diegosouzapw/awesome-omni-skill - Page 50

security-by-design

Strategic principles for integrating security from the start, not retrofitting it later

security-compliance

Skill for ensuring security best practices and regulatory compliance. Use when implementing authentication, handling sensitive data, securing APIs, or meeting compliance requirements (PCI-DSS, GDPR). Provides OWASP Top 10 prevention patterns, security…

security

Information security expertise for cybersecurity frameworks (NIST, ISO 27001), security architecture, incident response, vulnerability management, identity management, and cloud security. Use when designing security programs, responding to incidents, or…

security-review

Security vulnerability detection based on OWASP Top 10. Use when reviewing code for security issues.

security-review

Run a targeted security audit on specified files or modules. Uses OWASP-informed checks, dependency vulnerability scanning, and auth/input validation review. Use for security audits, vulnerability checks, or before deploying sensitive code. Keywords:…

security-scanning-security-hardening

Coordinate multi-layer security scanning and hardening across application, infrastructure, and compliance controls.

security-skills-guide

Guide for security-related Agent Skills including penetration testing, code auditing, threat hunting, and forensics skills.

security-validation-checklist

Guides security validation checklist: Signal protocol security, encryption standards, authentication patterns, data protection. Use when validating security, reviewing security implementations, or ensuring security compliance.

slack-auth-security

OAuth flows, token management, and security best practices for Slack apps. Use when implementing app distribution, multi-workspace installations, token storage and rotation, managing scopes and permissions, or securing production Slack applications.

software-security-appsec

Modern application security patterns aligned with OWASP Top 10 (2021) and OWASP Top 10:2025 Release Candidate, OWASP API Security Top 10 (2023), NIST SSDF, zero trust, supply chain security, authentication, authorization, input validation, and cryptography.

tester

Testing specialist using GPT-5.3-Codex. Writes unit tests and Stagehand AI-powered E2E tests that validate user-facing acceptance criteria from both the PRD and the USER-JOURNEY.md Completeness Checklist. Use after ralph finishes implementing — never during…

testing

Test-first development process and test quality review. Use when writing new code, reviewing PRs, diagnosing flaky or failing tests, or improving test coverage. Also use when fixing bugs (write failing test first), adding features (test defines 'done'), or…

testing-obsessive

This skill should be used when the user mentions "write tests", "test coverage", "testing strategy", "unit tests", "integration tests", "e2e tests", "vitest", "jest", discusses testing approaches, asks about test patterns, or works on test files. Addresses…

third-party-risk-review

Assess vendor and business associate risk for healthcare organizations by evaluating BAA compliance, security posture, data handling practices, regulatory compliance, and financial stability of third parties with access to protected health information. Use…

tinman

Security auditing and hardening for OpenClaw and system infrastructure.

typo3-security

Security hardening checklist and best practices for TYPO3 v13/v14 installations, covering configuration, file permissions, and common vulnerabilities.

typo3-security

Security hardening checklist and best practices for TYPO3 v13/v14 installations, covering configuration, file permissions, and common vulnerabilities.

unity-review-quality

Senior Unity Developer quality review. Deep-dives into a Unity project, reviews everything against best practices, and produces a comprehensive HTML report document. Read-only — never modifies any project files. Covers: architecture, code quality,…

accessibility-design

WCAG 2.1 AA compliance patterns, screen reader compatibility, keyboard navigation, and ARIA best practices. Use when implementing accessible interfaces, reviewing UI components, or auditing accessibility compliance. Covers semantic HTML, focus management,…

analysis-process

Turn the idea for a feature into a fully-formed PRD/design/specification and implementation-plan. Use when you have a spec or requirements that needs implementation. Use in pre-implementation (idea-to-design) stages to make sure you understand the…

analyzing-research-documents

Extracts high-value insights from research documents, RCAs, design docs, and memos - filters aggressively to return only actionable information. Research equivalent of analyzing-implementations skill.

brainstorming

Use when rough ideas need design before code, requirements are fuzzy, multiple approaches exist, or you need to explore options before implementation

brutalist-academic-ui

Skriptoteket-specific brutalist/academic UI design. Use for Vue/Vite SPA and SSR templates when you want grid-based layouts, systematic typography, and high-contrast “academic” aesthetics, while staying compatible with Skriptoteket’s pure-CSS + HuleEdu token…

budget-ui-components

Componentes de UI para orçamentos seguindo o padrão de components do Easy Budget.

Source text: Portuguese

building-a-work-plan

Use when orchestrating the creation of a work plan from a design document. Manages branch setup, codebase investigation, milestone planning, and execution handoff.

caching-utilities

Guide for using caching utilities in speedy_utils, including memory, disk, and hybrid caching strategies for sync and async functions.

canva-branded-presentation

Create on-brand Canva presentations from an outline or brief. Use when the user asks to create a branded presentation, make an on-brand deck, turn an outline into slides, or generate a presentation from a brief. Input can be text directly in the message, a…

cc-get-session-id

Get the current Claude Code session ID. Use when you need to reference or display the session ID.

cc-routine-and-class-design

Evaluate routine and class design quality using Code Complete checklists (43 items). Use when designing routines or classes, reviewing class interfaces, choosing between inheritance and containment, or evaluating routine cohesion. Also trigger when tempted to…

cheat-sheets

Expert knowledge for creating effective cheat sheets with PDF export. Activate when creating/editing cheat sheet content, designing quick reference sheets, or working with PDF export functionality. (project)

co15-combinatorial-design

Apply CO15 Combinatorial Design to systematically explore option combinations to find optimal configurations.

codex-implement

Delegate complex implementation tasks to Codex. Use when user says codex implement, delegate implementation, or has a complex coding task.

configure-downstream

Configure Konflux for new Submariner version - creates overlays, tenant config, and RPAs for Y-stream releases.

design-patterns

BK-CI 项目设计模式实践指南，涵盖工厂模式、策略模式、观察者模式、装饰器模式、模板方法等在项目中的实际应用。当用户学习设计模式、重构代码、设计可扩展架构或理解项目设计时使用。

Source text: Chinese

design-research

Research website design, styling, and frontend implementation using Playwright CLI to capture screenshots and analyze structure. Use when a software engineer wants to understand and implement a similar design. Keywords: design research, website design,…

detect-design

Design system detection with drift findings and evidence blocks. Use when auditing design system consistency.

dev-server-sandbox

Run multiple isolated mux dev-server instances (temp MUX_ROOT + free ports)

example-skill

Example skill demonstrating the full skill directory structure with scripts, references, assets, and examples. Use when learning how to structure Codex skills.

faion-ui-designer

UI design: wireframes, prototypes, design systems, visual design.

faion-ui-designer

UI design: wireframes, prototypes, design systems, visual design.