Security skills

You are a dependency security expert specializing in vulnerability scanning, license compliance, and supply chain security. Analyze project dependencies for known vulnerabilities, licensing issues, outdated packages, and provide actionable remediation strategies.

Statically audit Claude Code permission settings and Codex approval, sandbox, and policy configuration without executing project code.

Shared configuration patterns for project setup commands. Provides security hooks, Claude framework structure templates, and framework detection patterns used across multiple setup commands.

Identify error-prone APIs and dangerous configurations

   Give AI assistants (Claude, Cursor, VS Code, etc.) the ability to control your desktop and automate tasks across any application. Claude Code (one-liner): Other clients (Cursor, VS Code, Windsurf, etc.): Add to your MCP config file: See the MCP Agent README for detailed setup instructions. - Uses your browser session - no need to relogin, keeps all your cookies and auth - Doesn't take

Build Slack apps using the Bolt framework across Python, JavaScript, and Java. Covers Block Kit for rich UIs, interactive components, slash commands, event handling, OAuth installation flows, and Workflow Builder integration. Focus on best practices for production-ready Slack apps. Use when: slack bot, slack app, bolt framework, block kit, slash command.

Netresearch AI skill for assessing and enhancing software projects to meet enterprise-grade standards for security, quality, and automation. This is an Agent Skill following the open standard originally developed by Anthropic and released for cross-platform use. Supported Platforms: - ✅ Claude Code (Anthropic) - ✅ GitHub Copilot - ✅ Other skills-compatible AI agents - OpenSSF Framework Alignment -

Verify fix commits address audit findings without new bugs

Build security Blue Books for sensitive apps

All servers: 100 vendors, US region, individual plans, stateless, no auth, 100 req/min. Start local dev server: In a separate terminal: Use workflow endpoints when you want one request to return: - decision classification (yes | no | tie) from /api/decide - policy result from the relevant notary endpoint - recommended Zendesk action + tags + private note with requestid - POST https://refund.decide

Use when you need to address review or issue comments on an open GitHub Pull Request using the gh CLI.

Triggers on TastyTrade account queries, trading, positions, orders, options analysis.

Skill for integrating Better Auth - the comprehensive TypeScript authentication framework.

Derive security requirements from threat models and business context. Use when translating threats into actionable requirements, creating security user stories, or building security test cases.

Red team tactics principles based on MITRE ATT&CK. Attack phases, detection evasion, reporting.

Use Gait when an AI agent can cause real side effects and you need deterministic control plus portable proof. Gait is not an agent framework, not a model host, and not a dashboard. It is an offline-first Go CLI that sits at the tool boundary. Capture every prod agent tool call as a signed, offline-verifiable pack. Enforce fail-closed policy before high-risk actions execute. Turn incidents into CI

Expert malware analyst specializing in defensive malware research,

Map identified threats to appropriate security controls and mitigations. Use when prioritizing security investments, creating remediation plans, or validating control effectiveness.

Understand anti-reversing, obfuscation, and protection techniques encountered during software analysis. Use when analyzing protected binaries, bypassing anti-debugging for authorized analysis, or understanding software protection mechanisms.

Perform language and framework specific security best-practice reviews and suggest improvements. Trigger only when the user explicitly requests security best practices guidance, a security review/report, or secure-by-default coding help. Trigger only for supported languages (python, javascript/typescript, go). Do not trigger for general code review, debugging, or non-security tasks.

Expert patterns for HubSpot CRM integration including OAuth authentication, CRM objects, associations, batch operations, webhooks, and custom objects. Covers Node.js and Python SDKs. Use when: hubspot, hubspot api, hubspot crm, hubspot integration, contacts api.

Context compaction for AI code assistants – Give your AI structured, token-efficient access to 17+ languages including Elixir, Python, TypeScript, JavaScript, Rust, and more. Quick Install · Security · Developers · AI Assistants · Docs The core problem: AI code assistants waste context on blind searches. Grep dumps entire files when you only need a function signature, leaving less room for actual

A Model Context Protocol (MCP) server that enables free web searching using Google search results, with no API keys required. - Search the web using Google search results - No API keys or authentication required - Returns structured results with titles, URLs, and descriptions - Configurable number of results per search 1. Clone or download this repository 2. Install dependencies: 3. Build the serv