Production implementation guide for new container image supply-chain security: OCI image signing, digest-first builds, GitHub artifact…
Audit a ContextOS proof-carrying run using RunContext, CompiledContext, ToolEnvelope, DecisionRecord, trace, scorecard, and ReplayPacket…
Audit, disable, and restore selected Windows AI features through reviewable registry and policy changes with explicit elevation and…
Guide for converting Apache JMeter tests to Gatling.
Correlates disparate security incidents, IOCs, and adversary behaviors
Comprehensive overview of ALL Coval platform resources, their hierarchy, relationships, API endpoints, and ID formats.
Activation requires either supplied .NET coverage reports/percentages/line, branch, or condition metrics, or an explicit request to…
Scaffolds eval.yaml evaluation specs for agent skills in the dotnet/skills repository.
Analyze environment variables in JavaScript/TypeScript projects.
Extracts protocol message flow from source code, RFCs, academic papers, pseudocode, informal prose, ProVerif (.pv), or Tamarin (.spthy)…
When to activate: encryption, hashing, bcrypt, argon2, AES, RSA, TLS, key management, cryptography, signing
/cs:ai-act-readiness <system> — EU AI Act 6-question forcing interrogation.
/cs:ciso-review <plan> — Risk-paranoid interrogation of any plan that touches data, compliance, or production access.
Content Security Policy configuration, nonces, and reporting.
Guides and automates complex binary analysis, reverse engineering, and CTF challenge solving across multiple platforms.
Reference: https://www.first.org/cvss/v4.0/specification-document Analyze the vulnerability and produce a CVSS v4.0 vector string with a…
Expert Cypress testing framework integration for browser-based end-to-end testing
Use when code has been written and needs validation before committing, or when the user asks for a code review or security check.
DART Test: unit tests, integration tests, CI validation, and debugging
Testing framework for evaluating Databricks skills.
This skill should be used when the user asks to "create a hookify rule", "write a hook rule", "configure hookify", "add a hookify rule"…