aibot88/sec_skill_store - Página 65

sql-injection-mitigation

Prévenir les injections SQL. Utiliser quand on vérifie qu'une requête utilise db.all(sql, [params]) correctement.

Idioma del texto original: francés

sqlite-guide

Guide pour écrire des requêtes SQL et concevoir des schémas SQLite avec les bonnes pratiques. À utiliser quand l'utilisateur travaille avec SQLite, écrit des requêtes SQL ou conçoit des schémas de base de données. Se déclenche aussi avec "requête SQL",…

Idioma del texto original: francés

sqlite

SQLite - embedded database, SQL queries, schema design, Python integration, optimization

Idioma del texto original: inglés

sre-runbook-author

Создаёт исполняемый runbook для конкретного сценария — алерта, отказа, плановой операции. Соблюдает структуру (TL;DR, диагностика, митигация, эскалация), предпочитает копипастабельные команды объяснениям. Используй, когда пользователь хочет «написать…

Idioma del texto original: ruso

sruja-architecture

Discovers architecture from codebases and authors Sruja DSL (repo.sruja). Use when discovering architecture, generating or refactoring repo.sruja, validating architecture against code, maintaining architecture docs, or when the user mentions…

Idioma del texto original: inglés

ssllabs

Comprehensive TLS/SSL analysis via Qualys SSL Labs — grades cipher suites, certificate chains, protocol versions, and known vulnerabilities

Idioma del texto original: inglés

sst-dev-review

Post-cycle second-pass review of the last `/sst-dev-cycle` commit on any project. Reads what shipped (code + tests + spec + TODO + docs), evaluates it against the spec item it closed along several axes (spec parity, correctness, coverage, discoverability,…

Idioma del texto original: inglés

sst-llm-judge-ranker

Maintain a ranked list of N artifacts (drafts, designs, code variants, research reports, ...) by comparing each new candidate against the current top and bottom of the list, using LLM judgment as the comparator. Supports both batch ranking (compare every…

Idioma del texto original: inglés

stablecoin-risk-check

Assess stablecoin safety and risk profile across 500+ protocols. Covers depeg history, reserve composition, audit status, regulatory exposure, and market cap trends for major stablecoins (USDT, USDC, DAI, USDS, USDe, FDUSD, PYUSD, GHO, crvUSD, and more). Use…

Idioma del texto original: inglés

stablecoin-yield-vs-tradfi

Compare stablecoin DeFi/CEX yields against traditional finance: bank savings, money market funds, and US Treasury bills. Uses Barker's real-time yield data alongside TradFi benchmarks. Use when users ask "is DeFi better than a savings account", "stablecoin vs…

Idioma del texto original: inglés

staff-code-review

Staff-engineer-level code review that goes beyond correctness to evaluate architectural alignment, system-level implications, failure modes, performance, scalability, backward compatibility, observability, security, and cross-team impact. Use when reviewing a…

Idioma del texto original: inglés

staff-review

Senior Staff Engineer code review with SOLID principles, security analysis, and architecture critique. Use for significant changes, new systems, or when you want ruthless technical feedback.

Idioma del texto original: inglés

staff-scheduling

Audit workforce scheduling systems for labor optimization and compliance. Use when you need to evaluate labor demand forecasting accuracy, shift generation and optimization algorithms, skill-based staff routing, FLSA overtime compliance, predictive scheduling…

Idioma del texto original: inglés

stand-der-technik-recherche

Recherche Stand der Technik vor eigener Patentanmeldung. Identifiziert anhand des Erfindungsmaterials und der ermittelten CPC-IPC-Klassen die wichtigsten Veroeffentlichungen die der Anmeldetag-Reife der Mandantenerfindung im Wege stehen koennten. Patent- und…

Idioma del texto original: alemán

stewardship

Stewardship virtues (Care, Curiosity, Humility, Diligence). Use when authoring or auditing a plugin for healthy maintenance posture.

Idioma del texto original: inglés

stix-taxii-intelligence-skill

STIX/TAXII threat intelligence format and sharing

Idioma del texto original: inglés

store-compliance

Pre-submission audit for Apple App Store and Google Play Store compliance. Checks App Store Review Guidelines (safety, performance, business, design, legal sections) and Google Play Developer Policies (user data, permissions, deceptive behavior, monetization,…

Idioma del texto original: inglés

stormwater-management

Skill for integrated stormwater management and green infrastructure design with SWMM modeling, hydrologic analysis, BMP sizing, and MS4 permit compliance.

Idioma del texto original: inglés

story-bank

Personal anecdote and experience storage — save your stories, failures, wins, observations, and quotes with tags for instant retrieval when writing content. Adds authenticity and originality to every piece. The most underrated content differentiator.

