Menú
Skills en este repositorio
SkillsMP ha recopilado 2449 skills de aibot88/sec_skill_store. Abre una skill para revisar su origen y sus detalles.
aibot88/sec_skill_storeMostrando 40 de 2449 skills recopiladas.
Use when designing or reviewing SCIM-based user lifecycle provisioning into Salesforce from Okta, Azure AD / Entra, or another IdP — create/update/deactivate, group-to-permission-set mapping, attribute mapping, and deprovisioning semantics. Triggers: 'scim…
Idioma del texto original: inglés
Playwright wrappers for scientific web scraping + AI-agent browsing — adds debugging visuals (cursor/click overlays, step markers, grid), popup/cookie handling, PDF capture (including the notoriously-hidden Chrome PDF viewer), resilient click/fill with…
Idioma del texto original: inglés
Relational-DB wrapper for scientific Python — `SQLite3` and `PostgreSQL` classes composed from a dozen shared mixins (connection, transaction, query, schema, index, row/batch ops, import/export, backup, blob, maintenance) with first-class numpy `ndarray` BLOB…
Idioma del texto original: inglés
Enhanced Python logging + warnings + exceptions for SciTeX — stdlib-compatible wrapper with SUCCESS/FAIL levels, auto file output, structured category warnings, and a 30+ class `SciTeXError` hierarchy. Public API — logger (`getLogger`, `configure`,…
Idioma del texto original: inglés
PyTorch neural-network building blocks for neuroscience and signal processing. Differentiable filters (`BandPassFilter`, `BandStopFilter`, `HighPassFilter`, `LowPassFilter`, `GaussianFilter`, `DifferentiableBandPassFilter`) operate on 1D channels-first…
Idioma del texto original: inglés
GitHub security-alert utilities. `check_github_alerts(repo=...)` returns the open Dependabot/CodeQL alerts as a structured list. Drop-in replacement for `gh api repos/{owner}/{repo}/dependabot/alerts` shell-outs in monitoring dashboards.
Idioma del texto original: inglés
Safe subprocess wrapper — `execute(['cmd', 'arg'])` is a list-only API (no shell injection), with sensible defaults for capture, timeout, and error reporting. Drop-in replacement for `subprocess.run([...], check=True, capture_output=True, text=True)`…
Idioma del texto original: inglés
SLOP scripting language for automating multi-MCP workflows via run_slop, authoring custom tool bodies, calling memory primitives from scripts. SLOP 腳本語言。 Use when: writing inline scripts, running .slop files, chaining MCP tool calls, exploring built-in…
Idioma del texto original: chino
API de Scripts Externos da Tray. Utilize quando o desenvolvedor precisar gerenciar scripts JavaScript customizados injetados na vitrine da loja, incluindo listagem, cadastro, atualização e exclusão.
Idioma del texto original: portugués
SCX-Studio-Pro projesinin Prisma ORM ve SQLite tabanlı veritabanı şemasını, model ilişkilerini, migrasyon süreçlerini ve veri yönetimini açıklar.
Idioma del texto original: turco
STRIDE脅威モデリングに基づくthreat-model.mdを生成。保護対象資産・信頼境界・脅威・緩和策を定義し、セキュリティ要件を導出する。
Idioma del texto original: japonés
Rédige et met à jour les spécifications SDD par cas d'utilisation (UC) : spec racine (projet principal) ou spec d'extension (fonction ajoutée à une racine existante). Exploitable par des agents IA. En CLI écrit dans docs/, sur claude.ai livre des artefacts…
Idioma del texto original: francés
Produit les documents de conception technique SDD (ARCHITECTURE.md, DEPLOYMENT.md, SECURITY.md, COMPLIANCE_MATRIX.md) à partir d'un SPEC-racine-*.md (+ extensions). En CLI écrit dans docs/, sur claude.ai livre des artefacts Markdown. S'active pour concevoir…
Idioma del texto original: francés
Integrate Seal threshold encryption and access control on Sui. Use when the user mentions Seal.
Idioma del texto original: inglés
Literature search and citation management for medical research. Searches PubMed, Semantic Scholar, and bioRxiv/medRxiv with verified citations. Anti-hallucination — every reference verified via API before inclusion. Generates BibTeX entries.
Idioma del texto original: inglés
Use when the user wants to search tweets on X (Twitter) by keyword, phrase, hashtag, from a specific user, within a date range, or with engagement filters. Covers both the live search endpoint (latest matches) and bulk tweet search extractions (up to 1,000…
Idioma del texto original: inglés
AI実行環境のシークレット境界設定。settings.json permissions.denyルールを生成し、シークレットへの事故的アクセスを防止する。
Idioma del texto original: japonés
機密情報検出スキル。APIキー、パスワード、トークン等の機密情報をコードから検出。git-secrets/truffleHog/gitleaks等のツールを統合。漏洩防止と早期発見に使用。
Idioma del texto original: japonés
Prevent secret leakage across git history, package artifacts, logs, and docs. Use when editing workflows, packaging configuration, environment files, or release automation.
