Menu
Skills dans ce dépôt
SkillsMP a collecté 2 449 skills depuis aibot88/sec_skill_store. Ouvrez un skill pour examiner sa source et ses détails.
aibot88/sec_skill_storeAffichage de 40 skills collectés sur 2 449.
MCPツールとAPI統合のセキュリティ設計を体系化するスキル。 脅威整理、制御設計、設定検証を通じて安全なツール運用を支援する。 Anchors: • Web Application Security / 適用: 脅威モデリング / 目的: 攻撃面の整理 • OWASP ASVS / 適用: セキュリティ要件 / 目的: 制御の網羅性 Trigger: Use when designing tool security controls, validating security configs, or…
Langue du texte source : japonais
Guide for using ToolHive CLI (thv) to run and manage MCP servers and skills. Use when running, listing, stopping, building, or configuring MCP servers locally. Covers server lifecycle, registry browsing, secrets management, client registration, groups,…
Langue du texte source : anglais
Python audit tooling: ruff (linting), mypy (types), bandit (SAST), pip-audit (CVEs), radon (complexity), vulture (dead code), mutmut (mutations). Use during audit phases for Python projects.
Langue du texte source : russe
Authors or extends a skill in mc-agent-toolkit. Gates for forbidden buckets and name collisions, applies CONTRIBUTING's extend-or-split rules, then edits a peer skill or hands off to Anthropic's skill-creator and walks the registration checklist.
Langue du texte source : anglais
Use when the user wants to track a hashtag on X (Twitter). Pulls recent tweets using the hashtag, the top posts, the unique authors, and can set up continuous monitoring. Covers one-shot reads and long-running hashtag monitors.
Langue du texte source : anglais
Collection of expert-level TRAE agent system prompts for code generation, debugging, optimization, security auditing, and workflow acceleration. Reference library — use prompts as templates for specialized agent behavior.
Langue du texte source : anglais
Transcribe audios (notas de voz de WhatsApp y otros formatos: .ogg, .opus, .mp3, .m4a, .wav, .webm) a texto en español, y encadena automáticamente con el flujo procesos/procesar-audio.md para crear las actividades CRM en Holded y actualizar las fichas del…
Langue du texte source : espagnol
Diagnose and fix MCP server connection issues zwischen Claude Code, Claude Desktop, and MCP servers. Umfasst Windows argument parsing, Authentifizierung failures, transport issues, and platform-specific debugging. Verwenden wenn Claude Code or Claude Desktop…
Langue du texte source : anglais
Analyze raw T-SQL source code for anti-patterns, security risks, and static performance smells. Applies 50 checks (T1–T50) across structural, correctness, security, deprecated syntax, and performance categories. No execution plan required.
Langue du texte source : anglais
Use when the user wants to read replies to a specific tweet on X (Twitter). Fetches the reply thread, reply authors, engagement on each reply, and filters for top replies. Read-only; for posting replies see post-tweets.
Langue du texte source : anglais
使用 Python + UV 读写 Twitter/X 数据的技能，零第三方依赖（纯标准库），通过直接传入 auth_token + ct0 Cookie 完成认证。在 Minis 环境中，Cookie 可通过 browser_use 工具 导航到 x.com 后用 get_cookies 动作自动获取，无需手动复制。支持抓取主页时间线、关注列表、 书签（含书签文件夹）、搜索、用户资料、用户推文、点赞、推文详情（单条/含回复）、List 时间线、…
Langue du texte source : chinois
Typosquat and malicious-package detection across installed dependencies (or a single prospective addition) — cross-checks AI-malware family intelligence, package-name similarity to known popular packages, low maintainer-health signals. Use when auditing a…
Langue du texte source : anglais
Use when designing, polishing, prototyping, or reviewing user-facing UI, frontend screens, visual systems, interaction prototypes, slide decks, motion/effects, artifact handoff, or anti-slop visual quality. Trigger for "make this UI look better", "design a…
Langue du texte source : anglais
Use when: auditing UI/UX quality, checking WCAG accessibility, reviewing spacing/layout/grid, mobile responsiveness issues, dark mode review, component pattern audit, pre-ship UI checklist, contrast ratios, touch targets, animation review. Triggers: 'check…
Langue du texte source : anglais
Pre-delivery quality audit — Anti-Pattern + Coverage Gap + Wiring + E2E + Performance + Security. Writes .ultra/test-report.json; no state.db writes.
Langue du texte source : anglais
Erstellt Schulungs-, Audit- und Fortbildungspläne für Anlagenbetreiber, Immissionsschutzbeauftragte und Abfallverantwortliche.
Langue du texte source : allemand
Prüft Störfallrelevanz, Betreiberpflichten, Sicherheitsdokumentation, Anordnungen und Compliance-Lücken.
