Browser automation with Puppeteer CLI scripts.
React Native and Expo best practices for building performant mobile apps.
Postgres performance optimization and best practices from Supabase.
Use when you suspect API keys, tokens, or passwords are hardcoded in source code or committed to git history — scans and guides safe…
Detect hard-coded secrets, tokens, private keys, API credentials in source code, config files, commit history, and CI logs.
Scan for exposed secrets/credentials/API keys
Skill for the Securacymcp area of Securacy. 101 symbols across 20 files.
Guides through Trail of Bits' 5-step secure development workflow.
Create and secure S3 buckets following AWS best practices for access control, encryption, monitoring, and remediation of misconfigurations.
Comprehensive security analysis with vulnerability detection and remediation tracking
Master skill for comprehensive security analysis.
Curated bundle of essential security skills for building secure applications.
Web security headers validation and configuration generation
Comprehensive security patterns for authentication, authorization, input validation, and common vulnerability prevention
Produces a factual security posture document (docs/security-posture.md) and engineering roadmap by reading the codebase and any prior…
Evaluates customer security questionnaires against available evidence, identifies deal-blocking compliance gaps, and schedules remediation…
When to activate: security review, SAST, static analysis, Semgrep, Bandit, CodeQL, dependency audit, secrets detection, vulnerability…
Dependency vulnerability sweep for a Tessellate app — runs npm audit + Dependabot, separates real advisories from chain noise, classifies…
Use when automating browsers with Playwright/Puppeteer, testing Chrome extensions, using Chrome DevTools Protocol (CDP), handling dynamic…
Requires OFOX_API_KEY — create one at https://app.ofox.ai.
Design a SEEDS regenerative inquiry cycle connecting place-based learning to ecological awareness for young learners.