Idioma del texto original: inglés
Decision-aid skill for runtime secret hygiene — fd passing, scratch surface verification, error-path safety, identifier hygiene, and avoiding the SECRETS_ENV aggregation anti-pattern
Idioma del texto original: inglés
Secure credential intake via local web form. Spin up a one-page server on Tailscale, paste keys, upload PEM/JSON files, hit submit — secrets land in .hex/secrets/ with 600 perms and auto-sync to launchctl + cc-connect.
Idioma del texto original: inglés
Hardcoded-secret detection — AWS keys, GitHub PATs, Slack tokens, Stripe keys, generic high-entropy strings. Pre-commit (`--staged-only`), explicit paths, or full repo. Use when guarding `git commit`, auditing a repo for leaked credentials, validating no…
Idioma del texto original: inglés
パーソナル秘書 & ライフ・ワーク管理システム。 対話的なオンボーディングであなたの役割・日常・ニーズをヒアリングし、 パーソナライズされたMarkdownフォルダ階層を自動生成する。 セットアップ済みの場合は管理モードに切り替わり、タスク追加やアイデア記録などを行う。
Idioma del texto original: japonés
Détecte les secrets, clés API et credentials exposés dans le code. À utiliser pour vérifier qu'aucun secret n'est dans le code. Se déclenche avec "secrets", "clé API exposée", "credential leak", "mot de passe dans le code", "token exposé", ".env", "secret…
Idioma del texto original: francés
List every regulated / licensed entity in a sector — CIMA-authorised funds, FCA-authorised firms, BaFin-licensed banks, CSRC-registered brokers, FSS-supervised listed issuers — pulled live from the relevant government/regulator register. Returns unmodified…
Idioma del texto original: inglés
Proactive secure-coding coach scoped to the file or topic you are working on — surfaces relevant SAST rule IDs, CWE patterns, language-specific PASS/FAIL code snippets. Use when about to write auth, crypto, SQL, deserialization, file-handling, or template…
Idioma del texto original: inglés
Use when performing deep security review of auth, crypto, secrets, or PII code requiring confidence-rated severity findings and OWASP checks
Idioma del texto original: Varios idiomas
Define, build, review, and harden production-grade fullstack applications with strong security posture. Use this skill when the user wants to establish a project baseline, implement software, review frontend/browser-side vulnerabilities, or strengthen…
Idioma del texto original: inglés
Generate secure microsoft word file validation code. Enforces secure generation of code validating a microsoft word file. Invoke when writing any microsoft word file validation related code. See "security-considerations" metadata for security limitations.
Idioma del texto original: inglés
Use when writing or reviewing code that handles external input, manages access, touches data or crypto, or changes dependencies. Triggers: endpoints, auth/authz, DB/ORM, file handling, secrets, "is this secure?", "security review". NOT for formatting, pure…
Idioma del texto original: inglés
Evaluate security posture and regulatory compliance for a system architecture. Produces .forge/security.md with auth model, data isolation, PII inventory, regulatory requirements, encryption audit, vendor assessment, certification roadmap, and STRIDE threat…
Idioma del texto original: inglés
Durcissement de la sécurité des APIs — rate limiting, validation d'entrée, headers de sécurité, CORS, protection contre les attaques courantes. À utiliser quand l'utilisateur sécurise une API, configure des headers de sécurité ou implémente du rate limiting.…
Idioma del texto original: francés
Execute STRIDE threat modeling, vulnerability scanning, and security control validation with risk scoring
Idioma del texto original: inglés
Automatisation d'audits de sécurité incluant scanning, reporting, intégration CI/CD et remediation tracking. Se déclenche avec "audit automatisé", "security scanning", "SAST", "DAST", "Trivy", "Snyk", "audit CI/CD"
Idioma del texto original: francés
[METHODOLOGY] Comprehensive security analysis against OWASP Top 10 standards (authentication, user input, database queries, external APIs). Preloaded by security-auditor agent.
Idioma del texto original: inglés
Базовая безопасность в реализации — валидация входных данных (Zod), secrets management, безопасные ошибки, auth/authz patterns, XSS/injection prevention, dependency audit, secure headers. DO/DON'T примеры. Активируй при написании любого кода, работающего с…
Idioma del texto original: ruso
Establish a security baseline for a website or web app. Use this skill when configuring HTTPS and TLS, setting security headers, planning secrets management, evaluating CSP policies, doing a basic security audit, or hardening a site before launch. Triggers on…
Idioma del texto original: inglés
中文优先：用于安全bountyhunter相关任务，帮助识别、设计、实现或验证对应工作流。English keywords: Hunt for exploitable, bounty-worthy security issues in repositories. Focuses on remotely reachable vulnerabilities that qualify for real reports instead of noisy local-only findings.
Idioma del texto original: inglés
Comprehensive AI-powered security scanning suite with 48 skills covering OWASP Top 10, 7 language-specific deep scanners (Go, TypeScript, Python, PHP, Rust, Java, C#), supply chain analysis, infrastructure-as-code scanning, and 3000+ checklist items. Use when…
Idioma del texto original: inglés
Vérification de conformité sécurité incluant ISO 27001, SOC 2, HIPAA, NIST et audit trail. Se déclenche avec "ISO 27001", "SOC 2", "HIPAA", "NIST", "conformité sécurité", "audit sécurité", "compliance"
Idioma del texto original: francés