Security skills

This skill performs SAST with Semgrep, detecting vulnerabilities and mapping findings to OWASP and CWE to guide secure remediation.

This skill helps you write robust Rust for blockchain by enforcing formatting, safe imports, checked arithmetic, and clear documentation.

This skill implements authentication and payments using Clerk, Supabase Auth, and Stripe, guiding secure login flows and subscription handling.

This skill safely updates projects with the latest harness version, performing backups and non-destructive config updates.

This skill analyzes plans, code, and scope to enforce quality through context-aware reviews across security, performance, and feasibility.

This skill helps you craft Manifest V3 browser extensions with robust persistence, security, and cross-browser compatibility.

This skill enforces readable, secure JavaScript code by applying the clean-code gates, preventing over-engineering and hallucination-prone outputs.

This skill helps you implement PAYUNi webhook handling with signature verification, replay protection, and payment status updates for reliable Taiwan payment

This skill guides you through NewebPay integration setup, environment configuration, and routing to the right endpoints for checkout, query, or refund.

This skill guides you through PAYUNi integration setup and directs you to the right workflow for checkout, query, or webhook.

This skill helps you build cross-platform desktop apps with Electron, enabling secure IPC, native integrations, and framework-agnostic setup.

This skill guides thorough code reviews by applying best practices across quality, safety, performance, and testing to improve Java code.

This skill helps you implement OWASP Top 10 security controls in Java applications, guiding authentication, encryption, input validation, and secure

This skill helps you ensure Azure Verified Modules compliance by applying AVM Terraform, provider, and documentation standards across modules.

This skill helps you generate Terraform configurations following HashiCorp style, ensuring proper structure, naming, and security best practices.

This skill conducts comprehensive QA reviews for security, performance, accessibility, and test coverage, guiding remediation with concrete file-level fixes.

This skill helps you craft and validate solution-design documents that define architecture, interfaces, and technical decisions for clear implementation

This skill guides you through systematic code-quality reviews, improving correctness, design, security, performance, and maintainability with actionable

This skill helps you create and validate project constitutions by discovering patterns in your codebase and generating governance rules.

This skill helps you design and implement CI/CD pipelines with deployment strategies, quality gates, and GitHub/GitLab patterns.

This skill helps you design, document, and review REST, GraphQL, and OpenAPI contracts for consistent, evolvable APIs that developers love.