Lark/Feishu CLI skills for Stella sessions. Covers workspace operations — calendar, docs, tasks, mail, and messenger — via the lark-cli tool. In Stella, lark-cli runs under an env-var auth model with binaries resolved from $STELLA_HOME/bin:…
Skills in this repository
aibot88/sec_skill_store - Page 37
SkillsMP has collected 2,449 skills from aibot88/sec_skill_store. Open a skill to review its source and details.
aibot88/sec_skill_storeShowing 40 of 2,449 collected skills.
Propose, configure, debug, and maintain Claude Code hooks (PreToolUse/PostToolUse/Stop and other lifecycle events). Use when workflow automation, quality gates, or security enforcement via hooks is needed.
Multi-agent distributed context preservation protocol using cryptographic sharding, gossip propagation, and Byzantine fault tolerance to maintain coherent shared memory across dynamic agent networks.
Autonomous technical lead. Takes commander's intent and drives a project to completion through an OODA loop over implementation, refactoring, review, and bug-hunting skills. Has broad authority — creates tickets, commits, invokes any skill — and only…
B2B lead discovery and enrichment skill. Finds company addresses, employee emails, and phone numbers filtered by industry, geography, role, and company size. 100% free-tier: orchestrates Claude Code's native WebSearch and WebFetch plus free OSINT subprocesses…
Validate accessibility across international standards (WCAG, EN 301 549, Section 508), support diverse assistive technologies, address regional accessibility regulations, and design for global ability contexts. Use when ensuring worldwide accessibility.…
Validate compliance with regional data privacy laws (GDPR, CCPA, PIPEDA), accessibility requirements, age-appropriate content regulations, and copyright laws by jurisdiction. Use when ensuring legal compliance across regions. Activates on "GDPR", "data…
Analyse un contrat en langage simple, identifie les clauses importantes et les points de vigilance. Se déclenche aussi avec "lire ce contrat", "analyser un contrat", "clause", "conditions générales", "CGV", "bail", ou toute demande de compréhension d'un…
Source text: French
Use when legacy prompts or older framework flows reference `legal-counsel` and you need the modern runtime to resolve that capability cleanly.
Generate legal disclaimers, privacy notices, cookie banners, and terms-of-service templates customised for industry, jurisdiction, and use case
Aide à vérifier la conformité RGPD/GDPR d'un site, d'une app ou d'un traitement de données. Se déclenche aussi avec "RGPD", "GDPR", "données personnelles", "politique de confidentialité", "cookies", "conformité", ou toute question de protection des données.
Source text: French
Austrian Impressum (legal notice) requirements for all company types. Covers ECG, UGB, GewO, MedienG, and Offenlegungspflicht for public media. Use when working with impressum, legal notice, imprint, austria, österreich, ECG, mediengesetz, offenlegung.
Proprietà intellettuale su software — diritto italiano ed europeo. MODO A interna: OSS compliance policy, SBOM process (SPDX/CycloneDX), IP register aziendale, invention assignment, clean room procedure, trade secret protection protocol (artt. 98-99 CPI +…
Source text: Italian
Scan code for client project names, proprietary tool references, and legally sensitive content
Aide à préparer un petit litige (consommation, voisinage, facture contestée) avec dossier structuré. Se déclenche aussi avec "petit litige", "tribunal", "facture contestée", "arnaque", "remboursement refusé", "voisinage", ou toute préparation de recours pour…
Source text: French
Informe sur les droits du locataire dans une situation donnée. Se déclenche aussi avec "droits du locataire", "mon propriétaire", "augmentation de loyer", "état des lieux", "expulsion", "dépôt de garantie", ou toute question de droit locatif.
Source text: French
Create bulletproof Terms of Service and Privacy Policy documents for SaaS applications. Infers company information from codebase/marketing site, conducts comprehensive audits, drafts documents, then asks user ONLY for missing details at the end. Minimizes…
Wspólna nauka — po każdym fix-phase / multi-file change / non-trivial task przejrzyj sesję i zdecyduj czy warto zapisać lekcję (nową lub update istniejącej). Triggeruj proaktywnie po PR-ach, fazach audytu, zamknięciu commit'u, każdej okazji gdy coś poszło nie…
Source text: Polish
Coordinates 9 specialized audit workers (security, build, architecture, code quality, dependencies, dead code, observability, concurrency, lifecycle). Researches best practices, delegates parallel audits, aggregates results into single Linear task in Epic 0.
