EXPLORE COMPONENTS

Semgrep Rule Variant Creator

skilltrail-of-bitssemgrep+3

Creates language variants of existing Semgrep rules. Use when porting a Semgrep rule to specified target languages. Take...

Audit Context Building

skilltrail-of-bitsaudit+2

Enables ultra-granular, line-by-line code analysis to build deep architectural context before vulnerability or bug findi...

Supply Chain Risk Auditor

skilltrail-of-bitssupply+3

Identifies dependencies at heightened risk of exploitation or takeover. Use when assessing supply chain attack surface,...

Supply Chain Risk Auditor

supply-chaindependenciesnpm-audit+1

Evaluates dependency threat landscapes for software supply chain security.

Feb 25, 20266.4k

False Positive Check

Systematically verifies suspected security bugs to eliminate false positives. Produces TRUE POSITIVE or FALSE POSITIVE v...

skilltrail-of-bitscheck

Insecure Defaults

skilltrail-of-bitsinsecure+1

Detects fail-open insecure defaults (hardcoded secrets, weak auth, permissive security) that allow apps to run insecurel...

Firebase APK Scanner

skilltrail-of-bitsfirebase+2

Scans Android APKs for Firebase security misconfigurations including open databases, storage buckets, authentication iss...

DWARF Expert

skilltrail-of-bitsdwarf+1

Provides expertise for analyzing DWARF debug files and understanding the DWARF debug format/standard (v3-v5). Triggers w...

Semgrep Rule Creator

skilltrail-of-bitssemgrep+2

Creates custom Semgrep rules for detecting security vulnerabilities, bug patterns, and code patterns. Use when writing S...

Git Cleanup

Safely analyzes and cleans up local git branches and worktrees by categorizing them as merged, squash-merged, superseded...

skilltrail-of-bitsgit+1

Devcontainer Setup

skilltrail-of-bitsdevcontainer+1

Creates devcontainers with Claude Code, language-specific tooling (Python/Node/Rust/Go), and persistent volumes. Use whe...

Modern Python

skilltrail-of-bitsmodern+1

Configures Python projects with modern tooling (uv, ruff, ty). Use when creating projects, writing standalone scripts, o...

Second Opinion

skilltrail-of-bitssecond+1

Runs external LLM code reviews (OpenAI Codex or Google Gemini CLI) on uncommitted changes, branch diffs, or specific com...

Skill Improver

skilltrail-of-bitsimprover

Iteratively reviews and fixes Claude Code skill quality issues until they meet standards. Runs automated fix-review cycl...

Threat Modeling Skill

threat-modelingstridesecurity-architecture+1

CldKit Team

80/100

STRIDE-based threat modeling for identifying and mitigating security risks in architectures.

Mar 10, 20262 recipes

Prompt Engineering Skill