aibot88/sec_skill_store - Seite 33

improve-c6-1

Improve readiness criterion C6.1 (Static Analysis) in the current project by adding linting, type checking, or security scanning. Raises the fulfillment level by one step.

Quellsprache: Englisch

in10-red-teaming

Apply IN10 Red Teaming to organize adversarial review to find vulnerabilities through simulated attack.

Quellsprache: Englisch

inbox-processing-expert

Expert guidance for building and maintaining the Para Obsidian inbox processing system - a security-hardened automation framework for processing PDFs and attachments with AI-powered metadata extraction. Use when building inbox processors, implementing…

Quellsprache: Englisch

incident-respond

End-to-end incident-response playbook for a CVE actively in the wild — confirms urgency via KEV/EPSS/sightings, pulls IOCs and ATT&CK chain, fetches detection rules for installed families, evaluates patch path or workarounds, generates VEX attestation, posts…

Quellsprache: Englisch

incident-response-commander

Guides teams through IT outages and security incidents, providing structured workflows for detection, containment, eradication, and post-mortem analysis.

Quellsprache: Englisch

inclusion-criteria

Apply inclusion/exclusion criteria systematically in literature reviews. Use when: (1) Screening abstracts, (2) Reviewing full texts, (3) Documenting screening decisions, (4) Ensuring PRISMA compliance.

Quellsprache: Englisch

increment-planner

Plan and create SpecWeave increments with PM and Architect agent collaboration. Use when starting new features, hotfixes, bugs, or any development work that needs specification and task breakdown. Creates spec.md, plan.md, tasks.md with proper AC-IDs and…

Quellsprache: Englisch

inet-api

Internet.nl batch API voor het geautomatiseerd testen van meerdere domeinen op internetstandaarden. Authenticatie, batch requests, polling, resultaten JSON, dashboard-integratie. Triggers: internet.nl API, batch API, bulk scan, compliance dashboard,…

Quellsprache: Niederländisch

inet-mail

Mailstandaarden getest door internet.nl: SPF (Sender Policy Framework), DKIM (DomainKeys Identified Mail), DMARC (Domain-based Message Authentication), STARTTLS, DANE (DNS-based Authentication of Named Entities). Triggers: mail test, DMARC, DKIM, SPF,…

Quellsprache: Niederländisch

inet

Overzicht van alle internetstandaarden die internet.nl test. Routing naar sub-skills voor web, mail, API en toolbox. Triggers: internet.nl, internet standaarden, website compliance, mail compliance, internetstandaarden, open standaarden, Forum…

Quellsprache: Niederländisch

inet-toolbox

Stap-voor-stap implementatiegidsen uit de internet.nl toolbox-wiki. Configuratie van DNSSEC, HTTPS/TLS, DMARC, DKIM, SPF, DANE en IPv6 op veelgebruikte platformen (BIND, NSD, Nginx, Apache, Postfix). Triggers: internet.nl toolbox, DMARC configuratie, DKIM…

Quellsprache: Niederländisch

inet-web

Webstandaarden getest door internet.nl: HTTPS, TLS 1.2/1.3, HSTS, DNSSEC voor websites, IPv6 dual-stack, RPKI route origin validation, security headers (CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy), security.txt (RFC 9116). Triggers: web…

Quellsprache: Niederländisch

influencer-brief

Use when the user needs an influencer campaign brief with discovery criteria, creator guidelines, FTC compliance checklist, and measurement plan.

Quellsprache: Englisch

influencer-creator

Invoke when the user asks about influencer marketing, creator partnerships, UGC campaigns, influencer discovery, creator briefs, FTC compliance for sponsored content, influencer contracts, or influencer campaign measurement.

Quellsprache: Englisch

infra-architect

Design infrastructure solutions - analyze requirements, design cloud architecture, create comprehensive design documents with resource specifications, security considerations, cost estimates, and implementation plans. Designs S3 buckets, Lambda functions,…

Quellsprache: Englisch

infra-auditor

Audit infrastructure status, health, and compliance without modifications - provides observability and drift detection

Quellsprache: Englisch

infra-security-reviewer

WHEN: Infrastructure security audit, secrets management, network policies, compliance checks WHAT: Secrets scanning + Network policies + IAM/RBAC audit + Compliance validation + Security hardening WHEN NOT: Application security → security-scanner, Docker only…

Quellsprache: Englisch

infra-validator

Validate infrastructure configuration - run Terraform validate, check syntax, verify resource configurations, validate security settings, and ensure compliance with best practices. Reports validation errors and warnings.

Quellsprache: Englisch

infrastructure-platform

Use when an approved system design exists and the team needs production-grade platform and infrastructure architecture before IaC implementation. Produces cloud and account topology, environment model, runtime substrate selection, network and trust-boundary…

Quellsprache: Englisch

ingest-devto

Extract article content from dev.to posts for wiki ingestion. Uses dev.to public API, no auth required.

Quellsprache: Englisch

ingest-gist

Extract content from GitHub gists for wiki ingestion. Uses raw URL fetch, no auth required.

