aibot88/sec_skill_store - Page 15

commit-lint

Formats and lints code with ruff using a sub-agent. Use after tests pass to ensure code style compliance.

Langue du texte source : anglais

commit-lint

"Formats and lints code with ruff using a sub-agent. Use after tests pass to ensure code style compliance."user-invocable: false---

Langue du texte source : anglais

committing-changes

Commit work with feature-branch + PR discipline and enforce commit-message rules via git hooks. Use when committing code, opening a PR, or setting up a new repo's commit hygiene. Installs three git hooks (commit-msg subject rules, pre-commit auto-checks,…

Langue du texte source : anglais

common-appsec-patterns

Application security testing coordinator for common vulnerability patterns including XSS, injection flaws, and client-side security issues. Orchestrates specialized testing agents to identify and validate common application security weaknesses.

Langue du texte source : anglais

common-law-bilingual-contract-review

Vergleicht deutsche und englische Vertragsfassungen auf Bedeutungsdrift, Rangfolge, Definitionskonflikte und Haftungsrisiken.

Langue du texte source : allemand

common-law-contract-formation-consideration

Erklärt offer, acceptance, consideration, deed, promissory estoppel und UCC-Varianten ohne deutsche Gegenleistungsfalle.

Langue du texte source : allemand

common-law-litigation-discovery

Erklärt pleadings, discovery, disclosure, depositions, privilege, evidence und settlement aus UK US Sicht.

Langue du texte source : allemand

competitive-analysis-templates

Master competitive analysis templates including competitor deep-dives, battle cards, feature comparison matrices, and win/loss analysis. Use when analyzing competitors, creating battle cards for sales, positioning against alternatives, tracking competitive…

Langue du texte source : anglais

competitive-dynamics-analyser

Porter 5 Forces + game-theory primer for a specific market — equilibrium prediction, response-game tree, exit scenarios. Routes to red-team-strategist agent.

Langue du texte source : anglais

competitor-intelligence

Competitor analysis, competitor SEO, who ranks for, competitive audit, compare my SEO, competitor gap. Covers content gaps, technical SEO comparison (observable signals), SERP feature ownership, AI citation pattern observation, and qualitative link…

Langue du texte source : anglais

competitor-response

Assess competitive threats and decide how to respond

Langue du texte source : anglais

compliance-and-audit

Use when a project requires a compliance framework mapping, when risks need formal documentation, when audit evidence must be collected, or when producing a compliance attestation before release. Applies to SOC 2, ISO 27001, GDPR, PCI DSS, NIST CSF, and DORA.

Langue du texte source : anglais

compliance-architecture

Enterprise compliance architecture for SOC 2, HIPAA, GDPR, and PCI-DSS regulated systems. Use when designing compliant systems, preparing for audits, or implementing regulatory requirements. Covers compliance checklists, data protection controls, audit…

Langue du texte source : anglais

compliance-checklist

Provides a checklist framework for surfacing potentially applicable application-compliance obligations across declared jurisdictions (Japan / EU / US-CA / platform stores). The Skill is invoked by product-manager, security-reviewer, and technical-writer when…

Langue du texte source : anglais

compliance-frameworks

Specialista di compliance regolamentare italiana — valuta CONSOB, Banca d'Italia, AGCM, IVASS e regolamentazioni finanziarie UE con analisi gap e pianificazione rimedio. Attivazione quando: l'utente chiede di compliance regolamentare, normative CONSOB,…

Langue du texte source : italien

compliance-mode

Activate regulatory compliance specialist mode. Expert in SOX, GDPR, HIPAA, and PCI-DSS requirements. Use when reviewing code for compliance, implementing audit trails, data protection, or regulatory controls.

Langue du texte source : anglais

compliance-regelsatz-erstellen

Erzeugt einen standardisierten Compliance-Regelsatz für den KI-Einsatz in Kanzleien mit zehn konkreten Geboten: kein Privat-Account, keine Mandatsdaten ohne Anonymisierung, keine PDF-Uploads ohne AVV, Korrekturlesung als Pflicht sowie Kennzeichnung…

Langue du texte source : allemand

compliance-report

Build a compliance bundle — CycloneDX SBOM, SPDX license report, SARIF findings, OpenVEX/CycloneDX VEX, optional cosign signatures, manifest.json with SHA-256 sums, Markdown index. Use when assembling an audit bundle, SOC 2 attestation, supply-chain…

Langue du texte source : anglais

compliance-review

Run a TOGAF Architecture Compliance Assessment against any architecture document or implementation. Scores conformance across the 8 TOGAF compliance categories, identifies dispensation candidates, and produces an Architecture Board recommendation (Approve /…

Langue du texte source : anglais

compliance

Use when: compliance audit, GDPR/CCPA/SOC2/ISO27001/HIPAA/PCI-DSS review, regulatory requirements, data privacy audit, legal compliance check, India DPDP/M.A.N.A.V., EU AI Act, NIS2. Triggers: 'are we GDPR compliant', 'SOC2 audit', 'compliance check', 'data…

Langue du texte source : anglais

compliance-tracker

Track regulatory compliance for construction projects. Monitor permits, certifications, inspections, and regulatory requirements with automated alerts and reporting.