Idioma del texto original: inglés

strategy-stress-testing-skill

Strategy robustness testing, scenario-based evaluation, vulnerability identification, and adaptation planning

Idioma del texto original: inglés

streamlit-master-architect

Architect-level Streamlit development for building, refactoring, debugging, testing, and deploying Streamlit apps (single-page or multipage) with correct rerun/state/caching/fragments, AppTest-based testing, custom components v2, safe theming/CSS,…

Idioma del texto original: inglés

strict-audit

Жёсткий No-Go аудит для safety-critical архитектуры, кода и PR: выдаёт PASS/FAIL, блокирующие замечания и обязательные доказательства по таймингам, измерениям и fault-injection. Использовать перед включением силовой части и для спорных…

Idioma del texto original: ruso

stride

Run a STRIDE threat-modelling pass against an access-surface map a software engineer has already produced for a feature they're about to ship. Use when the engineer has a surface map in hand and wants threats walked across the six STRIDE categories before…

Idioma del texto original: inglés

stride-threat-modeling-framework

Systematically identify and classify threats using the software-centric STRIDE framework across six categories: Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege.

Idioma del texto original: inglés

stripe-link-wallet

Use the Stripe Link CLI as an agent wallet to create spend requests, generate one-time-use payment credentials, and complete 402 / Machine Payment Protocol (MPP) payment flows on the user's behalf. Triggers on intents like "buy", "purchase", "pay for", "spend…

Idioma del texto original: inglés

stripe-webhook-signature-verification

Use when validating incoming Stripe webhook requests in a Node.js or Next.js backend before processing any payment event. Verifies the `stripe-signature` header against `STRIPE_WEBHOOK_SECRET` using Stripe's HMAC-SHA256 scheme, and rejects replays older than…

Idioma del texto original: inglés

student-personalization

Audit adaptive learning and student personalization systems for pedagogical quality. Use when you need to evaluate learning path algorithms (branching, remediation, acceleration), mastery detection models (Bayesian, IRT, threshold-based), knowledge graph…

Idioma del texto original: inglés

studio-operations

Audit a media production studio or post-production facility. Analyzes facility scheduling and utilization, equipment lifecycle tracking, editorial and VFX pipelines, color grading and finishing workflows, digital asset management (MAM/DAM), IMF/MXF format…

Idioma del texto original: inglés

study-design-identifier

Identifies the real underlying study design used in a medical or biomedical paper, distinguishes primary and secondary design components when papers are hybrid, and converts the paper into an evidence-aware design label suitable for literature appraisal,…

Idioma del texto original: inglés

sui-zk-login

Add Sui zkLogin for Google, Apple, Facebook, or Twitch sign-in. Use when the user mentions zkLogin, social login, or OAuth-based Sui auth.

Idioma del texto original: inglés

supabase-auth

This skill should be used when configuring Supabase authentication, setting up auth providers, managing users, working with JWTs, or implementing auth flows in applications. Trigger when: "Supabase auth", "authentication", "sign up", "sign in", "OAuth…

Idioma del texto original: inglés

supabase-edge-functions

This skill should be used when developing, deploying, or managing Supabase Edge Functions, working with Deno in Supabase, or building serverless endpoints. Trigger when: "edge function", "deploy function", "supabase functions", "Deno function", "serverless…

Idioma del texto original: inglés

supabase-projects

This skill should be used when managing Supabase projects or organizations, creating new projects, listing projects, checking project status, retrieving API keys, pausing or restoring projects, or working with project costs and billing. Trigger when: "create…

Idioma del texto original: inglés

supabase-realtime

This skill should be used when working with Supabase Realtime, setting up database change listeners, implementing presence, using broadcast channels, or building real-time features. Trigger when: "Supabase Realtime", "realtime subscription", "listen for…

Idioma del texto original: inglés

supabase-security

Audit de sécurité complet pour les projets Supabase. Lance un pentest automatisé qui vérifie RLS, buckets, auth, keys exposées, et génère un rapport avec remediation. Utiliser quand l'utilisateur dit "audit supabase", "sécurité supabase", "vérifier mon…

Idioma del texto original: francés

supabase-troubleshooting

This skill should be used when debugging Supabase issues, viewing logs, running performance advisors, diagnosing common errors, or searching Supabase documentation for solutions. Trigger when: "Supabase logs", "debug Supabase", "Supabase error", "performance…

Idioma del texto original: inglés

supabase-ts

Production-ready Supabase integration patterns for Next.js/React/TypeScript applications. Use when working with Supabase for (1) SSR authentication with @supabase/ssr, (2) Database operations and migrations, (3) Row Level Security (RLS) policies, (4) Storage…

Idioma del texto original: inglés

supply-chain-advisory

Supply chain security: bad-version detection, incident response, lockfile audit, artifact scan.

Idioma del texto original: inglés

supply-chain-audit

Analyze project dependencies for supply chain risks. Checks maintainer count, commit frequency, CVE history, abandonment signals, bus factor, and security policy presence for each direct dependency. Supports npm, pip, cargo, go mod, and composer. Use when:…

Idioma del texto original: inglés

supply-chain-risk

Assess supply chain risk exposure and resilience posture. Analyzes supplier dependency mapping (Tier 1/2/3), geographic concentration risk, single-source vulnerability, disruption scenario modeling (pandemic, trade war, port closure), Monte Carlo simulation,…

Idioma del texto original: inglés