Improve readiness criterion C6.1 (Static Analysis) in the current project by adding linting, type checking, or security scanning. Raises the fulfillment level by one step.
原文语言:英语
菜单
这个仓库中的 skills
SkillsMP 已收集 aibot88/sec_skill_store 中的 2,449 个 Skill。打开任一 Skill 可查看来源和详情。
aibot88/sec_skill_store已展示 40 / 2,449 个已收集 Skill。
Improve readiness criterion C6.1 (Static Analysis) in the current project by adding linting, type checking, or security scanning. Raises the fulfillment level by one step.
原文语言:英语
Apply IN10 Red Teaming to organize adversarial review to find vulnerabilities through simulated attack.
原文语言:英语
Expert guidance for building and maintaining the Para Obsidian inbox processing system - a security-hardened automation framework for processing PDFs and attachments with AI-powered metadata extraction. Use when building inbox processors, implementing…
原文语言:英语
End-to-end incident-response playbook for a CVE actively in the wild — confirms urgency via KEV/EPSS/sightings, pulls IOCs and ATT&CK chain, fetches detection rules for installed families, evaluates patch path or workarounds, generates VEX attestation, posts…
原文语言:英语
Guides teams through IT outages and security incidents, providing structured workflows for detection, containment, eradication, and post-mortem analysis.
原文语言:英语
Apply inclusion/exclusion criteria systematically in literature reviews. Use when: (1) Screening abstracts, (2) Reviewing full texts, (3) Documenting screening decisions, (4) Ensuring PRISMA compliance.
原文语言:英语
Plan and create SpecWeave increments with PM and Architect agent collaboration. Use when starting new features, hotfixes, bugs, or any development work that needs specification and task breakdown. Creates spec.md, plan.md, tasks.md with proper AC-IDs and…
原文语言:英语
Internet.nl batch API voor het geautomatiseerd testen van meerdere domeinen op internetstandaarden. Authenticatie, batch requests, polling, resultaten JSON, dashboard-integratie. Triggers: internet.nl API, batch API, bulk scan, compliance dashboard,…
原文语言:荷兰语
Mailstandaarden getest door internet.nl: SPF (Sender Policy Framework), DKIM (DomainKeys Identified Mail), DMARC (Domain-based Message Authentication), STARTTLS, DANE (DNS-based Authentication of Named Entities). Triggers: mail test, DMARC, DKIM, SPF,…
原文语言:荷兰语
Overzicht van alle internetstandaarden die internet.nl test. Routing naar sub-skills voor web, mail, API en toolbox. Triggers: internet.nl, internet standaarden, website compliance, mail compliance, internetstandaarden, open standaarden, Forum…
原文语言:荷兰语
Stap-voor-stap implementatiegidsen uit de internet.nl toolbox-wiki. Configuratie van DNSSEC, HTTPS/TLS, DMARC, DKIM, SPF, DANE en IPv6 op veelgebruikte platformen (BIND, NSD, Nginx, Apache, Postfix). Triggers: internet.nl toolbox, DMARC configuratie, DKIM…
原文语言:荷兰语
Webstandaarden getest door internet.nl: HTTPS, TLS 1.2/1.3, HSTS, DNSSEC voor websites, IPv6 dual-stack, RPKI route origin validation, security headers (CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy), security.txt (RFC 9116). Triggers: web…
原文语言:荷兰语
Use when the user needs an influencer campaign brief with discovery criteria, creator guidelines, FTC compliance checklist, and measurement plan.
原文语言:英语
Invoke when the user asks about influencer marketing, creator partnerships, UGC campaigns, influencer discovery, creator briefs, FTC compliance for sponsored content, influencer contracts, or influencer campaign measurement.
原文语言:英语
Design infrastructure solutions - analyze requirements, design cloud architecture, create comprehensive design documents with resource specifications, security considerations, cost estimates, and implementation plans. Designs S3 buckets, Lambda functions,…
原文语言:英语
Audit infrastructure status, health, and compliance without modifications - provides observability and drift detection
原文语言:英语
WHEN: Infrastructure security audit, secrets management, network policies, compliance checks WHAT: Secrets scanning + Network policies + IAM/RBAC audit + Compliance validation + Security hardening WHEN NOT: Application security → security-scanner, Docker only…
原文语言:英语
Validate infrastructure configuration - run Terraform validate, check syntax, verify resource configurations, validate security settings, and ensure compliance with best practices. Reports validation errors and warnings.
原文语言:英语
Use when an approved system design exists and the team needs production-grade platform and infrastructure architecture before IaC implementation. Produces cloud and account topology, environment model, runtime substrate selection, network and trust-boundary…
原文语言:英语
Extract article content from dev.to posts for wiki ingestion. Uses dev.to public API, no auth required.
