Menú
Skills en este repositorio
SkillsMP ha recopilado 2449 skills de aibot88/sec_skill_store. Abre una skill para revisar su origen y sus detalles.
aibot88/sec_skill_storeMostrando 40 de 2449 skills recopiladas.
Solve CTF reverse engineering challenges using systematic analysis to find flags, keys, or passwords. Use for crackmes, binary bombs, key validators, obfuscated code, algorithm recovery, or any challenge requiring program comprehension to extract hidden…
Idioma del texto original: inglés
Solve CTF (Capture The Flag) challenges by analyzing challenge descriptions, source code, and interacting with challenge environments to capture flags.
Idioma del texto original: inglés
Coding doctrine for any task that creates, modifies, or refactors code in a programming language. Make sure to consult this skill whenever the user is about to write, edit, debug, or ship code, even if they don't explicitly ask for "best practices" — Claude's…
Idioma del texto original: inglés
Test-pattern doctrine. Tests are copyable from ~/.claude/patterns/tests/, three categories: input boundary, contract, effect. Make sure to consult this skill whenever code changes touch a boundary where someone else's code meets yours, even if the user…
Idioma del texto original: inglés
Define semantic layer cubes with Drizzle ORM tables, including dimensions, measures, time dimensions, and security context. Use when creating analytics cubes, defining data models, setting up multi-tenant filtering, or working with drizzle-cube semantic…
Idioma del texto original: inglés
Cube Sandbox 安全沙箱执行技能。当需要安全执行 Python 代码、Shell 命令，或需要隔离环境运行不受信任的代码时使用。 适用场景： (1) 用户要求"在沙箱中执行代码"、"跑一段 Python"、"安全执行"、"隔离环境运行"； (2) 需要执行可能有副作用的代码（文件操作、网络请求、安装包等），希望通过沙箱隔离风险； (3) 需要读写沙箱内文件、挂载宿主机目录到沙箱； (4) 需要控制沙箱网络策略（完全断网、白名单、黑名单）； (5) 需要暂停/恢复沙箱（保留内存快照以实现快速复用）。…
Idioma del texto original: chino
Author high-quality assessment items (questions, prompts, tasks) aligned to learning objectives with answer keys and rubrics. Use when creating test questions, writing assessment items, or building item banks. Activates on "write assessment items", "create…
Idioma del texto original: inglés
Validate WCAG 2.1 compliance, screen reader compatibility, and Universal Design for Learning (UDL) principles implementation throughout curriculum materials. Use when checking accessibility, validating UDL, or ensuring compliance. Activates on "accessibility…
Idioma del texto original: inglés
Generate a full practice exam (e.g. 60 questions) for an ExamNova exam by first scraping the vendor's latest official exam objectives via Firecrawl, then prompting Claude to author questions whose domain distribution matches the published blueprint…
Idioma del texto original: inglés
Customs & Trade Compliance workflow skill. Use this skill when the user needs Codified expertise for customs documentation, tariff classification, duty optimisation, restricted party screening, and regulatory compliance across multiple jurisdictions and the…
Idioma del texto original: inglés
Brazilian healthcare compliance for regulated medical and psychological content. Includes LGPD data protection, CFM/CRP/ANVISA regulatory requirements, scientific research validation, and data sanitization. Use when developing healthcare applications,…
Idioma del texto original: inglés
Research CVEs and security advisories for project dependencies. Uses Exa, NVD API, OSV.dev, and GitHub Advisory Database to find known vulnerabilities.
Idioma del texto original: inglés
Scan project dependencies for known CVEs using native audit tools (npm, pip, composer, cargo, go, bundler, dart)
Idioma del texto original: inglés
Look up CVE vulnerability details by ID via MITRE CVE API with NVD fallback — severity, CVSS score, affected products, and references
Idioma del texto original: inglés
Run deterministic CWE Top 25 checks (Semgrep + custom rules) before and after edits to enforce Constitution principle 7 at G2 Validate. Activate on file edits at risk moderate or high.
Idioma del texto original: inglés
UK NCSC Cyber Essentials Plus (CE+) v3.3 Danzell expert. Reference-depth framework plugin with assessment, scope determination, and evidence checklist — backed by the SCF crosswalk. Five core controls: Firewalls, Secure Configuration, User Access Control (MFA…
Idioma del texto original: inglés
Strukturierte Sofortmassnahmen bei aktivem Cyber-Vorfall — Hacker-Angriff Ransomware Datenexfiltration Insider-Threat. Phase 1 Sofort-Eindaemmung Netztrennung Forensik-Sicherung. Phase 2 DSGVO-Meldung Art. 33 72 Stunden bei Risiko Betroffenen-Information Art.…
Idioma del texto original: alemán
Esperto di sicurezza informatica per proteggere codice, infrastruttura e dati sensibili. Attiva questa skill SEMPRE prima di operazioni che coinvolgono secrets, credenziali, o esposizione pubblica.
Idioma del texto original: italiano
Perform an advanced offensive security audit and attack simulation on the current features.
