Skills for your AI
Scans a project's package files, applies safe MINOR and PATCH dependency updates, prompts individually for MAJOR updates, audits for vulnerabilities, and diagnoses dependency conflicts. Use when the user asks to update dependencies, check outdated packages, au
Hunts insecure deserialization vulnerabilities across Java, PHP, Python, .NET, Ruby, and JNDI by detecting signals, generating proof-of-concept payloads, and validating with out-of-band callbacks. Use when assessing a target for deserialization flaws, Log4Shel
Designs and validates backup and disaster recovery plans, covering strategy, testing, offsite storage, high availability, documentation, incident response, scheduling, encryption, and cloud retention. Use when a network engineer needs backup assessments, DR pl
Builds and maintains disaster recovery plans covering risk assessment, business impact analysis, backup and recovery design, incident response, testing, vendor evaluation, compliance documentation, cloud DR, and monitoring. Use when a CTO needs to assess risks
Turns IT disaster recovery and business continuity work into a structured program covering risk assessment, impact analysis, plan development, testing, training, vendor continuity, communication, backup, incident response, compliance, and remote work. Use when
Organizes, secures, and retrieves office documents through filing, scanning, tagging, version control, retrieval, security, archiving, sharing, and disposal. Use when a receptionist needs to sort or tag documents, digitize paper files, set naming or version ru
Hunts client-side DOM vulnerabilities in web applications — DOM clobbering, postMessage flaws, service worker abuse, CSS injection, and client-side template injection — producing proof-of-concept payloads and evidence. Use when analyzing a target's HTML/JavaSc
Maintains and modernizes legacy .NET Framework 4.8 enterprise applications across Web Forms, WCF, Windows services, and EF6 data access. Use when assessing legacy code, implementing approved modernization, hardening security, tuning performance, designing WCF
Reviews .NET MAUI C#, XAML, and project files for obsolete controls, layout and performance problems, security gaps, and navigation or cross-platform issues. Use when the user shares MAUI code or XAML for review, asks which control to use, wants handler custom
Answers Drupal development questions with PHP 8.3+ and modern patterns, covering code examples, modules, theming, performance, security, testing, entities, forms, plugins, migrations, and APIs. Use when the user asks for Drupal code snippets, module or theme g
Analyzes e-commerce transaction data, builds fraud detection rules and models, monitors activity, and manages alerts. Use when reviewing transactions for anomalies, generating synthetic training data, setting up real-time monitoring, developing detection rules
Debugs services, optimizes ES|QL and vector search, and assesses Elastic Security alerts using live Elastic data. Use when a user reports errors, OOMKilled events, slow queries, low vector recall, or shares a security alert.
Reviews Electron app code across the Node.js main process, Angular renderer, and native integration layers for correctness, security, performance, and architecture. Use when a diff or PR touches Electron main process, Angular renderer, or native integration co
Builds secure cross-platform Electron desktop apps with native OS integration, auto-updates, and performance tuning. Use when starting an Electron project, hardening security, adding native features, setting up auto-update or code signing, optimizing startup a
Manages an inbox end-to-end — organizing, prioritizing, drafting, scheduling, tracking, archiving, templating, follow-ups, unsubscribing, security, search, and integration. Use when the user asks to sort email, flag urgent messages, draft or schedule replies,
Guides cybersecurity analysts through encryption and data protection decisions, including algorithm explanations, implementation steps, PKI, masking and tokenization, secure backup, DLP, compliance, secure communication tools, 2FA and training, and endpoint en
Develops encryption strategies covering standards research, data classification, tool evaluation, key management, implementation guidelines, risk assessment, compliance, training, and policy drafting. Use when an information security analyst needs encryption s
Index of the engineering-team skills bundle for Claude Code, Codex, Gemini CLI, Cursor, OpenClaw, and 6 more tools. Architecture, frontend, backend, QA, DevOps, security, AI/ML, data engineering, Playwright, Stripe, AWS, MS365 (stdlib-only Python tools). Use w
Assesses cybersecurity risk across vulnerability scanning, threat modeling, policy review, compliance, quantification, incident response, training, architecture, third parties, and reporting. Use when the user needs vulnerabilities prioritized, threats categor
Analyzes digital forensic evidence across file systems, memory, network traffic, malware, logs, email, databases, mobile devices, and threat intelligence, and supports incident response coordination. Use when an analyst provides evidence data and needs finding
Reviews code, architecture, performance, dependencies and security with blunt, technically precise criticism. Use when the user asks for a code quality review, architecture critique, performance bottleneck analysis, dependency assessment, or security vulnerabi
Designs, secures, and audits GitHub Actions workflows with least-privilege permissions, pinned actions, OIDC authentication, and supply-chain scanning. Use when creating or optimizing CI/CD workflows, setting up OIDC cloud auth, adding security scanning, audit
Audits GraphQL APIs for vulnerabilities and implements authorization, query validation, introspection control, rate limiting, and attack protections. Use when reviewing a GraphQL API for security, fixing unauthorized field access, adding depth/complexity limit
Audits gRPC endpoints for reflection enumeration, missing auth, trust-boundary bypass, plaintext transport, proto leakage, transcoding injection, and HTTP/2 Rapid Reset DoS. Use when testing authorized gRPC services, confirming gRPC transport, enumerating serv
