skills

This skill should be loaded for any task involving web application security. Use it when building or reviewing HTTP/HTTPS endpoints, REST APIs, GraphQL APIs, WebSocket services, SPAs, or any server-side code that processes untrusted user input. Also load it for security audits, penetration testing guidance, secure code review, or vulnerability assessments. Triggers on: "security check", "vuln", "injection", "XSS", "CSRF", "auth", "session", "pentest", "OWASP", "CVE", "secure coding", "취약점", "웹 보안", "보안 점검", "시큐어코딩". When in doubt, load it.

Use this skill when the user wants to build, integrate with, or send messages to Discord. Covers Discord bots using discord.js (Node.js) or discord.py (Python), direct REST API calls, and webhook integrations. Use when the user mentions Discord bots, slash commands, events, webhooks, embeds, channels, sending messages to Discord, mention injection (@everyone abuse), or markdown security.

Use this skill when the user wants to write a git commit message, create a PR (pull request), design a branch naming strategy, write a PR description, or follow Git workflow conventions. Use when the user mentions commit, PR, branch, merge, rebase, or git conventions.