Agent skills directory

Secure secrets management for CI/CD pipelines using Vault, AWS Secrets Manager, or native platform solutions. Use when h...

Implement secure secrets management for CI/CD pipelines using Vault, AWS Secrets Manager, or native platform solutions....

Keep secrets secret — stores, scoping, rotation, leak response, and zero secrets in code or logs.

Never commit secrets (API keys, passwords, tokens) to version control Use when implementing security best practices. Sec...

Secure secrets management practices for CI/CD pipelines using Vault, AWS Secrets Manager, and other tools.

Performs a structured secrets management review against OWASP Secrets Management Cheat Sheet and NIST SP 800-57 Part 1 R...

Handle secrets safely across the lifecycle — keep them out of source, load from env or a secret manager, scope to least...

GitHub Actionsワークフローでの安全な秘密情報管理を実現する。リポジトリ/環境/組織/Dependabotの4種類のシークレット使い分け、OIDCによるクラウド認証、ローテーション、監査を包括的に提供する。Anchors:• W...

AWS Secrets Manager for secure secret storage and rotation. Use when storing credentials, configuring automatic rotation...

Detect and prevent exposure of secrets, tokens, credentials, private keys, CI variables, and sensitive logs.

Describe what this skill helps an agent do.

What to do the moment a secret is exposed — pasted into chat, committed, logged, shown in a transcript or a screenshot....

Use when rehearsing rotation of an application credential or signing token across its dependent services; not for storin...

Detect hardcoded credentials, API keys, tokens, and secrets in source code and configuration files. Use when reviewing c...

Scan text or a file for accidentally committed secrets (API keys, tokens)

Triage detected credential leaks, revoke exposed secrets safely, remove tracked copies, and verify history/log exposure...

Scan for sensitive information in code like API keys, tokens, passwords

Detect leaked secrets and vulnerable dependencies with reachability analysis. Use when adding/updating dependencies, con...

Two-way secret synchronization between master vault and projects. Detects new secrets, namespaces by project, and handle...

Use when the user adds, edits, lists, or applies chezmoi-managed secrets; syncs Bitwarden sessions; runs GPG encryption...

Publish gate secrets scanning. Use for: safe_to_publish, scan for secrets, redact in-place. Determines publish gate stat...

Handle SOPS + Age secrets for ONE_SHOT projects. Manages encrypted secrets, decryption, and secret rotation. Use when us...

Use when the user asks to set up secret management infrastructure, integrate HashiCorp Vault, configure cloud secret sto...

In-session, token-efficient LLM security scan of a repo (SAST triage). A lightweight, native Claude Code pipeline — surv...

Använd när du bygger en ny sektion/fullbreddsblock i en sidlayout, inklusive My Pages sidtitel-spacing (main-content/pag...

Writes concise, decision-focused UX spec sections for DoD collaboration platforms. Emphasizes behavior, outcomes, and no...

Expert Section 508 compliance advisor for US federal ICT accessibility. Use this skill whenever a user asks about Sectio...

生成 AI 工具介绍类页面的超详细教程内容，强调工具对比、配置技巧与实战场景；当需要撰写 AI 工具介绍、配置指南、使用技巧类教程时使用

Apply branding guidelines to page sections after style cleanup. Implements 60-30-10 color rule, alternates section backg...

Detect clinical note sections (HPI, ROS, Assessment, Plan) using regex patterns and LLM topic segmentation. Generates To...

生成符合初学者需求的入门指南类教程 (.rmd/.qmd)，强调 "概念 → 流程 → 代码 → 解释" 结构，确保 70% 文字 + 30% 代码比例。

Choose section forms from content shape.

Use when kivo-creator section specs in .creator/<run>/specs must be mapped to the project's existing blocks before anyth...

生成机器学习与 AI 类教程 (.rmd/.qmd)，涵盖算法原理、工程实践、模型评估、可解释性，强调 "问题定义 → 数据准备 → 模型训练 → 评估优化 → 可解释性"。

生成实用操作类教程 (.rmd/.qmd)，涵盖数据处理、工具使用、工作流优化，强调 "任务目标 → 工具选择 → 操作步骤 → 结果验证"。

生成 R 包使用教程 (.rmd/.qmd)，涵盖包定位、核心功能、完整示例、最佳实践。

First-principles, truth-seeking, zero-assumption section review. Decomposes the problem before judging the solution. Que...

Reads any section — a sketch section, a building section, a wall section, a consultant's, an inherited one — for the thi...

Generates Astro component skeleton with slots. Stateless, deterministic. No content.

生成特殊应用领域教程 (.rmd/.qmd)，涵盖领域背景、专业方法、完整流程、结果解释，强调 "领域背景 → 专业术语 → 分析框架 → 实践流程 → 结果解读"。

生成统计分析方法类教程 (.rmd/.qmd)，确保理论背景、模型假设、完整分析流程与结果解释并重。

生成数据可视化类教程 (.rmd/.qmd)，涵盖图表原理、绘图代码、样式美化、结果解读。

Step 4 of the PaperOrchestra pipeline (arXiv:2604.05018). ONE single multimodal LLM call that drafts the remaining paper...

Imported skill _sections from vercel

识别板块轮动、资金切换与风格迁移方向，帮助判断当前市场主线、补涨方向与轮动持续性。适用于市场风格观察、板块比较、盘后复盘与下一阶段主线判断。

This skill should be used when analyzing sector rotation patterns and market cycle positioning. It fetches sector uptren...

