Captures command output containing credentials without leaking the value into terminal output, transcripts, or agent logs.
Design and execute a risk-based verification strategy for a software change, bug fix, refactor, migration, configuration update, or…
Designs and executes resilience tests to identify system vulnerabilities and improve infrastructure reliability through controlled failures.
Harden builds against dependency confusion / substitution and dependency-chain abuse (CICD-SEC-3).
Security leadership for growth-stage companies.
Set up local development workflow with Clerk.
Multi-cloud security assessment and penetration testing capabilities.
Install and run the Continue CLI (`cn`) to execute AI agent checks on local code changes.
Agent skill for code-analyzer - invoke with $agent-code-analyzer
Multi-dimensional code review across correctness, security, performance, and maintainability with confidence-gated reporting and…
Provides file paths to language-specific extension files for the code-testing pipeline.
ALWAYS USE whenever asked to write, add, or generate unit tests for existing code, including one helper, function, class, or missing…
Review Code2Skill request semantics against authorized source code, including source binding, cross-Tool handoffs, deterministic…
Implement CodeRabbit PII handling, data retention, and GDPR/CCPA compliance
Collect a bounded, read-only system inventory for troubleshooting while identifying privilege gaps and avoiding secrets or invasive…
Collects and synthesizes open-source intelligence (OSINT) about threat
Deploy MISP, configure threat feeds (MISP community, freetext, TAXII, CSV), and use the PyMISP API to programmatically fetch, add, and…
Collect volatile forensic evidence from a compromised host by following the order of volatility, preserving memory, network connections…
A portable community plugin for validating OpenDesign plugin import flows.
Internal downstream skill for ctf-sandbox-orchestrator.