Security skills

This skill guides you through Goth multi-provider authentication in Go, helping you install, configure providers, and implement secure OAuth flows.

This skill helps secure Slack app authentication by guiding OAuth, token management, scope configuration, and production best practices.

This skill helps you implement Google's continuous fuzzing framework with OSS-Fuzz and ClusterFuzz to automate bug discovery and CI/CD integration.

This skill helps you design safe, memory-efficient Rust code inspired by Graydon Hoare's vision, emphasizing ownership, zero-cost abstractions, and practical

This skill helps you design threat detection using the Pyramid of Pain and Threat Hunting Maturity Model to maximize adversary pain.

This skill helps you implement and validate RBAC permissions in Epic Stack with explicit checks and owner versus any access.

This skill helps enforce secure handling of secrets, auth data, and PII in Flutter apps by guiding storage, testing, and threat mitigation.

This skill reviews code as adversary to uncover bugs, security gaps, and hidden risks before deployment.

This skill analyzes PCAPs from the OSI outward, delivering expert forensics insights with native Linux tools and precise attribution.

This skill maps threats to MITRE ATT&CK tactics and techniques to improve detection coverage and threat intelligence.

This skill helps you craft portable detection rules with Sigma and YARA, enabling cross-platform sharing and quality through community-driven patterns.

This skill provides expert Oracle Autonomous Database guidance for performance, security, HA/DR, and OCI automation to optimize DBA tasks.

This skill helps implement rate limiting strategies including token bucket, exponential backoff, and Redis-backed quotas to protect APIs and clients.

This skill automates vulnerability scanning across dependencies and code, triages findings, and prioritizes remediation to reduce risk before deployment.

This skill helps you build threat hunting programs by applying Roberto Rodriguez's playbook with reproducible notebooks, data-driven tests, and open-source

This skill proactively requests a second opinion on architectural decisions, complex trade-offs, or security reviews to provide multiple perspectives.

This skill helps you build high-performance APIs with FastAPI, enabling async endpoints, automatic docs, and type-safe request handling.

This skill helps you deliver tax reports and compliance alerts via SendGrid with templates, tracking, and secure attachments.

This skill provides best-practice guidance for Gadget full-stack apps, covering modeling, actions, routes, access control, and platform integrations.

This skill helps audit AI development artifacts with ai-coding-shield, identifying security risks in workflows, MCPs, and agentic skills.

This skill runs ESLint on your codebase to identify and fix linting issues quickly and safely.