Agent skills for HTTP / API

Scan code changes or a whole repo for security vulnerabilities using STRIDE, validate findings for real exploitability, and report with…

Launch Second Brain - note capture and retrieval system

When to activate: second brain, BASB, Building a Second Brain, CODE method, knowledge management, creative output, insight capture…

When to activate: secondary research, desk research, industry reports, data sources, Statista, Gartner, IBISWorld, citation validation…

Use when the user works with a markdown knowledge base (VitePress, Docusaurus, Obsidian, Jekyll) backed by YAML frontmatter and per-doc…

Agent-only reference for persistent secondmate setup and retirement.

Detect exposed secrets, API keys, and credentials in code.

Scan for exposed secrets/credentials/API keys

Secure secrets management practices for CI/CD pipelines using Vault, AWS Secrets Manager, and other tools.

Secure secrets management practices for CI/CD pipelines using Vault, AWS Secrets Manager, and other tools.

When to activate: secrets, API keys, environment variables, Vault, AWS Secrets Manager, .env, secret rotation, credentials

Design, provision, use, rotate, revoke, detect, and recover from application secrets safely.

Declaratively register API keys and service credentials a template needs so they appear in the agent sidebar settings UI and the…

Verify visual changes to the Sector game using screenshots and ASCII layout inspection via sector-mcp tools.

Security audit. Use when hunting secrets, reviewing auth, threat modeling, checking skill supply chain, or hardening an app before it goes…

Use when implementing authentication/authorization, securing user input, or preventing OWASP Top 10 vulnerabilities — including custom…

Use when designing or implementing software securely: define security requirements, threat-model a feature, choose secure defaults, design…

Add secure storage to .NET MAUI apps using SecureStorage.Default.

Production-grade secure file upload pipeline with multi-stage validation, malware scanning (ClamAV), hash-based duplicate detection, and…

Secures AWS API Gateway endpoints with AWS WAF by configuring managed

Hardens AWS IAM configurations to enforce least-privilege access, covering