16,832 skills sorted by stars.
Enforces secure coding practices. Required after all code implementations to run CodeGuard security check. Covers input validation...
AI API key leakage review patterns. Use when code integrates AI providers (OpenAI, OpenRouter, Anthropic, Google/Gemini/Vertex, AW...
Procedure for analyzing code or dependencies for vulnerabilities
Security review checklist for code and infrastructure
Example security audit skill demonstrating how to audit code for security vulnerabilities. Use when the user asks to perform secur...
Identify security vulnerabilities and suggest secure coding practices
Django security audit patterns. Load when reviewing Django apps (settings.py or manage.py present). Covers SECRET_KEY, ALLOWED_HOS...
Handle vulnerability reports with coordinated disclosure, timely patches, and clear communication.
Creates repeatable security review checklist for PRs with required checks, common pitfalls, and automated gating. Use for "securit...
Use this skill when designing or reviewing systems where security is a concern - authentication, authorization, data protection, i...
Derive security requirements from threat models and business context. Use when translating threats into actionable requirements, c...
Thorough, adversarial security review of API endpoints, UI flows that call those endpoints, and any database-interacting code. Use...
Run security scans locally (Semgrep, Trivy, Gitleaks) to detect vulnerabilities, secrets, and code issues before pushing. Use when...
Automatically scan code for security vulnerabilities when user asks if code is secure or shows potentially unsafe code. Performs f...
Secret detection patterns and scanning workflow. Auto-loaded by security-reviewer agent for all security audits. Contains regex pa...
Security scanning toolkit for BFF boundaries and CI/CD. Use when setting up or running gitleaks, semgrep, bandit, trivy, checkov,...
Security protocols and vendor management expertise from Marcus covering emergency response codes, vendor relations, and operationa...
Vite security audit patterns. Load when reviewing Vite apps (vite.config.ts present). Covers VITE_* exposure, build-time secrets,...
Security Code Review security skill
Analyze, validate, and fix issues identified by sentry bot in GitHub Pull Request reviews. Use this when asked to review or addres...
작업 완료 후 자가 점검 및 보완 조언
AI-native code commenting system with grep-searchable AICODE-* markers for cross-session memory. Use when: working with code files...
Analyze the codebase to find hard-coded thresholds, defaults, and timing constants, then convert them into self-evolving heuristic...
タスク完了前のセルフレビュー。Gemini CLI + Claude subagentで多角的に検証。
Self-review checklist before marking PR ready - catch clarity, correctness, and maintainability issues with fresh eyes
Use when you need to find code by concept (not just text). Uses Serena MCP for semantic code search across the codebase with minim...
Create stable semantic identifiers and aliases for entities across systems; use when asked to map names, titles, or IDs across sou...
Use Miller's semantic search capabilities for conceptual code understanding. Activates when searching for concepts, cross-language...
Automate versioning with Node.js semantic-release v25+. TRIGGERS - npm run release, version bump, changelog, conventional commits,...
Use PROACTIVELY when creating releases after PR merges to main, or when user asks about versioning strategy. Automated git tagging...
"Use this when deciding between semantic search and grep/glob for code discovery. Apply for concept-based queries (find payment pr...
Use when you want to stop a running indexing job