4,624 skills sorted by stars.
Master smart contract security best practices, vulnerability prevention, and secure Solidity development patterns.
Smart contract security patterns, vulnerability prevention, gas optimization, and audit preparation for Solidity develop...
解决方案架构师助手。当用户要设计新系统架构、评审现有架构、做技术选型决策、诊断性能/可扩展性/可用性问题、规划架构演进或重构时使用。覆盖微服务、事件驱动、云原生等架构模式，技术趋势通过实时搜索获取而非依赖内置知识。不用于：具体功能的代码实现...
Audit SonarCloud security issues (vulnerabilities and hotspots) for NASA PDS repositories and export to CSV for triage....
Apply triage decisions to SonarCloud security issues by reading a CSV with review decisions and updating issue/hotspot s...
Expert agent for Mozilla SOPS (Secrets OPerationS). Covers file encryption (YAML/JSON/ENV/INI), AWS KMS, GCP KMS, Azure...
Add a new machine's age public key to .sops.yaml and re-encrypt all files. Use for multi-machine setups. Use when user m...
Decrypt and edit SOPS-encrypted secrets in this repo
Decrypt SOPS-encrypted YAML files back to .env format. Finds *.enc.yaml files, decrypts, and converts YAML back to doten...
Encrypt .env files using SOPS + age. Converts dotenv to YAML format (avoids SOPS bug #1435), then encrypts. Auto-detects...
Encrypt files and configs with Mozilla SOPS. Integrate with AWS KMS, GCP KMS, or PGP for key management. Use when encryp...
Set up SOPS + age encryption for sharing .env files securely across machines. Detects existing state, installs tools, ge...
State-of-the-art C# / .NET engineering rules (.NET LTS releases, modern C#) that Claude applies when writing or auditing...
State-of-the-art JVM engineering rules for Java and Kotlin that Claude applies when writing or auditing JVM code. Java L...
State-of-the-art security & compliance engineering (2026) for the cybersecurity control frameworks and product-security...
State-of-the-art threat modeling for both designing new systems and auditing existing ones. Use when designing a feature...
Verify a factual claim — "check this claim", "verify this", "is this true", "how solid is this". Finds primary sources a...
Rege a criação, refatoração e auditoria de código no ecossistema Áquila Pro sob o paradigma Agent-First.
Produce a single consolidated hardening report for the DSH node. Runs audit.sh, dome-check.sh, and machine-probe.py, par...
spc reference tool
Start spec-driven DegenExus development with explicit source-of-truth, constraints, and verification strategy.
Verify smart contract implementations comply with EIP/ERC standards and protocol specifications. Use when checking ERC-2...
Iteratively review an instar-development spec with multi-angle internal reviewers (security, scalability, adversarial, i...
Conducts a focused review from ONE specific specialist's perspective (e.g., Security Specialist, Performance Expert). Us...
Author a new built-in Lagune sub-skill inside the Lagune source, not a scaffolded `.lagune/` target. Use when adding or...
Autonomous payment processing specialist that executes vendor payments, contractor invoices, and recurring bills across...
Designs identity, authentication, and trust verification systems for autonomous AI agents operating in multi-agent envir...
specification-compliance-review — Audit partial or passing implementations against an explicit task specification, provi...
Archive merged feature specs into project memory with provenance, sweep discovery, and gated cleanup
Take the highest-priority eligible open GitHub issue (or a given issue number) from backlog to a reviewed draft PR by dr...
Quality gate for the code a feature produced: runs the mechanical audits, judges durability and bloat against a fixed ru...
Perform a comprehensive security review of the current codebase
Security review of changes introduced on a branch compared to a base branch
Security review of staged changes only (git diff --cached)
Apply approved drift resolutions to specs and/or code
Implement SPI full-duplex communication, clock polarities (CPOL/CPHA), chip select multiplexing, and DMA transfers.
SpiderFoot automated OSINT framework with 200+ modules for comprehensive target profiling. Use when: running automated O...
Spring Security 7 implementation for Spring Boot 4. Use when configuring authentication, authorization, OAuth2/JWT resou...
JWT authentication and authorization patterns for Spring Boot 3.5.x covering token generation with JJWT, Bearer/cookie a...
Detect sql injection detector operations. Auto-activating skill for Security Fundamentals. Triggers on: sql injection de...
Always use parameterized queries or prepared statements Use when implementing security best practices. Security category...
Execute comprehensive SQL injection vulnerability assessments on web applications to identify database security flaws, d...
This skill should be used when the user asks to "test for SQL injection vulnerabilities", "perform SQLi attacks", "bypas...
High-performance embedded storage with SQLite WAL mode, PRAGMA tuning, full-text search (FTS5), and concurrency.
Use for SQL injection attacks and database exploitation.
Provide systematic methodologies for automated SQL injection detection and exploitation using SQLMap.
This skill should be used when the user asks to "automate SQL injection testing," "enumerate database structure," "extra...