security Skills

Reviews a diff, branch, commit or pull request this session did not write and returns only the Critical and Important fi...

Full QA review pipeline — security audit (OWASP Top 10), performance analysis, accessibility check (WCAG 2.1 AA), and co...

Run the full code review pipeline on recent changes. Auto-selects reviewers based on file types.

Review code, a diff, a branch or a pull request for correctness, security, performance, maintainability and test coverag...

Reviews Python code across type safety, error handling, security, performance, modern patterns, design clarity, typed-bo...

Ревью изменений с фокусом на безопасность по стандартам команды. Используй перед мерджем или по просьбе проверить безопа...

Block C of the harness workflow. Reviews a finished change at its handed-off commit with the red-team, triages findings...

Use when asked to review a pull request, examine code changes, find bugs, or audit a branch, in standard or depth mode....

Draft thematic main-body sections for a medical review. Use when synthesizing mechanisms, clinical evidence, omics findi...

Rigorous sequential-audit code review with a dedicated security block and cited pedagogical lessons. Customize for your...

Perform a read-only, defect-first review of a specified code change and return every actionable finding. Use when anothe...

Configure human-in-the-loop gating for AI agent review actions in Claude Code. Use when setting up a project where an ag...

Audit security boundaries in AI agents, multi-agent systems, MCP integrations, autonomous workflows, and copilots with s...

Review an authentication or authorization change by mapping identities, credentials, sessions, resources, policies, trus...

Review a change with only applicable internal axes, classify every finding, persist fix-now work, and return one evidenc...

Review a diff, branch or pull request for real defects, and verify each finding before reporting it. Use this for any re...

Code review of current git changes with an expert senior-engineer lens. Detects SOLID violations, security risks, and pr...

Review Aztec smart contracts for correctness, security, and best practices. Use proactively after writing or modifying A...

Code review best practices and checklist

Detect package managers and discover outdated or vulnerable dependencies. Returns structured findings without upgrading....

Find bugs, security vulnerabilities, and code quality issues in local branch changes. Use when asked to review changes,...

Gate skill for managing the PR review → Fix → re-review cycle. Run Code Review + Security Review in parallel, and auto-f...

Codify project review rules as deterministic guards — ast-grep structural rules (with TDD-style rule tests) for mechanic...

Review implementation changes for a given task against architectural standards. Use when reviewing a PR, evaluating rece...

Perform an evidence-based design or launch review for a multi-agent system. Use when auditing a System Spec, architectur...

Reviews one GitHub pull request and prepares a verified local review or posts its exact approved contents. Use when the...

Use when the user says "review security", "/review-security", "security review", "is this safe", "check for vulnerabilit...

White-box security audit. Blue-teamer and lead red-teamer run in parallel isolation for an independent first pass — neit...

Internal security review pass of the agentic-workflow review pack — composed in-turn by review-change and product-audit;...

Use this agent when you need to perform security audits, vulnerability assessments, or security reviews of code. This in...

Security audit for vulnerabilities, secrets, and unsafe patterns. Use before releases, after adding auth code, or when r...

보안 관점에서 코드를 검토합니다. OWASP Top 10, credential 노출, injection 공격 등을 체크합니다.

Analyze code for security vulnerabilities, insecure patterns, and security regressions using strict determination criter...

Parallel read-only multi-agent review of a current git diff or explicit file scope to find behavioral regressions, secur...

Review browser-facing web applications, source code, configuration, and explicitly authorized live environments for auth...

Use when reviewing authentication or authorization code. Provides comprehensive security guidance on JWT validation, tok...

Review a concrete pull-request diff against its requirement, behavior, contracts and repository conventions; return evid...

Use when performing rfc template — structures a Request for Comments (RFC) document for proposing significant technical...

Red Hat Enterprise Linux across all supported versions (8, 9, 10): systemd, dnf/rpm, Application Streams, firewalld, Net...

Embody Rick Rubin - AI persona expert with integrated methodology skills

Use this skill when a risk owner wants to accept a residual risk instead of treating it further, or when someone asks "w...

Use when evaluating potential risks before making decisions, starting initiatives, or implementing changes. This skill p...

Identify, assess, and mitigate operational risks. Trigger with "what are the risks", "risk assessment", "risk register",...

Comprehensive expertise in identifying, analyzing, and mitigating risks associated with AI adoption for vendor replaceme...

Absolute safety gate for every Solana token. Runs a fail-closed checklist and returns only CLEAR, CONDITIONAL, or KILL....

Classify the risk level of proposed changes — considering scope, impact, reversibility, test coverage, and security impl...

Continuously identify, assess, track, and retire risks throughout the SDLC with register and RAG reporting

Review a register of time-bound security exceptions, waivers and risk acceptances (CSV or Markdown table): flags expired...