Idioma del texto original: inglés
This skill should be used when the user asks to "run daily news", "publish today's news", "draft today's vatt-ghern roundup", "do the daily-news routine", invokes `/vatt-ghern:daily-news`, or asks Claude to author tech-news posts for the vatt-ghern blog. The…
Idioma del texto original: inglés
Comprehensive code review and troubleshooting for Flutter Android apps written in Dart. Identifies Dart language issues, security vulnerabilities, bugs (visible AND silent), performance issues, and architectural violations. Use for: (1) Pre-commit reviews,…
Idioma del texto original: inglés
Complete guide for using drift database library in Dart applications (CLI, server-side, non-Flutter). Use when building Dart apps that need local SQLite database storage or PostgreSQL connection with type-safe queries, reactive streams, migrations, and…
Idioma del texto original: inglés
Dart/Flutter coding rules from ai-toolkit: coding-style, frameworks, patterns, security, testing. Triggers: .dart, pubspec.yaml, Flutter, Riverpod, Bloc, widget, StatelessWidget, StatefulWidget. Load when writing, reviewing, or editing Dart/Flutter code.
Idioma del texto original: inglés
Proper authentication patterns for dashboard frontend API calls. Use when adding new API endpoints, creating components that fetch data, or debugging 401 Unauthorized errors. Covers JWT token handling, the apiRequest helper, and common pitfalls.
Idioma del texto original: inglés
Review or assess a data architecture, data model, or data platform design. Evaluates six data-specific quality attributes (DAMA-DMBOK aligned), topology choice, data contracts, GDPR/AI Act compliance, governance gaps, and data mesh readiness. TOGAF Phase C…
Idioma del texto original: inglés
Implement strong encryption using AES, RSA, TLS, and proper key management. Use when securing data at rest, in transit, or implementing end-to-end encryption.
Idioma del texto original: inglés
Import Synnovator platform data from .synnovator/*.md files into SQLite database via SQLAlchemy models. Use when need to populate test data, initialize database from file-based data, or migrate .synnovator content to relational database. Triggers include…
Idioma del texto original: inglés
Metabase REST API automation and troubleshooting: authenticate (API key preferred, session fallback), export/upsert questions (cards) and dashboards, standardize visualization_settings, and run/export results.
Idioma del texto original: inglés
Conception de dashboards Power BI — DAX, modèle de données, visualisations avancées et Row-Level Security. Se déclenche avec "Power BI", "DAX", "dashboard Power BI", "rapport Power BI", "modèle de données Power BI".
Idioma del texto original: francés
Draft and fill data privacy agreement templates — DPA, data processing agreement, GDPR, HIPAA BAA, business associate agreement, AI addendum. Produces signable DOCX files from Common Paper standard forms. Use when user says "DPA," "data processing agreement,"…
Idioma del texto original: inglés
Specialista di protezione dati italiana ed europea — analizza GDPR, D.Lgs. 196/2003 (Codice Privacy come modificato dal D.Lgs. 101/2018), linee guida del Garante, e conduce DPIA e valutazioni d'impatto trasferimenti. Attivazione quando: l'utente chiede di…
Idioma del texto original: italiano
When the user wants to configure, validate, or troubleshoot DataForSEO or another SEO data provider securely. Also use when provider credentials are missing before keyword, SERP, or SEO analysis work.
Idioma del texto original: inglés
Ensure Alpaca API is used for quality data, not yfinance fallback. Trigger when: (1) crypto volume filter fails unexpectedly, (2) zero-volume bars in data, (3) API key configuration issues.
Idioma del texto original: inglés
Production-grade SQL optimization for OLTP systems: EXPLAIN/plan analysis, balanced indexing, schema and query design, migrations, backup/recovery, HA, security, and safe performance tuning across PostgreSQL, MySQL, SQL Server, Oracle, SQLite.
Idioma del texto original: inglés
Foundation patterns for all Databricks SDK skills -- auth, client init, retry, error handling. Referenced by other skills, not used standalone.
Idioma del texto original: inglés
Troubleshoot Datadog API authentication issues (401/403 errors), understand API keys vs app keys, and configure correct regions. Use when hitting auth errors or setting up Datadog API access.
Idioma del texto original: inglés
Database performance and safety audit. 70+ checks across 13 dimensions (DB1-DB13): query patterns, indexes, schema design, connections, transactions, migrations, caching, query optimization, ORM anti-patterns, observability, data lifecycle, DB security, and…
Idioma del texto original: inglés
Используй когда база 1С нужна для workspace init, dump, build, launch или update, а логин/пароль отсутствуют, неизвестны, не проходят или вывод команды похож на проблему лицензии
Idioma del texto original: ruso
Execute SELECT queries on 30+ databases (SQLite, SQL Server, MySQL, PostgreSQL, Oracle, etc.) using DbCli. Returns data in JSON, table, or CSV format. Use when user needs to query databases, read data, or execute SELECT statements.
Idioma del texto original: inglés
Destructive Command Guard. Installs a pre-tool-use hook that blocks unrecoverable shell commands (rm -rf /, git reset --hard, git clean -fd, rm of .env / credentials, force-pushing to main, fork bombs, shred / dd, etc.) before the agent executes them. Use…
Idioma del texto original: inglés