Security audit worker (L3). Scans codebase for hardcoded secrets, SQL injection, XSS, insecure dependencies, missing input validation. Returns findings with severity (Critical/High/Medium/Low), location, effort, and recommendations.
Coordinates security scanning (secrets + deps). Delegates to ln-761/ln-762. Generates SECURITY.md, pre-commit hooks, CI workflow.
Scans codebase for hardcoded secrets. Returns normalized findings with severity and remediation guidance. Pre-commit hook integration.
UK legal research using the Lex API. Search UK legislation and legal provisions. Use when researching UK law, analysing statutory instruments, or grounding responses in authoritative legal sources.
Add or fix Intercom integration in an LFX Angular app. Detects existing integrations and audits them against the LFX canonical pattern — correcting missing JWT pre-set, broken shutdown, missing Auth0 claim, wrong app IDs, or absent CSP entries. Fresh installs…
Best practices for GitHub Actions workflows including security, performance, and maintenance
Source text: Thai
Best practices for Vue.js development including security, performance, and developer experience
Source text: Thai
Standardized library design patterns for autonomous-dev including two-tier design, progressive enhancement, non-blocking enhancements, and security-first architecture. Use when creating or refactoring Python libraries.
License compliance checking and conflict detection
Audits package dependency licenses using the Very Good CLI packages_check_licenses MCP tool. Flags non-compliant or unknown licenses and produces a compliance summary.
Master skill cho dự án Line Script App — web app làm phim dành cho Script Supervisor và đoàn phim độc lập. Dùng skill này cho BẤT KỲ tác vụ nào liên quan đến project này: viết code mới, sửa bug, thêm tính năng, thiết kế database, setup Cloudflare, cấu hình…
Source text: Vietnamese
Access Linear CRM for issue management, states, and team structures using direct GraphQL scripts. Replaces the unstable MCP server to prevent execution hangs. Uses keychain validation or hardcoded fallback for authentication.
Read-first wrapper around the Linear GraphQL API. Single-call issue context (comments + relations + state), name-resolved teams/projects/states/labels, `issues create --from-markdown` turns a design doc into a Linear issue without hand-stitching flags. Use…
Link building, backlink strategy, link acquisition, outreach plan. Covers linkable asset identification, tactic selection, and 12-week outreach playbook with templates. This is a tactics generator — it does NOT measure the user's backlink profile, domain…
Use when authoring or reviewing a periodic-scan job that walks every external link in a markdown content set and flags 404s, redirects to unrelated content, and connection failures. Activate this skill whenever the task says 'check our links' or mentions a…
Plan LinkedIn content strategy, commenting engagement, and thought leadership campaigns. Use when planning weekly content calendars, developing commenting strategies for visibility, building topic authority, or coordinating newsletter promotion. Includes…
Detect and fix violations of project instructions defined in .claude/rules/. Use when checking code compliance, reviewing changes, or when the user asks about instruction violations.
Execute markdown validation with taxonomy-based classification and custom rules. Use when validating markdown compliance with LLM-facing writing standards or when generating structured validation reports.
Durcissement sécurité Linux — SSH, fail2ban, SELinux, audit, gestion des utilisateurs et mises à jour. Se déclenche avec "sécurité Linux", "hardening Linux", "SSH sécurisé", "fail2ban", "SELinux", "audit Linux".
Source text: French
Durcissement sécurité Linux — SSH, fail2ban, SELinux, audit, gestion des utilisateurs et mises à jour. Se déclenche avec "sécurité Linux", "hardening Linux", "SSH sécurisé", "fail2ban", "SELinux", "audit Linux".
Source text: French
iOS 26/macOS 26 Liquid Glass design system with complete API coverage. Use when user asks about iOS 26 design, Liquid Glass, glassEffect modifier, GlassEffectContainer, morphing animations, HIG compliance, visual styling, or the new Apple design language.