aibot88/sec_skill_store - Página 15

commit-lint

Formats and lints code with ruff using a sub-agent. Use after tests pass to ensure code style compliance.

Idioma do texto original: inglês

commit-lint

"Formats and lints code with ruff using a sub-agent. Use after tests pass to ensure code style compliance."user-invocable: false---

Idioma do texto original: inglês

committing-changes

Commit work with feature-branch + PR discipline and enforce commit-message rules via git hooks. Use when committing code, opening a PR, or setting up a new repo's commit hygiene. Installs three git hooks (commit-msg subject rules, pre-commit auto-checks,…

Idioma do texto original: inglês

common-appsec-patterns

Application security testing coordinator for common vulnerability patterns including XSS, injection flaws, and client-side security issues. Orchestrates specialized testing agents to identify and validate common application security weaknesses.

Idioma do texto original: inglês

common-law-bilingual-contract-review

Vergleicht deutsche und englische Vertragsfassungen auf Bedeutungsdrift, Rangfolge, Definitionskonflikte und Haftungsrisiken.

Idioma do texto original: alemão

common-law-contract-formation-consideration

Erklärt offer, acceptance, consideration, deed, promissory estoppel und UCC-Varianten ohne deutsche Gegenleistungsfalle.

Idioma do texto original: alemão

common-law-litigation-discovery

Erklärt pleadings, discovery, disclosure, depositions, privilege, evidence und settlement aus UK US Sicht.

Idioma do texto original: alemão

competitive-analysis-templates

Master competitive analysis templates including competitor deep-dives, battle cards, feature comparison matrices, and win/loss analysis. Use when analyzing competitors, creating battle cards for sales, positioning against alternatives, tracking competitive…

Idioma do texto original: inglês

competitive-dynamics-analyser

Porter 5 Forces + game-theory primer for a specific market — equilibrium prediction, response-game tree, exit scenarios. Routes to red-team-strategist agent.

Idioma do texto original: inglês

competitor-intelligence

Competitor analysis, competitor SEO, who ranks for, competitive audit, compare my SEO, competitor gap. Covers content gaps, technical SEO comparison (observable signals), SERP feature ownership, AI citation pattern observation, and qualitative link…

Idioma do texto original: inglês

competitor-response

Assess competitive threats and decide how to respond

Idioma do texto original: inglês

compliance-and-audit

Use when a project requires a compliance framework mapping, when risks need formal documentation, when audit evidence must be collected, or when producing a compliance attestation before release. Applies to SOC 2, ISO 27001, GDPR, PCI DSS, NIST CSF, and DORA.

Idioma do texto original: inglês

compliance-architecture

Enterprise compliance architecture for SOC 2, HIPAA, GDPR, and PCI-DSS regulated systems. Use when designing compliant systems, preparing for audits, or implementing regulatory requirements. Covers compliance checklists, data protection controls, audit…

Idioma do texto original: inglês

compliance-checklist

Provides a checklist framework for surfacing potentially applicable application-compliance obligations across declared jurisdictions (Japan / EU / US-CA / platform stores). The Skill is invoked by product-manager, security-reviewer, and technical-writer when…

Idioma do texto original: inglês

compliance-frameworks

Specialista di compliance regolamentare italiana — valuta CONSOB, Banca d'Italia, AGCM, IVASS e regolamentazioni finanziarie UE con analisi gap e pianificazione rimedio. Attivazione quando: l'utente chiede di compliance regolamentare, normative CONSOB,…

Idioma do texto original: italiano

compliance-mode

Activate regulatory compliance specialist mode. Expert in SOX, GDPR, HIPAA, and PCI-DSS requirements. Use when reviewing code for compliance, implementing audit trails, data protection, or regulatory controls.

Idioma do texto original: inglês

compliance-regelsatz-erstellen

Erzeugt einen standardisierten Compliance-Regelsatz für den KI-Einsatz in Kanzleien mit zehn konkreten Geboten: kein Privat-Account, keine Mandatsdaten ohne Anonymisierung, keine PDF-Uploads ohne AVV, Korrekturlesung als Pflicht sowie Kennzeichnung…

Idioma do texto original: alemão

compliance-report

Build a compliance bundle — CycloneDX SBOM, SPDX license report, SARIF findings, OpenVEX/CycloneDX VEX, optional cosign signatures, manifest.json with SHA-256 sums, Markdown index. Use when assembling an audit bundle, SOC 2 attestation, supply-chain…

Idioma do texto original: inglês

compliance-review

Run a TOGAF Architecture Compliance Assessment against any architecture document or implementation. Scores conformance across the 8 TOGAF compliance categories, identifies dispensation candidates, and produces an Architecture Board recommendation (Approve /…

Idioma do texto original: inglês

compliance

Use when: compliance audit, GDPR/CCPA/SOC2/ISO27001/HIPAA/PCI-DSS review, regulatory requirements, data privacy audit, legal compliance check, India DPDP/M.A.N.A.V., EU AI Act, NIS2. Triggers: 'are we GDPR compliant', 'SOC2 audit', 'compliance check', 'data…

Idioma do texto original: inglês

compliance-tracker

Track regulatory compliance for construction projects. Monitor permits, certifications, inspections, and regulatory requirements with automated alerts and reporting.

