4,624 skills sorted by stars.
Automatically identify the type of protocol being audited to load appropriate checklists, templates, and vulnerability p...
Keep long tasks accurate by tracking goals, constraints, decisions, evidence, artifacts, unresolved questions, and conte...
security-scan結果の曖昧な項目をユーザーに質問して確認する対話型レビュー。認証要否・エラー処理・データ露出・ビジネスロジックを選択肢形式で1問ずつ確認し、excluded/confirmed/needs_reviewに分類。「コ...
Audit canon, story, screenplay, production documents, and generation prompts for identity, wardrobe, prop, geography, kn...
Set up nightly monitoring of subdomain changes, JS file diffs, new endpoints, and CVE matches against in-scope assets, w...
Solidity/EVM smart contract security analyzer for Buzz BD Agent at SolCex Exchange. Performs fast, pattern-based contrac...
Deep review that audits API contracts for mismatches between what callers assume and what implementations enforce. Desig...
Find and write stable shared contracts before parallel PRDs. Use for cross-PRD APIs, events, data shapes, permissions, o...
Use when you need to answer "which attacker techniques do our controls actually stop, and how well?", "what controls sho...
Map the exports in an evidence pack to ISO 27001:2022 Annex A or SOC 2 control identifiers and report per control suppor...
Use this skill when controls have no clear owner, or "security" owns everything, and the team asks "who owns each contro...
Controls message frequency and token usage to prevent abuse and manage API budgets. Use this to implement per-user limit...
Audit a Convex-backed codebase for schema quality, security, runtime boundaries, migrations, and function-surface risks....
Set up Convex authentication, user mapping, authorization, and custom function wrappers for data protection.
Core authentication patterns for Convex backends. Use when implementing auth checks in functions, storing users in datab...
Clerk authentication integration for Convex. Use when setting up Clerk auth, configuring ConvexProviderWithClerk, implem...
Audit and optimize an existing Convex app: security, scale, upgrades, observability.
Convex backend patterns with security, validation, and performance best practices
Convex code reviewer — security, auth, validators, performance, and pattern checks for code in a convex/ directory. Use...
Deep Convex security review patterns for authorization, data boundaries, sensitive operations, and defense in depth.
Deep security review patterns for authorization logic, data access boundaries, action isolation, rate limiting, and prot...
Quick Convex security pass for auth, validation, exposure, and access-control mistakes.
Quick security audit checklist covering authentication, function exposure, argument validation, row-level access control...
Production error → triaged, root-caused, repaired, and certified (tsc + rehearsal + reproduce-then-gone) fix PR for a hu...
Audit and attack session cookies via missing Secure/HttpOnly/SameSite attributes, overly broad Domain/Path scope, non-ex...
Guide complet pour la rédaction de politiques cookies conformes au RGPD et à la directive ePrivacy. Contient les recomma...
Cookie Security Analyzer - Auto-activating skill for Security Fundamentals.Triggers on: cookie security analyzer, cookie...
Spawn a new isolated Copilot CLI sub-session from a main Copilot CLI or VS Code session. Use when you need to programmat...
Score a Microsoft 365 tenant's readiness for a Copilot rollout against Microsoft's oversharing checks and produce a fix...
Autonomous Security Ecosystem — 14 AI-powered agents, 48 tools, 9 attack chains for macOS native pentesting
Check for existing SIEM alerts and case management entries related to IOCs. Use to understand if an indicator has trigge...
Correlates security events in IBM QRadar SIEM using AQL (Ariel Query Language), custom rules, building blocks, and offen...
Validate cors policy validator operations. Auto-activating skill for Security Fundamentals. Triggers on: cors policy val...
Strict CORS: no wildcard with credentials, exact-match origin allowlists, sane preflight cache, minimal exposed headers....
Cryptographic compliance verification. Sign security tool output into verifiable CPOEs (JWT-VC), verify vendor proofs vi...
Drives the cortex skills recommend-feedback-rate loop. Use when a context change occurs (new file types, domain shift, t...
Compress agent outputs for efficient context handoff between pipeline nodes while preserving actionable information
Review PL self-approvals, estimates, board drift, and close quality after a declared night shift. Loaded ONLY by the cos...
Assist with Cosmos ATOM transactions, IBC transfers, staking, and cross-chain ecosystem navigation.
Use when the user wants to audit Cosmos SDK modules or CosmWasm smart contracts, scan IBC protocol interactions for rela...
Scans Cosmos SDK blockchain modules and CosmWasm contracts for consensus-critical vulnerabilities — chain halts, fund lo...
Multi-method cost basis computation including specific identification, FIFO, LIFO, HIFO, and proportional average cost w...
Use when the user asks for a council, second opinions, or parallel investigation. Not for cross-examination of existing...
Receive and verify Courier outbound webhooks. Use when setting up Courier webhook handlers, debugging courier-signature...
Audit Jest test coverage to separate real testing gaps (business logic, security paths) from false negatives (wiring, co...
Use when adding, configuring, or troubleshooting custom action buttons in the Salesforce CPQ Quote Line Editor (QLE), pr...
Use when querying, mapping, or building against Salesforce CPQ managed-package objects (SBQQ__ namespace): Quote, QuoteL...
Code Query with AI-enhanced deterministic analysis via SplitMix ternary classification