Langue du texte source : anglais

component-definition-builder

Create and manage OSCAL component definitions for reusable security control implementations. Inspired by CivicActions components and community patterns. Use for building component libraries and shared control implementations.

Langue du texte source : anglais

composable-svelte-deployment

Production deployment patterns for Composable Svelte SSR applications. Use when deploying to Fly.io, Docker, or any cloud platform. Covers multi-stage Docker builds, Fly.io configuration, security hardening, performance optimization, and integration with…

Langue du texte source : anglais

compose-preview-review

Review pull requests that change Compose UI by rendering @Preview composables on base and head and diffing them. Use when reviewing a UI PR locally, authoring an agent-opened PR that touches UI, or wiring compose-preview/main baselines and PR-comment GitHub…

Langue du texte source : anglais

composer-dependencies

Composer dependency management playbook for safe, systematic package updates. Use when the user asks to update Composer dependencies, audit packages for security vulnerabilities, manage composer.lock, configure Dependabot or Renovate for automated updates,…

Langue du texte source : anglais

conda-forge-expert

Comprehensive guide for conda-forge recipe development. Handles legacy (meta.yaml) and modern (recipe.yaml) formats, linting, CI troubleshooting, and feedstock maintenance. Enhanced with patterns from real conda-forge feedstocks (2025). USE THIS SKILL WHEN:…

Langue du texte source : anglais

config-environment-conventions

Conventions for service configuration and environment variables: naming, precedence, validation at startup, secrets handling, environment detection, and documentation patterns

Langue du texte source : thaï

config-management

Validate config at startup, secrets in memory only. Never read config during requests, never store secrets in env vars. Use node-env-resolver for multi-source config.

Langue du texte source : anglais

configuration-workbook-authoring

Author the Salesforce Configuration Workbook — the structured, reviewable handoff document an admin uses to execute a feature across Objects/Fields, Page Layouts, Profiles/PSGs, Sharing, Validation, Automation, List Views, Reports, Integrations, and Data.…

Langue du texte source : anglais

configure-canvas-mcp

Configure the Canvas Authoring MCP server for Claude Code, VS Code Copilot, or GitHub Copilot CLI. USE WHEN "configure MCP", "set up MCP server", "MCP not working", "connect Canvas Apps MCP", "canvas-authoring not available", "MCP not configured", "set up…

Langue du texte source : anglais

configure-hooks

This skill should be used when the user says "configure hooks", "set up quality gates", "add PostToolUse hook", "set up permission hooks", "create hook configuration", "add typecheck hook", "set up secret-scan hook", or wants to configure event-driven hooks…

Langue du texte source : anglais

configure-wasp

configure Wasp framework features and set up their app's branding (meta tags, SEO), authentication (email, social auth providers), database, email providers, styling (tailwind, shadcn), etc. Use when the user wants to add or set up Wasp-specific functionality.

Langue du texte source : anglais

configuring-console-app-di

Implements dependency injection using GenericHost in .NET Console Applications. Use when building console applications that require DI, hosted services, or background tasks.

Langue du texte source : anglais

configuring-dependency-injection

Configures Dependency Injection using Microsoft.Extensions.DependencyInjection and GenericHost. Use when setting up DI container, registering services, or implementing IoC patterns in .NET projects.

Langue du texte source : anglais

conflict-of-interest-checker

Check for co-authorship and institutional conflicts between authors and suggested reviewers to support peer review integrity. Coauthorship and institutional conflict detection supported.

Langue du texte source : anglais

connect-gcp

Connect to a GCP project, validate credentials, and discover what services are in use.

Langue du texte source : anglais

connection-auth-rules

Build a Connection Auth Rules for a Monte Carlo connection type. Fetches live connector schemas and transform steps from the apollo-agent repo.

Langue du texte source : anglais

constitution-validator

Constitution compliance validator focusing on Principle XI (No Hardcoded Values). Detects hardcoded URLs, timeouts, limits, and identifiers that should be configurable. Use proactively when implementing business logic, adding new features, or reviewing PRs…

Langue du texte source : anglais

consumer-goods-cloud-setup

Consumer Goods Cloud setup: visit execution, retail execution, route planning, in-store task management, compliance checks, off-shelf detection, and image recognition. NOT for Field Service dispatch (use field-service-core-setup). NOT for B2B Commerce…

Langue du texte source : anglais

container-audit

Audit Dockerfiles and docker-compose files for base image, user privileges, secret leaks, layer efficiency, signal handling, healthchecks, and compose safety. One sub-agent per Dockerfile. Static, live (Trivy/Grype), and apply modes.

Langue du texte source : anglais