netresearch.

لغة النص الأصلي: الإنجليزية

security-auditor

Performs comprehensive security audits of KrakenD configurations to identify vulnerabilities, authentication gaps, and security best practices violations with Flexible Configuration support

لغة النص الأصلي: الإنجليزية

security-compliance-audit

Conduct comprehensive security compliance audits for SOC 2, GDPR, HIPAA, PCI-DSS, and ISO 27001. Use when preparing for certification, annual audits, or compliance validation.

لغة النص الأصلي: الإنجليزية

security-configuration-review

セキュリティ関連設定のレビュー、構成監査、セキュリティベースライン確認を統一的に実施するスキル。脅威モデリングに基づいた設定評価とベストプラクティスの適用を通じて、アプリケーションのセキュリティ態勢を向上させます。 Anchors: • 『Web Application Security』（Andrew Hoffman） / 適用: セキュリティ設定監査 / 目的: セキュリティ態勢の向上 Trigger:…

لغة النص الأصلي: اليابانية

security-convex

Convex security audit patterns. Load when reviewing Convex apps (convex/ directory present). Covers query/mutation auth, row-level security, public vs authenticated functions, validators, and Convex-specific issues.

لغة النص الأصلي: الإنجليزية

security-engineering

Security auditing and vulnerability detection using OWASP patterns, CWE analysis, and threat modeling. Use when auditing code for security issues, reviewing authentication/authorization, evaluating input validation, analyzing cryptographic usage, reviewing…

لغة النص الأصلي: الإنجليزية

security-essentials

Security best practices, OWASP compliance, authentication patterns, and vulnerability prevention

لغة النص الأصلي: الإنجليزية

security-expert

OWASPの基本を前提に、デフォルト安全（入力検証/認可/秘密情報/監査ログ/SSR/CSRF等）を落とさずに設計・実装・レビューする。脅威と攻撃面を洗い出し、最小権限と安全な失敗で守るために使う。

لغة النص الأصلي: اليابانية

security-express

Express.js security audit patterns. Load when reviewing Express apps. Covers Helmet.js, CORS, body-parser limits, auth middleware, and common Express security mistakes.

لغة النص الأصلي: الإنجليزية

security-fastapi

FastAPI security audit patterns. Use when reviewing FastAPI apps (fastapi imports, main.py/app.py, requirements/pyproject with fastapi, uvicorn). Covers auth dependencies, CORS configuration, TrustedHost/HTTPS middleware, and common FastAPI/Starlette security…

لغة النص الأصلي: الإنجليزية

security-flutter

Flutter Security. Use when reviewing security, implementing auth, or hardening code.

لغة النص الأصلي: الإنجليزية

security-gate

Classifies inbound Telegram messages for telclaude as ALLOW/WARN/BLOCK with brief rationale.

لغة النص الأصلي: الإنجليزية

security-health-inline

Inline orchestration workflow for security vulnerability detection and remediation. Provides step-by-step phases for security-scanner detection, priority-based fixing with vulnerability-fixer, and verification cycles.

لغة النص الأصلي: الإنجليزية

security-nextjs

Next.js security audit patterns. Load when reviewing Next.js apps (next.config.js present). Covers NEXT_PUBLIC_* exposure, Server Actions, middleware auth, API routes, and App Router security.

لغة النص الأصلي: الإنجليزية

security-observation

セキュリティ観測。認可漏れ、インジェクション、機密漏えい、暗号誤用、依存脆弱性を検出。Use when: 認証/認可実装、外部入力処理、依存更新、コミット前チェック、セキュリティレビューして、脅威分析が必要な時。

لغة النص الأصلي: اليابانية