All Skills

Find accounts for a username across 400+ platforms.

Set up op CLI, sign in, and read or inject secrets.

Pre-commit review: security scan, quality gates, auto-fix.

Authorized web pentest: recon, proof-based exploits, report.

GitHub supply-chain forensics: recovery, IOCs, reporting.

Read-only EVM client: wallets, tokens, gas across 8 chains.

Autonomously remove your info from data-broker sites.

7-stage super workflow for GitHub repo audit, cleanup, PR review, and competitor analysis

Expert security auditor for AI Skills and Bundles. Performs non-intrusive static analysis to identify malicious patterns, data leaks, system stability risks, and obfuscated payloads across Windows, macOS, Linux/Unix, and Mobile (Android/iOS).

Pre-install security scanner for AI agent skills. 7.5% of 14,706 skills are malicious. Audit before you trust.

Audit and migrate an existing Markdown renderer to Markstream while preserving custom renderers, security policy, streaming behavior, and explicit parity gaps.

Run read-only exposure checks for security advisories and write a structured local audit report.

6 production-ready AI engineering workflows: prompt evaluation (8-dimension scoring), context budget planning, RAG pipeline design, agent security audit (65-point checklist), eval harness building, and product sense coaching.

Run Bumblebee supply-chain inventory and exposure scans on macOS/Linux to detect compromised packages, extensions, and MCP host configs.

Turns a WordPress Site Health report into a risk-tiered, backup-first fix plan with exact WP-CLI/PHP snippets. Use for site health, recommended improvements, or critical issue reports.

13-phase production QA for fullstack Next.js apps: build verification, SEO tags, OG images, favicon, route regression, API auth, page speed, lazy load, vulnerability scan, UI/UX cards, error boundaries, database, secure rendering, and cleanup.

Comprehensive AWS security posture assessment using AWS CLI and security best practices

Automate AWS secrets rotation for RDS, API keys, and credentials

IAM policy review, hardening, and least privilege implementation

Audit a shipped repo for production-readiness gaps across RLS, webhooks, secrets, grants, Stripe idempotency, mobile UX, and deployment health.

Security audit, hardening, threat modeling (STRIDE/PASTA), Red/Blue Team, OWASP checks, code review, incident response, and infrastructure security for any project.

红琥珀警示色 + hazard 条纹 + L1/L2/L3 tier 卡片 + 删除线标题

Meta's 86M prompt injection and jailbreak detector. Filters malicious prompts and third-party data for LLM apps. 99%+ TPR, <1% FPR. Fast (<2ms GPU). Multilingual (8 languages). Deploy with HuggingFace or batch processing for RAG security.

Sign Windows executables with Authenticode using signtool, supporting EV and standard certificates