全部能力

面向医疗应用的受保护健康信息 (PHI) 和个人身份信息 (PII) 合规模式。涵盖数据分类，…

面向医疗应用部署的患者安全评估工具。用于 CDSS 准确性、PHI 泄露、临床工作流完整性等场景的自动化测试套件，……

Run multi-judge consensus.

Creates devcontainers with Claude Code, language-specific tooling (Python/Node/Rust/Go), and persistent volumes. Use when adding devcontainer support to a…

通过分析日志、指标和诊断信息来排查 Google Cloud 网络问题。适用于调查 VPC 流日志、NAT、防火墙或威胁日志，查询延迟和吞吐量指标，或运行 Connectivity Tests 以进行路径诊断。

Use when designing GraphQL schemas, implementing Apollo Federation, or building real-time subscriptions. Invoke for schema design, resolvers with DataLoader,…

在代码仓库中寻找可利用且能获取赏金的安全问题。专注于符合真实漏洞报告标准、可被远程触发的漏洞，而非……

Implement secure coding practices following OWASP Top 10. Use when preventing security vulnerabilities, implementing authentication, securing APIs, or…

针对医疗隐私与安全的 HIPAA 专用入口。当任务明确围绕 HIPAA、PHI 处理、受覆盖实体、BAAs 等展开时使用。

Repository-grounded threat modeling that enumerates trust boundaries, assets, attacker capabilities, abuse paths, and mitigations, and writes a concise…

证据优先的 ECC 工具消耗与账单审计工作流。在调查 PR 激增创建、配额绕过、高级模型泄漏、重复作业或……时使用。

Audit and harden hosts running OpenClaw for SSH, firewall, updates, exposure, cron checks, and risk posture.

Use CloudBase document database WeChat MiniProgram SDK to query, create, update, and delete data. Supports complex queries, pagination, aggregation, and…

Generate FilamentPHP v4 resources with form, table, relation managers, and actions

Permission Set analysis, hierarchy viewer, and access auditing. TRIGGER when: user asks "who has access to X?", analyzes permission sets/groups, or touches .permissionset-meta.xml / .permissionsetgroup-meta.xml files. DO NOT TRIGGER when: creating new metadata (use sf-metadata), deploying permission sets (use sf-deploy), or Apex sharing logic (use sf-apex).

Salesforce Connected Apps and OAuth configuration with 120-point scoring. TRIGGER when: user configures OAuth flows, JWT bearer auth, Connected Apps, or touches .connectedApp-meta.xml / .eca-meta.xml files. DO NOT TRIGGER when: Named Credentials for callouts (use sf-integration), permission policies (use sf-permissions), or API endpoint code (use sf-apex).

Run a compliance check on a proposed action, product feature, or business initiative, surfacing applicable regulations, required approvals, and risk areas. Use…

Generates Mermaid diagrams from Trailmark code graphs. Produces call graphs, class hierarchies, module dependency maps, containment diagrams, complexity heatmaps, and attack surface data flow visualizations. Use when visualizing code architecture, drawing call graphs, generating class diagrams, creating dependency maps, producing complexity heatmaps, or visualizing data flow and attack surface paths as Mermaid diagrams.

This skill ensures all code follows security best practices and identifies potential vulnerabilities. Use when implementing authentication or authorization,…

Security audit guidelines for web applications and REST APIs based on OWASP Top 10 and web security best practices. Use when checking code for vulnerabilities,…