Agent skills for HTTP / API

Database security (encryption, access control, injection prevention), data governance (lineage, quality, MDM), and compliance frameworks…

Hardens code against vulnerabilities. Use when handling user input, authentication, data storage, or external integrations. Use when…

Curated bundle of essential security skills for building secure applications.

Web security headers validation and configuration generation

Comprehensive security patterns for authentication, authorization, input validation, and common vulnerability prevention

Produces a factual security posture document (docs/security-posture.md) and engineering roadmap by reading the codebase and any prior…

Evaluates customer security questionnaires against available evidence, identifies deal-blocking compliance gaps, and schedules remediation…

When to activate: security review, SAST, static analysis, Semgrep, Bandit, CodeQL, dependency audit, secrets detection, vulnerability…

Dependency vulnerability sweep for a Tessellate app — runs npm audit + Dependabot, separates real advisories from chain noise, classifies…

SedonaDB spatial engine enabling GeoACSets.jl categorical geospatial operations with O(log n) indexing

Requires OFOX_API_KEY — create one at https://app.ofox.ai.

Design a SEEDS regenerative inquiry cycle connecting place-based learning to ecological awareness for young learners.

Use when about to claim work is done / verified / working — empirical verification is required, not model-based confidence.

Use to design and document customer segments with clear criteria, metrics,

Seldon Core deployment skill for model serving, A/B testing, and canary deployments on Kubernetes.

Build a complete personalized business OS from one text or URL.

For Coty's selective distribution of luxury goods: defines standards, burden of proof, and counterarguments; result: test product with…

Design a mastery experience sequence that systematically builds student confidence in a skill they avoid.

Use when adding new skills to the library, when extracting insights from completed experiments, when consolidating lessons learned, or…

Demonstrate self-hosted CI runner abuse (CICD-SEC-7, insecure system configuration) during an authorized assessment — abusing a…

Enables Hermes to create new reusable skills for itself by researching live web sources with TinyFish Search and Fetch, analyzing source…