原文语言:英语
Extract content from GitHub gists for wiki ingestion. Uses raw URL fetch, no auth required.
原文语言:英语
Extract content from GitHub Discussion threads for wiki ingestion. Uses gh CLI GraphQL API, authenticated via gh auth.
原文语言:英语
Extract Hacker News threads (post + comments) for wiki ingestion. Uses Algolia HN API, no auth required.
原文语言:英语
Ingest LinkedIn posts into the wiki. Supports pasted text or cookie-based auth for URL fetching.
原文语言:英语
Extract post and comments from Reddit threads for wiki ingestion. Appends .json to any Reddit URL, no auth required for public subreddits.
原文语言:英语
Extract full text from X/Twitter posts for wiki ingestion. Uses FXTwitter API, no auth required.
原文语言:英语
Begleitet registrierte Inkassounternehmen und Rechtsanwälte bei der rechtskonformen Durchführung von Inkassodienstleistungen nach dem RDG – von Registrierungsvoraussetzungen über Hinweispflichten gegenüber Schuldnern bis zur Vergütung und datenschutzkonformen…
原文语言:德语
Explain and use the Inline CLI (`inline`) for authentication, chats, users, spaces, messages, search, attachments, downloads, JSON output, and configuration. Use when asked how to use the Inline CLI or its commands, flags, outputs, or workflows.
原文语言:英语
Universal self-review protocol for all Rune teammates. Adapts checklist per agent role (worker, fixer, reviewer, researcher, forger, aggregator). Enforces completeness verification, hallucination detection, codebase rule compliance, and value assessment…
原文语言:英语
Prueft Marktabgrenzung in dynamischen Technologiemaerkten und Innovationsmaerkten. Behandelt technologische Substitution Patent-Pools Standard-Essential-Patents Innovation-Markets-Doktrin und die Frage ob Innovationswettbewerb Produktmarktmacht ausgleicht.…
原文语言:德语
Webアプリケーションにおける包括的な入力検証とサニタイズ。型安全な検証、許可リストフィルタリング、 コンテキスト対応エンコーディングを通じて、XSS、SQLインジェクション、コマンドインジェクション、 パストラバーサルなどの入力ベースの攻撃を防止。 Anchors: • OWASP Top 10 / 適用: 全ての入力検証判断 / 目的: 業界標準のセキュリティベースライン • CWE-20 (不適切な入力検証) / 適用: 検証戦略設計 / 目的: 一般的な脆弱性パターン防止 • OWASP ASVS 5.1…
原文语言:日语
Database schema patterns for InsForge including social graphs, e-commerce, content publishing, and multi-tenancy with RLS policies. Use when designing data models with relationships, foreign keys, or Row Level Security.
原文语言:英语
Inspects a Linux container or sandbox environment and produces a structured HTML report covering filesystem mounts, process security context, and network configuration. Also renders a multi-page landscape A4 PDF of the report for inline display and download.
原文语言:英语
Install the DeepVista CLI. Load when the `deepvista` binary is missing from PATH (hooks/commands return "command not found" or silently no-op), when the user asks how to install DeepVista, or when `deepvista auth login` hasn't been run yet. Ships with the…
原文语言:英语
Usa esta skill SIEMPRE antes de añadir, actualizar o eliminar cualquier dependencia en un proyecto Node.js. Aplica a frontend, backend y monorepo. Cubre pnpm obligatorio, pin exact sin carets, consulta de última versión estable, auditoría post-instalación,…
原文语言:西班牙语
Expert management of install.sh (2000+ lines). Use for installation troubleshooting, idempotency checks, secret generation, volume migration, 11 services startup order (including heuristics and semantic), and user onboarding.
原文语言:英语
Guide for creating new OAuth-based integrations in the Orient codebase. Use when adding external service integrations (APIs like Linear, GitHub, Slack, Notion, etc.), implementing OAuth flows, or creating catalog-based integration manifests. Covers the full…
原文语言:英语
Use when designing Integration Procedures (IPs) with platform cache to cut latency and callout load. Covers cache key design, TTL selection, per-user vs org-wide partitions, invalidation on data changes, and safe fallback on cache miss/stale. Does NOT cover…
原文语言:英语
Manage codemap integration — 'check' audits installation health (scan-query reachable, index fresh, injection present), 'init' onboards codemap by discovering skills/agents, recommending injection sites, and wiring them in.
原文语言:英语
Use BEFORE any tool call that could modify state, touch sensitive targets, rewrite history, install dependencies, publish packages, or expose credentials/environment data. Classifies intent into Passive/Read, Reconnaissance, Modification, or…
原文语言:英语