This skill should be used when analyzing sector and industry performance charts to assess market positioning and rotatio...

Analyse sectorielle et tendances à partir des données accumulées : croissance par NAF, signaux d'embauche, subventions,...

Create Sectors (Digital Web locations) for Mage: The Ascension 20th Anniversary Edition. Designs virtual locations with...

Electric power + oil & gas + water/wastewater + renewable-integration cybersecurity for mid-2026 — NERC CIP v6/v7, NIST...

Research one small-business sector's real economics once — revenue tiers, the 3-5 KPIs operators run on as floor/target/...

Federal government + defense contractor cybersecurity for mid-2026 — FedRAMP Rev5, CMMC 2.0, EO 14028, NIST 800-171/172...

Financial services cybersecurity for mid-2026 — EU DORA TLPT, PSD2 RTS-SCA, SWIFT CSCF v2026, NYDFS 23 NYCRR 500, FFIEC...

Healthcare sector cybersecurity for mid-2026 — HIPAA + HITRUST + HL7 FHIR security, medical device cyber (FDA + EU MDR),...

Sector overview, TAM estimation, competitive concentration HHI, regulatory landscape, industry analysis, market size ana...

Med-sector overview across med.medicines_biotech and med.medical_devices with med trends, catalysts, FDA-decision contex...

Sector rotation across NSE sectoral and thematic indices (BANK, IT, AUTO, PHARMA, FMCG, METAL, REALTY, ENERGY, PSU BANK,...

Telecom and 5G security for mid-2026 — Salt Typhoon, Volt Typhoon, CALEA / IPA-LI gateway compromise, signaling-protocol...

Secular technology trends, technology adoption cycle, disruption risk, AI impact analysis, digital transformation, indus...

Security news aggregation from tldrsec, no.security, and other sources. USE WHEN security news, security updates, what's...

Shortcut for security review on current change set. Runs layered checks (secret-scan, dep-audit, semgrep, OWASP patterns...

Do the right things fast when your phone is lost or stolen — lock it, protect your accounts and money, and decide on wip...

Safely install third-party skills, plugins, MCP servers, or Python packages into an AI agent runtime: pre-install snapsh...

Run a pre-ship security checklist for an LLM agent covering identity, least privilege, approvals, sandboxing, audit logg...

Secure authentication implementation patterns. Use when implementing user login, registration, password reset, session m...

Implement authentication securely — authentication vs authorization, password hashing (argon2id/bcrypt), sessions vs JWT...

Baseline security review for web apps and APIs using OWASP Top 10 and ASVS. Use when reviewing code, adding auth/handlin...

Establish a root of trust and verify firmware integrity/authenticity from reset through handoff, including anti-rollback...

Skill from tolgaio/neo

Review a repository, architecture, or local folder with a focus on secure-by-design principles. Use when Codex needs to...

Secure C Coding security skill

Security and privacy review for a scoped mivia change. Check authz, secrets, SSRF, injection, path safety, prompt-inject...

Build or review code that handles login, permissions, user input, files, secrets, payments or personal data. Use this wh...

Performs a structured security code review against OWASP ASVS 4.0.3 verification requirements and CWE Top 25. Auto-invok...

Implementing OWASP Proactive Controls (Input Validation, Output Encoding, AuthZ/AuthN). Use when: secure coding.

Incorporating security at every step of software development – writing code that defends against vulnerabilities and pro...

<!-- Copyright (c) 2026 defconxt. All rights reserved. -->

Sicherheitsanforderungen bei Implementierung und Review von Fachanwendungen dieses Frameworks konkretisieren, einschließ...

This skill should be used while WRITING any backend, API, auth, or data-handling code for a web app or SaaS — to prevent...

Use when writing code that handles untrusted input, authentication, or sensitive data. Covers injection prevention, auth...

Apply security-conscious thinking when generating or modifying code. Enforces trust boundary awareness, input validation...

Build secure container images with Wolfi runtime, non-root users, and multi-stage builds. Templates for Python/uv, Bun,...

Handles API keys, passwords, tokens and one-time secret links with Claude without the secret ever showing up in chat, lo...

Regularly audit dependencies for known vulnerabilities (npm audit, Snyk, Dependabot) Use when implementing security best...

Security best practices for production applications including PII protection, input validation, SQL injection prevention...

Use this skill when an engineering team needs a secure development policy, or has one that does not match how code reall...

Implement secure error handling to prevent information leakage and provide appropriate error responses. Use this skill w...

Log detailed errors server-side but return generic messages to clients Use when implementing security best practices. Se...

Aplica la arquitectura de seguridad privada/publica a un proyecto Python existente con credenciales expuestas (fallback...

A comprehensive security skill that integrates with Secure Flow to help AI coding agents write secure code, perform secu...

Use when shipping or reviewing an LLM feature that reads untrusted text or has tools — prompt-injection threat model, le...

A comprehensive security middleware system for Next.js 13+ App Router API routes that provides authentication, rate limi...

Set up a secure release process for an npm package to protect it from supply chain attacks. Use for any request to creat...

Ensure OTA updates are authenticated, integrity-checked, atomic, and safely recoverable, with regulatory considerations...

Secure a Power Automate "When an HTTP request is received" flow: migrate from "Anyone" to "Any user in my tenant" with E...

Retroactively verify threat mitigations for a completed phase