security Skills

Review code changes for security, performance, and correctness. Trigger with a PR URL or diff, "review this before I mer...

Review code changes for bugs, security issues, performance problems, and style before shipping. Use when the user asks f...

코드를 붙여넣으면 보안·성능·설계·가독성을 종합 리뷰하고 심각도별 분류와 Before/After 개선 코드를 PR 코멘트 형식으로 제공하는 스킬입니다. 복잡도 수치·리팩토링 분석은 complexity-analyzer...

Reviews code for bugs, security issues, and quality problems. Use when asked to "review this code", "check my code", "co...

LeeWay-governed Code Security Analysis workflow. Use when a task requires code security procedures, validation, and evid...

Comprehensive code quality and security audit for financial systems. Use when asked to "review code", "code review", "se...

Domain-parameterized codebase auditing (security, UX, performance, API, copy, CLI). Use when auditing code, assessing qu...

You are a dependency security expert specializing in vulnerability scanning, license compliance, and supply chain securi...

CodeQL is a static analysis framework that queries code as a database. Use when you need interprocedural analysis or com...

Configure GitHub CodeQL analysis, run or write queries, interpret SARIF findings, and verify fixes for reported vulnerab...

Run CodeQL semantic code analysis for security vulnerabilities

Mandatory dispatch preflight before any subagent delegation. Use before the first child-work call in every task, and whe...

Ask Codex CLI with its configured model for an independent code review of uncommitted changes, a branch diff, a commit,...

Apply layered security routing for network, infrastructure, application security, compliance, and DevSecOps concerns. Us...

Author structured policy documents and Standard Operating Procedures (SOPs) following ISO document control standards. Co...

Use when five specialized coding agents (linter, perf, refactor, security, test) that enforce quality gates across the d...

Coding and security standards. Apply when writing code, handling comments, error handling, API keys, database connection...

Broad crypto market data from CoinGecko covering 13,000+ tokens. Global market stats, historical price data going back y...

Write the brief for a single independent cold reviewer and grade what it returns, keeping it isolated from the panel tha...

Stage ComfyUI workflow input media through server uploads, use returned server names instead of guessed paths, extract a...

Select, preserve, inspect, validate, patch, convert, and promote complete ComfyUI workflows from Story-Film's extension-...

Adapt the commercial-legal playbook and its standard / fallback / walk-away positions to a company's risk tolerance, ind...

Claude Code runs shell commands, edits files, and manages infrastructure with real consequences. Without guardrails, a m...

Structured command patterns for invoking audit capabilities through slash commands. Use when triggering /audit, /scan, /...

Land community pull requests as the contributor and answer community issues on thedotmack/claude-mem. Takes stock of eve...

MiCA compliance evidence and stablecoin risk scoring. Use when the user asks about stablecoin compliance, MiCA status, p...

Ensure regulatory compliance. Use when implementing GDPR, HIPAA, PCI-DSS, or SOC2 requirements. Covers compliance framew...

Court compliance checker. Validates limitation, annexures, affidavit requirement, mandatory sections and risk flags.

Track compliance requirements and generate audit trail reports. Use when auditing controls, checking policies, generatin...

Automated compliance testing using Open Policy Agent, Chef InSpec, and custom policy engines for security baseline valid...

Advanced, production-grade regulatory and data privacy compliance audit of the current repo. Grounded in GDPR, CCPA/CPRA...

Regulatory compliance auditing across GDPR, HIPAA, PCI DSS, SOC 2, and ISO frameworks with automated evidence collection...

Automates Principle No. 9 (Decision Logging) and Principle No. 5 (Regulatory Readiness). The 'Chronicler' ensuring every...

专业技术合规审计师，擅长 SOC 2、ISO 27001、HIPAA 和 PCI-DSS 审计——从就绪评估、证据收集到认证全流程。

Expert technical compliance auditor specializing in SOC 2, ISO 27001, HIPAA, and PCI-DSS audits — from readiness assessm...

The annual compliance scramble exists because controls are tested once, by

Check security compliance against standards and regulations

Apply the OpenAI SDK compliance checklist to audit files or directories and produce a Markdown report with findings and...

Procedures for verifying compliance with security standards.

Check compliance with SOC 2, GDPR, HIPAA, and PCI-DSS standards

Automates the collection and organization of compliance evidence for SOC2, ISO 27001, or HIPAA audits. Pulls evidence fr...

Swiss financial regulatory compliance — FINMA, GwG/AML/KYC, FIDLEG/FINIG licensing, BankG, crypto/DLT regulation, cross-...

Provides compliance, governance, and supply chain security guidance for cloud-native systems. Covers OPA Rego policies,...

Map controls to NIST CSF 2.0, 800-53 R5, ISO 27001:2022, CIS v8.1, ASVS 5.0. Defense-only.

A high-level conceptual mapping from Active Directory attack techniques to the compliance controls they touch. Kerberoas...

Activate regulatory compliance specialist mode. Expert in SOX, GDPR, HIPAA, and PCI-DSS requirements. Use when reviewing...

Daily compliance-drift check for {{projectName}}. Reads AWS resource state and audit logs across {{aws_regions}}, compar...

Test for regulatory compliance: GDPR/CMP consent verification, Google Consent Mode v2, Global Privacy Control (GPC), CCP...