Langue du texte source : allemand
Cross-reference compound IDs across 50+ databases (ChEMBL, DrugBank, PubChem, ChEBI, PDB, KEGG) via UniChem REST API. Resolve InChIKeys to source IDs, find structurally related compounds by connectivity, batch-translate between naming systems. No auth…
Langue du texte source : anglais
NDA-Verhandlungshilfe fuer die empfangende Seite. Zwei Modi: (A) Standard-Destillation aus 1 bis n eigenen NDAs und frei beschreibbarer Erfahrung in einen konsolidierten Haltelinien-Standard mit Ampelmatrix ROT/GELB/GRUEN; (B) Redlining-Lauf, der einen…
Langue du texte source : allemand
Abmahnung versenden (Sendemodus) oder eine erhaltene Abmahnung triagieren (Empfangsmodus). Verwenden bei Marken-, Urheber-, Patent- oder UWG-Verstößen. Produziert einen Abmahnungsentwurf mit modifizierter Unterlassungserklärung, Streitwert und Kostenansatz…
Langue du texte source : allemand
Praxis DocuSign und Adobe Sign fuer Wandeldarlehen: Authentifizierung der Unterzeichner (E-Mail-OTP, SMS-OTP, eID), Pruefspur und Audit Trail, Aufbewahrung zehn Jahre (§ 147 AO), Vorhalten der PDF mit Zertifikatsblock. Versandreihenfolge und…
Langue du texte source : allemand
Audit toolkit health, freshness, security, standards. Keywords: updater, audit, outdated, stale, security, OWASP, refresh, check links, standards, compliance
Langue du texte source : anglais
Load this skill for any up-fetch task: `up(fetch, getDefaultOptions?)`, `upfetch(url, options?)`. Covers dynamic defaults, auth, request shaping, validation, error handling, lifecycle timing, and runtime caveats.
Langue du texte source : anglais
Load relevant code quality reference files (architecture, testing, security, type design, etc.) and apply their invariants to the current task. ALWAYS invoke before designing, writing, or editing ANY code.
Langue du texte source : anglais
Submit URLs for automated malware and phishing analysis, then retrieve safety verdicts and screenshots via urlscan.io
Langue du texte source : anglais
US-Counterfeit-Enforcement: Trademark Counterfeiting Act 18 U.S.C. § 2320, CBP Recordation 19 C.F.R. § 133, IPR e-Recordation, Lanham Act § 34 Injunctive Relief, § 35 Treble Damages und Statutory Damages, Attorney Fees Octane Fitness 572 U.S. 545. Laedt, wenn…
Langue du texte source : allemand
HIPAA Security Rule expert for US healthcare compliance. Deep knowledge of 45 CFR Part 164 Subpart C, Administrative/Physical/Technical Safeguards, Required vs Addressable specifications, Risk Analysis, Business Associate Agreements, and HHS OCR enforcement.
Langue du texte source : anglais
US-Vertriebsrecht fuer Luxus: Resale Price Maintenance nach Leegin 551 U.S. 877 (Rule of Reason), MAP-Policies, Unilateral Colgate Doctrine, Tiffany v. Costco Trademark-Dilution. Laedt, wenn der Nutzer 'US Resale Price Maintenance', 'MAP Policy', 'Tiffany…
Langue du texte source : allemand
This skill should be used when the user asks to "add an endpoint to users", "create a route in users service", "write tests for users", "test users service", "add auth to a route", "work on users API", or mentions the users service, Fastify routes, or user…
Langue du texte source : anglais
Dual-mode skill for github.com/LerianStudio/lib-commons v5, Lerian's shared Go library — the non-observability surface. Sweep Mode dispatches parallel explorers to detect DIY implementations that should use lib-commons, with file:line replacement precision.…
Langue du texte source : anglais
Dual-mode skill for github.com/LerianStudio/lib-observability v1.0.0, Lerian's OpenTelemetry foundation. Sweep Mode dispatches 5 parallel explorers to detect DIY logging/metrics/redaction/OTel-attribute usage that should route through lib-observability.…
Langue du texte source : anglais
Use at the start of any session — establishes the cognitive contract that pandastack skills must be checked BEFORE any response or action, including clarifying questions.
Langue du texte source : anglais
Guides the initial analysis and impact assessment of a V8 security report, strictly excluding implementation or fixing.
Langue du texte source : anglais
Mappt Term-Sheet-Daten auf Vertragsfelder, erkennt fehlende Punkte, Widersprüche und rechtlich relevante Abweichungen.
Langue du texte source : allemand
Deployment validation pipeline — 4 fasi (static, security, smoke, score). Valida un deploy Vercel (preview o production) con TypeScript, ESLint, Jest coverage su file toccati, Semgrep, npm audit, Playwright smoke su TUTTE le 142 route del gestionale (8…
Langue du texte source : Indéterminée
Audit an existing Sim integration against the service API docs and repository conventions, then report and fix issues across tools, blocks, outputs, OAuth scopes, triggers, and registry entries. Use when validating or repairing a service integration under…
Langue du texte source : anglais
Validate MCP server connection, tool discovery, schema correctness, and functional behavior. 驗 MCP 伺服器連線、工具發現、模式正確性及功能行為。 Use when: verifying new MCP server implementation, checking schema compliance, testing tool error handling.
Langue du texte source : chinois
Periodic smoke test for behavioral mechanism compliance. Scans the workspace for statically-detectable violations of rules in mechanism-registry.md. Use when: (1) user says "validate mechanisms", "檢查機制", "/validate-mechanisms", (2) as part of a periodic…
Langue du texte source : anglais
Framework health check combining isolation and mechanism compliance. Two modes: (1) Isolation — scan for multi-company contamination (scope headers, memory tags, cross-company conflicts). (2) Mechanisms — static smoke test of behavioral canaries from…
Langue du texte source : anglais
[PROTOCOL] Cross-cutting validation chains. Defines which validators to run, in what order, with which triggers, across marketing / dev / design domains. Preloaded by lead agents (marketing-lead, dev-lead, design-lead). Pure reference — no triggers, not…
Langue du texte source : anglais