Browse
Showing 20 of 124 components
Four-phase root cause analysis — tracing, defense-in-depth, verification.
Runs CodeQL and Semgrep for automated security vulnerability detection in codebases.
A comprehensive Claude Code skill ecosystem for end-to-end blog management: strategy, briefs, calendars, writing, SEO op...
Find similar vulnerabilities and bugs across codebases using pattern-based analysis. Use when hunting bug variants, buil...
Detects timing side-channel vulnerabilities in cryptographic code. Use when implementing or reviewing crypto code, encou...
Run Semgrep static analysis scan on a codebase using parallel subagents. Supports two scan modes — "run all" (full rules...
Scans a codebase for security vulnerabilities using CodeQL's interprocedural data flow and taint tracking analysis. Trig...
Author, test, and refine YARA rules for malware, exploit, and artifact detection while minimizing false positives.
Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations including Claude Code Action, Gemi...
Performs comprehensive C/C++ security review for memory corruption, integer overflows, race conditions, and platform-spe...
Security audit skill collection from Trail of Bits covering vulnerability detection, binary analysis, SAST, and secure c...
Annotates codebases with dimensional analysis comments documenting units, dimensions, and decimal scaling. Use when some...
Structured task planning skill that uses markdown files for persistent plan tracking, progress updates, and subtask deco...
Parses and processes SARIF files from static analysis tools like CodeQL, Semgrep, or other scanners. Triggers on "parse...
Pure markdown knowledge management skills from the Obsidian CEO for working with vaults, note linking, tagging, and pers...
Verifies code implements exactly what documentation specifies for blockchain audits. Use when comparing code against whi...
Searches and explores Burp Suite project files (.burp) from the command line. Use when searching response headers or bod...
Generates minimal macOS Seatbelt sandbox configurations. Use when sandboxing, isolating, or restricting macOS applicatio...
Identifies error-prone APIs, dangerous configurations, and footgun designs that enable security mistakes. Use when revie...
Measure fuzzing or test coverage, identify untested parser and protocol paths, and translate coverage gaps into better h...