Skip to main content
kalshamsi
GitHub クリエイタープロフィール

kalshamsi

3 件の GitHub リポジトリにある 27 件の収集済み skills をリポジトリ単位で表示します。

収集済み skills
27
リポジトリ
3
更新
2026年7月7日
リポジトリエクスプローラー

リポジトリと代表的な skills

premortem-plan-check
プロジェクト管理専門家

Before finalizing any plan, run a premortem — assume the plan has already failed, list the likeliest causes, and reshape the plan with mitigations before presenting it. Use this whenever producing something that will be executed later: project plans,…

2026年7月7日
reversibility-check
プロジェクト管理専門家

Before executing any hard-to-reverse or destructive step, classify it as a one-way or two-way door; for one-way doors, substitute a reversible alternative or get explicit confirmation, and order work so mistakes can be undone. Use this whenever a plan or…

2026年7月7日
stop-and-reassess
ソフトウェア開発者

After two failed attempts at the same problem, stop and diagnose before trying again — never make a third attempt built on the same assumption. Use this whenever an approach has failed twice in a row, whenever you notice yourself making similar edits,…

2026年7月7日
answer-first-structure
プロジェクト管理専門家

Decide the bottom line before writing and put it in the first sentence, with only decision-relevant support after it. Use this whenever producing anything a reader will consume to decide or act — reports, emails, summaries, memos, recommendations, status…

2026年7月7日
assess-before-acting
ソフトウェア開発者

Classify the user's intent before producing anything. When a message describes a problem, shares something that "seems off" or "doesn't look right", asks "what do you think", "does this make sense", "why is this happening", or thinks out loud without…

2026年7月7日
assumption-audit
プロジェクト管理専門家

Before finalizing any analysis, recommendation, or decision made under incomplete information, surface the load-bearing assumptions, tag each as supported or unsupported by the given evidence, and stress-test the conclusion against the weakest one. Use this…

2026年7月7日
calibrated-claims
プロジェクト管理専門家

Attach explicit, evidence-tied confidence to every load-bearing judgment instead of asserting flatly or retreating into "it depends". Use this whenever the task involves a forecast, an estimate, a feasibility or go/no-go call, a deadline or risk question, or…

2026年7月7日
finish-the-turn
ソフトウェア開発者

Audit the final section of a response before ending the turn - if it promises work, lists next steps the assistant could do itself, or defers with "let me know if...", do that work now instead of ending. Use this on every long, tedious, or multi-part task…

2026年7月7日
収集済み skill 14 件中 8 件を表示しています。
pci-dss-audit
情報セキュリティアナリスト

Use when auditing code for PCI-DSS v4.0 compliance, reviewing cardholder data handling, checking credit-card storage and transmission, hunting PAN logging, or answering "is this code PCI-compliant?".

2026年4月16日
docker-scout-scanner
情報セキュリティアナリスト

Use when scanning Docker images for CVEs, auditing Dockerfiles for misconfigurations, reviewing base image choices, generating container SBOMs, hardening docker-compose configurations, or any container/OCI security concern.

2026年4月16日
bandit-sast
情報セキュリティアナリスト

Use when scanning Python code for security vulnerabilities, running Bandit, performing Python SAST, auditing Python security bugs, or reviewing Python source for injection, weak crypto, or insecure deserialization.

2026年4月16日
mobile-security
情報セキュリティアナリスト

Use when auditing an Android or iOS application for security issues, reviewing React Native or Flutter code, checking mobile authentication or insecure data storage, or covering the OWASP Mobile Top 10:2024.

2026年4月15日
security-headers-audit
情報セキュリティアナリスト

Use when reviewing HTTP security headers, checking a Content-Security-Policy, auditing CORS or HSTS configuration, evaluating X-Frame-Options or Permissions-Policy, inspecting header middleware, or hardening a web application's response headers.

2026年4月15日
security-test-generator
ソフトウェア品質保証アナリスト・テスター

Use when writing security tests for a web application, building a vulnerability regression suite, creating pentest-style automated tests, generating runnable injection/XSS/auth test code, or adding security coverage to an existing test suite.

2026年4月15日
api-security-tester
情報セキュリティアナリスト

Use when auditing REST or GraphQL API endpoints, checking API authentication and authorization, hunting BOLA or broken access control, reviewing rate limiting, or covering the OWASP API Security Top 10.

2026年4月15日
socket-sca
情報セキュリティアナリスト

Use when scanning project dependencies for supply-chain risk, running Socket SCA on npm/pip/pypi packages, hunting typosquats or malicious packages, or auditing third-party dependency health before a release.

2026年4月15日
収集済み skill 11 件中 8 件を表示しています。
3 件中 3 件のリポジトリを表示
すべてのリポジトリを表示しました