Security skills

This skill helps you implement language-independent tokenization with SentencePiece to support multilingual models and reproducible vocabularies.

This skill enforces runtime safety for LLMs with configurable jailbreaking, toxicity, PII, and fact-checking rails to improve reliability.

This skill ensures explicit user permission before any file deletion, preventing accidental loss by requiring approval for all delete operations.

This skill helps design robust REST APIs, optimize databases, and secure backend systems with scalable patterns.

This skill analyzes and enforces API design best practices, helping teams ship consistent, well-documented, and future-proof REST APIs.

This skill helps you audit and manage dependencies across projects, uncover vulnerabilities, ensure license compliance, and plan safe upgrades.

This skill helps establish and audit ISO 27001 ISMS for HealthTech, guiding risk assessments, control mapping, and certification readiness.

This skill guides threat modeling, vulnerability analysis, and secure design using STRIDE, OWASP, and best-practice security patterns to strengthen systems.

This skill helps you implement best-practice Better Auth integration in your TypeScript apps, simplifying secure authentication setup and plugin usage.

This skill prepares codebases for security reviews by guiding goals, running static analysis, boosting test coverage, removing dead code, and generating

This skill helps identify timing side-channel vulnerabilities in cryptographic code by flagging secret-dependent timing and branch behavior.

This skill helps you locate variant vulnerabilities across codebases by pattern-based analysis and systematic auditing guidance.

This skill helps you apply property-based testing to serialization, parsing, validation, and smart contracts to improve coverage.

This skill detects fail-open insecure defaults such as weak secrets and permissive config to help audit production readiness and secure deployments.

This skill runs CodeQL analysis to detect security vulnerabilities across languages using interprocedural taint tracking and data flow insights.

This skill analyzes token implementations and integrations against ERC20/ERC721 standards, identifies 20+ weird patterns, and flags on-chain risks for secure

This skill helps you validate crypto implementations against known attacks using Wycheproof test vectors across AES-GCM, ECDSA, RSA, and more.

This skill helps fuzzers detect memory errors in C/C++ code using AddressSanitizer to find overflows and use-after-free issues.

This skill provides an independent code review by integrating Codex and Gemini CLIs for uncommitted changes, diffs, or specific commits.

This skill guides authoring of high quality YARA-X rules for malware detection, focusing on performance, accuracy, and safe migration.

This skill helps you interact with GitHub resources using the gh CLI, replacing curl or WebFetch for repos, PRs, issues, and API data.