Menu
Skills neste repositório
O SkillsMP coletou 2.449 skills de aibot88/sec_skill_store. Abra uma skill para revisar a origem e os detalhes.
aibot88/sec_skill_storeMostrando 40 de 2.449 skills coletadas.
MCPツールとAPI統合のセキュリティ設計を体系化するスキル。 脅威整理、制御設計、設定検証を通じて安全なツール運用を支援する。 Anchors: • Web Application Security / 適用: 脅威モデリング / 目的: 攻撃面の整理 • OWASP ASVS / 適用: セキュリティ要件 / 目的: 制御の網羅性 Trigger: Use when designing tool security controls, validating security configs, or…
Idioma do texto original: japonês
Guide for using ToolHive CLI (thv) to run and manage MCP servers and skills. Use when running, listing, stopping, building, or configuring MCP servers locally. Covers server lifecycle, registry browsing, secrets management, client registration, groups,…
Idioma do texto original: inglês
Python audit tooling: ruff (linting), mypy (types), bandit (SAST), pip-audit (CVEs), radon (complexity), vulture (dead code), mutmut (mutations). Use during audit phases for Python projects.
Idioma do texto original: russo
Authors or extends a skill in mc-agent-toolkit. Gates for forbidden buckets and name collisions, applies CONTRIBUTING's extend-or-split rules, then edits a peer skill or hands off to Anthropic's skill-creator and walks the registration checklist.
Idioma do texto original: inglês
Use when the user wants to track a hashtag on X (Twitter). Pulls recent tweets using the hashtag, the top posts, the unique authors, and can set up continuous monitoring. Covers one-shot reads and long-running hashtag monitors.
Idioma do texto original: inglês
Collection of expert-level TRAE agent system prompts for code generation, debugging, optimization, security auditing, and workflow acceleration. Reference library — use prompts as templates for specialized agent behavior.
Idioma do texto original: inglês
Transcribe audios (notas de voz de WhatsApp y otros formatos: .ogg, .opus, .mp3, .m4a, .wav, .webm) a texto en español, y encadena automáticamente con el flujo procesos/procesar-audio.md para crear las actividades CRM en Holded y actualizar las fichas del…
Idioma do texto original: espanhol
Diagnose and fix MCP server connection issues zwischen Claude Code, Claude Desktop, and MCP servers. Umfasst Windows argument parsing, Authentifizierung failures, transport issues, and platform-specific debugging. Verwenden wenn Claude Code or Claude Desktop…
Idioma do texto original: inglês
Analyze raw T-SQL source code for anti-patterns, security risks, and static performance smells. Applies 50 checks (T1–T50) across structural, correctness, security, deprecated syntax, and performance categories. No execution plan required.
Idioma do texto original: inglês
Use when the user wants to read replies to a specific tweet on X (Twitter). Fetches the reply thread, reply authors, engagement on each reply, and filters for top replies. Read-only; for posting replies see post-tweets.
Idioma do texto original: inglês
使用 Python + UV 读写 Twitter/X 数据的技能，零第三方依赖（纯标准库），通过直接传入 auth_token + ct0 Cookie 完成认证。在 Minis 环境中，Cookie 可通过 browser_use 工具 导航到 x.com 后用 get_cookies 动作自动获取，无需手动复制。支持抓取主页时间线、关注列表、 书签（含书签文件夹）、搜索、用户资料、用户推文、点赞、推文详情（单条/含回复）、List 时间线、…
Idioma do texto original: chinês
Typosquat and malicious-package detection across installed dependencies (or a single prospective addition) — cross-checks AI-malware family intelligence, package-name similarity to known popular packages, low maintainer-health signals. Use when auditing a…
Idioma do texto original: inglês
Use when designing, polishing, prototyping, or reviewing user-facing UI, frontend screens, visual systems, interaction prototypes, slide decks, motion/effects, artifact handoff, or anti-slop visual quality. Trigger for "make this UI look better", "design a…
Idioma do texto original: inglês
Use when: auditing UI/UX quality, checking WCAG accessibility, reviewing spacing/layout/grid, mobile responsiveness issues, dark mode review, component pattern audit, pre-ship UI checklist, contrast ratios, touch targets, animation review. Triggers: 'check…
Idioma do texto original: inglês
Pre-delivery quality audit — Anti-Pattern + Coverage Gap + Wiring + E2E + Performance + Security. Writes .ultra/test-report.json; no state.db writes.
Idioma do texto original: inglês
Erstellt Schulungs-, Audit- und Fortbildungspläne für Anlagenbetreiber, Immissionsschutzbeauftragte und Abfallverantwortliche.
Idioma do texto original: alemão
Prüft Störfallrelevanz, Betreiberpflichten, Sicherheitsdokumentation, Anordnungen und Compliance-Lücken.