Idioma do texto original: inglês

component-definition-builder

Create and manage OSCAL component definitions for reusable security control implementations. Inspired by CivicActions components and community patterns. Use for building component libraries and shared control implementations.

Idioma do texto original: inglês

composable-svelte-deployment

Production deployment patterns for Composable Svelte SSR applications. Use when deploying to Fly.io, Docker, or any cloud platform. Covers multi-stage Docker builds, Fly.io configuration, security hardening, performance optimization, and integration with…

Idioma do texto original: inglês

compose-preview-review

Review pull requests that change Compose UI by rendering @Preview composables on base and head and diffing them. Use when reviewing a UI PR locally, authoring an agent-opened PR that touches UI, or wiring compose-preview/main baselines and PR-comment GitHub…

Idioma do texto original: inglês

composer-dependencies

Composer dependency management playbook for safe, systematic package updates. Use when the user asks to update Composer dependencies, audit packages for security vulnerabilities, manage composer.lock, configure Dependabot or Renovate for automated updates,…

Idioma do texto original: inglês

conda-forge-expert

Comprehensive guide for conda-forge recipe development. Handles legacy (meta.yaml) and modern (recipe.yaml) formats, linting, CI troubleshooting, and feedstock maintenance. Enhanced with patterns from real conda-forge feedstocks (2025). USE THIS SKILL WHEN:…

Idioma do texto original: inglês

config-environment-conventions

Conventions for service configuration and environment variables: naming, precedence, validation at startup, secrets handling, environment detection, and documentation patterns

Idioma do texto original: tailandês

config-management

Validate config at startup, secrets in memory only. Never read config during requests, never store secrets in env vars. Use node-env-resolver for multi-source config.

Idioma do texto original: inglês

configuration-workbook-authoring

Author the Salesforce Configuration Workbook — the structured, reviewable handoff document an admin uses to execute a feature across Objects/Fields, Page Layouts, Profiles/PSGs, Sharing, Validation, Automation, List Views, Reports, Integrations, and Data.…

Idioma do texto original: inglês

configure-canvas-mcp

Configure the Canvas Authoring MCP server for Claude Code, VS Code Copilot, or GitHub Copilot CLI. USE WHEN "configure MCP", "set up MCP server", "MCP not working", "connect Canvas Apps MCP", "canvas-authoring not available", "MCP not configured", "set up…

Idioma do texto original: inglês

configure-hooks

This skill should be used when the user says "configure hooks", "set up quality gates", "add PostToolUse hook", "set up permission hooks", "create hook configuration", "add typecheck hook", "set up secret-scan hook", or wants to configure event-driven hooks…

Idioma do texto original: inglês

configure-wasp

configure Wasp framework features and set up their app's branding (meta tags, SEO), authentication (email, social auth providers), database, email providers, styling (tailwind, shadcn), etc. Use when the user wants to add or set up Wasp-specific functionality.

Idioma do texto original: inglês

configuring-console-app-di

Implements dependency injection using GenericHost in .NET Console Applications. Use when building console applications that require DI, hosted services, or background tasks.

Idioma do texto original: inglês

configuring-dependency-injection

Configures Dependency Injection using Microsoft.Extensions.DependencyInjection and GenericHost. Use when setting up DI container, registering services, or implementing IoC patterns in .NET projects.

Idioma do texto original: inglês

conflict-of-interest-checker

Check for co-authorship and institutional conflicts between authors and suggested reviewers to support peer review integrity. Coauthorship and institutional conflict detection supported.

Idioma do texto original: inglês

connect-gcp

Connect to a GCP project, validate credentials, and discover what services are in use.

Idioma do texto original: inglês

connection-auth-rules

Build a Connection Auth Rules for a Monte Carlo connection type. Fetches live connector schemas and transform steps from the apollo-agent repo.

Idioma do texto original: inglês

constitution-validator

Constitution compliance validator focusing on Principle XI (No Hardcoded Values). Detects hardcoded URLs, timeouts, limits, and identifiers that should be configurable. Use proactively when implementing business logic, adding new features, or reviewing PRs…

Idioma do texto original: inglês

consumer-goods-cloud-setup

Consumer Goods Cloud setup: visit execution, retail execution, route planning, in-store task management, compliance checks, off-shelf detection, and image recognition. NOT for Field Service dispatch (use field-service-core-setup). NOT for B2B Commerce…

Idioma do texto original: inglês

container-audit

Audit Dockerfiles and docker-compose files for base image, user privileges, secret leaks, layer efficiency, signal handling, healthchecks, and compose safety. One sub-agent per Dockerfile. Static, live (Trivy/Grype), and apply modes.

Idioma do texto original: inglês