Quellsprache: Englisch

ingest-github-discussions

Extract content from GitHub Discussion threads for wiki ingestion. Uses gh CLI GraphQL API, authenticated via gh auth.

Quellsprache: Englisch

ingest-hackernews

Extract Hacker News threads (post + comments) for wiki ingestion. Uses Algolia HN API, no auth required.

Quellsprache: Englisch

ingest-linkedin

Ingest LinkedIn posts into the wiki. Supports pasted text or cookie-based auth for URL fetching.

Quellsprache: Englisch

ingest-reddit

Extract post and comments from Reddit threads for wiki ingestion. Appends .json to any Reddit URL, no auth required for public subreddits.

Quellsprache: Englisch

ingest-tweet

Extract full text from X/Twitter posts for wiki ingestion. Uses FXTwitter API, no auth required.

Quellsprache: Englisch

inkasso-rdg

Begleitet registrierte Inkassounternehmen und Rechtsanwälte bei der rechtskonformen Durchführung von Inkassodienstleistungen nach dem RDG – von Registrierungsvoraussetzungen über Hinweispflichten gegenüber Schuldnern bis zur Vergütung und datenschutzkonformen…

inline-cli

Explain and use the Inline CLI (`inline`) for authentication, chats, users, spaces, messages, search, attachments, downloads, JSON output, and configuration. Use when asked how to use the Inline CLI or its commands, flags, outputs, or workflows.

Quellsprache: Englisch

inner-flame

Universal self-review protocol for all Rune teammates. Adapts checklist per agent role (worker, fixer, reviewer, researcher, forger, aggregator). Enforces completeness verification, hallucination detection, codebase rule compliance, and value assessment…

Quellsprache: Englisch

innovations-und-technologiemaerkte

Prueft Marktabgrenzung in dynamischen Technologiemaerkten und Innovationsmaerkten. Behandelt technologische Substitution Patent-Pools Standard-Essential-Patents Innovation-Markets-Doktrin und die Frage ob Innovationswettbewerb Produktmarktmacht ausgleicht.…

input-validation-security

Webアプリケーションにおける包括的な入力検証とサニタイズ。型安全な検証、許可リストフィルタリング、 コンテキスト対応エンコーディングを通じて、XSS、SQLインジェクション、コマンドインジェクション、 パストラバーサルなどの入力ベースの攻撃を防止。 Anchors: • OWASP Top 10 / 適用: 全ての入力検証判断 / 目的: 業界標準のセキュリティベースライン • CWE-20 (不適切な入力検証) / 適用: 検証戦略設計 / 目的: 一般的な脆弱性パターン防止 • OWASP ASVS 5.1…

Quellsprache: Japanisch

insforge-schema-patterns

Database schema patterns for InsForge including social graphs, e-commerce, content publishing, and multi-tenancy with RLS policies. Use when designing data models with relationships, foreign keys, or Row Level Security.

Quellsprache: Englisch

inspect-sandbox

Inspects a Linux container or sandbox environment and produces a structured HTML report covering filesystem mounts, process security context, and network configuration. Also renders a multi-page landscape A4 PDF of the report for inline display and download.

Quellsprache: Englisch

install-deepvista-cli

Install the DeepVista CLI. Load when the `deepvista` binary is missing from PATH (hooks/commands return "command not found" or silently no-op), when the user asks how to install DeepVista, or when `deepvista auth login` hasn't been run yet. Ships with the…

Quellsprache: Englisch

install-dependencies-rules

Usa esta skill SIEMPRE antes de añadir, actualizar o eliminar cualquier dependencia en un proyecto Node.js. Aplica a frontend, backend y monorepo. Cubre pnpm obligatorio, pin exact sin carets, consulta de última versión estable, auditoría post-instalación,…

Quellsprache: Spanisch

installation-orchestrator

Expert management of install.sh (2000+ lines). Use for installation troubleshooting, idempotency checks, secret generation, volume migration, 11 services startup order (including heuristics and semantic), and user onboarding.

Quellsprache: Englisch

integration-development

Guide for creating new OAuth-based integrations in the Orient codebase. Use when adding external service integrations (APIs like Linear, GitHub, Slack, Notion, etc.), implementing OAuth flows, or creating catalog-based integration manifests. Covers the full…

Quellsprache: Englisch

integration-procedure-cacheable-patterns

Use when designing Integration Procedures (IPs) with platform cache to cut latency and callout load. Covers cache key design, TTL selection, per-user vs org-wide partitions, invalidation on data changes, and safe fallback on cache miss/stale. Does NOT cover…

Quellsprache: Englisch

integration

Manage codemap integration — 'check' audits installation health (scan-query reachable, index fresh, injection present), 'init' onboards codemap by discovering skills/agents, recommending injection sites, and wiring them in.

Quellsprache: Englisch

intent-recognition

Use BEFORE any tool call that could modify state, touch sensitive targets, rewrite history, install dependencies, publish packages, or expose credentials/environment data. Classifies intent into Passive/Read, Reconnaissance, Modification, or…

Quellsprache: Englisch