Idioma do texto original: alemão
Cross-reference compound IDs across 50+ databases (ChEMBL, DrugBank, PubChem, ChEBI, PDB, KEGG) via UniChem REST API. Resolve InChIKeys to source IDs, find structurally related compounds by connectivity, batch-translate between naming systems. No auth…
Idioma do texto original: inglês
NDA-Verhandlungshilfe fuer die empfangende Seite. Zwei Modi: (A) Standard-Destillation aus 1 bis n eigenen NDAs und frei beschreibbarer Erfahrung in einen konsolidierten Haltelinien-Standard mit Ampelmatrix ROT/GELB/GRUEN; (B) Redlining-Lauf, der einen…
Idioma do texto original: alemão
Abmahnung versenden (Sendemodus) oder eine erhaltene Abmahnung triagieren (Empfangsmodus). Verwenden bei Marken-, Urheber-, Patent- oder UWG-Verstößen. Produziert einen Abmahnungsentwurf mit modifizierter Unterlassungserklärung, Streitwert und Kostenansatz…
Idioma do texto original: alemão
Praxis DocuSign und Adobe Sign fuer Wandeldarlehen: Authentifizierung der Unterzeichner (E-Mail-OTP, SMS-OTP, eID), Pruefspur und Audit Trail, Aufbewahrung zehn Jahre (§ 147 AO), Vorhalten der PDF mit Zertifikatsblock. Versandreihenfolge und…
Idioma do texto original: alemão
Audit toolkit health, freshness, security, standards. Keywords: updater, audit, outdated, stale, security, OWASP, refresh, check links, standards, compliance
Idioma do texto original: inglês
Load this skill for any up-fetch task: `up(fetch, getDefaultOptions?)`, `upfetch(url, options?)`. Covers dynamic defaults, auth, request shaping, validation, error handling, lifecycle timing, and runtime caveats.
Idioma do texto original: inglês
Load relevant code quality reference files (architecture, testing, security, type design, etc.) and apply their invariants to the current task. ALWAYS invoke before designing, writing, or editing ANY code.
Idioma do texto original: inglês
Submit URLs for automated malware and phishing analysis, then retrieve safety verdicts and screenshots via urlscan.io
Idioma do texto original: inglês
US-Counterfeit-Enforcement: Trademark Counterfeiting Act 18 U.S.C. § 2320, CBP Recordation 19 C.F.R. § 133, IPR e-Recordation, Lanham Act § 34 Injunctive Relief, § 35 Treble Damages und Statutory Damages, Attorney Fees Octane Fitness 572 U.S. 545. Laedt, wenn…
Idioma do texto original: alemão
HIPAA Security Rule expert for US healthcare compliance. Deep knowledge of 45 CFR Part 164 Subpart C, Administrative/Physical/Technical Safeguards, Required vs Addressable specifications, Risk Analysis, Business Associate Agreements, and HHS OCR enforcement.
Idioma do texto original: inglês
US-Vertriebsrecht fuer Luxus: Resale Price Maintenance nach Leegin 551 U.S. 877 (Rule of Reason), MAP-Policies, Unilateral Colgate Doctrine, Tiffany v. Costco Trademark-Dilution. Laedt, wenn der Nutzer 'US Resale Price Maintenance', 'MAP Policy', 'Tiffany…
Idioma do texto original: alemão
This skill should be used when the user asks to "add an endpoint to users", "create a route in users service", "write tests for users", "test users service", "add auth to a route", "work on users API", or mentions the users service, Fastify routes, or user…
Idioma do texto original: inglês
Dual-mode skill for github.com/LerianStudio/lib-commons v5, Lerian's shared Go library — the non-observability surface. Sweep Mode dispatches parallel explorers to detect DIY implementations that should use lib-commons, with file:line replacement precision.…
Idioma do texto original: inglês
Dual-mode skill for github.com/LerianStudio/lib-observability v1.0.0, Lerian's OpenTelemetry foundation. Sweep Mode dispatches 5 parallel explorers to detect DIY logging/metrics/redaction/OTel-attribute usage that should route through lib-observability.…
Idioma do texto original: inglês
Use at the start of any session — establishes the cognitive contract that pandastack skills must be checked BEFORE any response or action, including clarifying questions.
Idioma do texto original: inglês
Guides the initial analysis and impact assessment of a V8 security report, strictly excluding implementation or fixing.
Idioma do texto original: inglês
Mappt Term-Sheet-Daten auf Vertragsfelder, erkennt fehlende Punkte, Widersprüche und rechtlich relevante Abweichungen.
Idioma do texto original: alemão
Deployment validation pipeline — 4 fasi (static, security, smoke, score). Valida un deploy Vercel (preview o production) con TypeScript, ESLint, Jest coverage su file toccati, Semgrep, npm audit, Playwright smoke su TUTTE le 142 route del gestionale (8…
Idioma do texto original: Indeterminado
Audit an existing Sim integration against the service API docs and repository conventions, then report and fix issues across tools, blocks, outputs, OAuth scopes, triggers, and registry entries. Use when validating or repairing a service integration under…
Idioma do texto original: inglês
Validate MCP server connection, tool discovery, schema correctness, and functional behavior. 驗 MCP 伺服器連線、工具發現、模式正確性及功能行為。 Use when: verifying new MCP server implementation, checking schema compliance, testing tool error handling.
Idioma do texto original: chinês
Periodic smoke test for behavioral mechanism compliance. Scans the workspace for statically-detectable violations of rules in mechanism-registry.md. Use when: (1) user says "validate mechanisms", "檢查機制", "/validate-mechanisms", (2) as part of a periodic…
Idioma do texto original: inglês
Framework health check combining isolation and mechanism compliance. Two modes: (1) Isolation — scan for multi-company contamination (scope headers, memory tags, cross-company conflicts). (2) Mechanisms — static smoke test of behavioral canaries from…
Idioma do texto original: inglês
[PROTOCOL] Cross-cutting validation chains. Defines which validators to run, in what order, with which triggers, across marketing / dev / design domains. Preloaded by lead agents (marketing-lead, dev-lead, design-lead). Pure reference — no triggers, not…
Idioma do texto original: inglês