Security skills

This skill compiles binary analysis findings into structured reports, validating hypotheses and producing documented evidence for handoff and archival.

This skill enables safe dynamic analysis of binaries by guiding QEMU/GDB/Frida workflows with human approval and sandbox safeguards.

This skill performs deep static analysis of binaries using r2 and ghidra to map functions, decompile code, and reveal data flow.

This skill helps you stress-test designs by challenging assumptions and surfacing edge cases without providing solutions.

This skill enables secure remote management by executing SSH commands, viewing logs, and restarting services on a server.

This skill guides you through preparing a codebase for open-source release, auditing, documentation, hardening, and final review.

This skill helps you plan SaaS architectures using the Fifteen-Factor framework, integrating API First, Telemetry, and Security for cloud-native apps.

This skill audits a repository for openness, scanning secrets, docs, licenses, and metadata to prepare a public release.

This skill helps manage Rust and Node.js dependencies by adding, updating, auditing, and resolving conflicts across cargo and npm.

This skill performs comprehensive security audits and vulnerability scanning across dependencies, code, and secrets to harden deployments.

This skill analyzes GitHub issues and infers Miyabi's 57-label system to aid triage and labeling efficiency.

This skill helps you review Rust firmware for safety-critical CAN, watchdogs, e-stop handling, and VESC integration to ensure robust BVR operation.

This skill orchestrates a comprehensive Supabase security audit, guiding phased testing and progressive evidence logging for reliable risk reporting.

This skill architects rigorous, traceable system specifications by generating five interconnected documents with verifiable sources and complete

This skill extracts the Supabase project URL from client-side code and config to enable rapid testing and targeted security auditing.

This skill identifies publicly accessible storage buckets in Supabase and provides actionable remediation guidance to prevent data exposure.

This skill audits Supabase Realtime channels for unauthorized subscriptions and data exposure, logging findings progressively for secure channel configuration.

This skill creates a test authenticated user to audit access gaps versus anonymous users and detect IDOR, cross-user access, and privilege escalation.

This skill inventories all Supabase storage buckets and configurations, highlighting public exposure and RLS gaps to strengthen storage security.

This skill verifies storage bucket access by listing files, reading metadata, and downloading samples to validate permissions and RLS policies.

This skill extracts the Supabase anon key from client code to enable secure testing and RLS verification across projects.