全部能力

使用 JWT、OAuth 2.0、API 密钥实现安全的 API 认证。适用于认证系统、第三方集成、服务间通信或…

Comprehensive security guide for Capacitor apps using Capsec scanner. Covers 63+ security rules across secrets, storage, network, authentication, cryptography,…

Setup and manage Kernel authentication connections for any website (Gmail, GitHub, Outlook, or custom domains). Handles managed auth flows with automatic…

Push current branch changes to origin and create or update the corresponding

Review current branch for blindspots; fix now / needs spec / create issues.

Primary Playwright governance skill for sandbox browser verification and deterministic end-to-end authoring or rewrite work.

Git 버전 관리 모범 관례 및 워크플로우 가이드. 다음 상황에서 사용: (1) Git 커밋 메시지 작성 시 (Conventional Commits 규칙 적용), (2) 브랜치 생성 및 관리 시 (GitHub Flow 기반), (3) PR 생성 및 병합 전략 선택 시, (4) Git…

>

Security audit and vulnerability scanner for AI agent skills before installation. Use when: (1) evaluating a skill from an untrusted source, (2) auditing a skill directory or git repo URL for malicious code, (3) pre-install security gate for Claude Code plugins, OpenClaw skills, or Codex skills, (4) scanning Python scripts for dangerous patterns like os.system, eval, subprocess, network exfiltration, (5) detecting prompt injection in SKILL.md files, (6) checking dependency supply chain risks, (7) verifying file system access stays within skill boundaries. Triggers: "audit this skill", "is this skill safe", "scan skill for security", "check skill before install", "skill security check", "skill vulnerability scan".

Integrates Base Account SDK for authentication and payments. Covers Sign in with Base (SIWB), Base Pay, Paymasters, Sub Accounts, Spend Permissions, Prolinks,…

Analyzes landing pages and provides detailed CRO (Conversion Rate Optimization) recommendations. Use when user provides a landing page URL or HTML/CSS code and…

Guides developers and admins through direct interaction with the Fusion Help REST API — reading articles, FAQs, release notes, searching content, and managing…

Deploys smart contracts to Base using Foundry. Covers forge create commands, contract verification, testnet faucet setup via CDP, and BaseScan API key…

Android APK 解包和资源提取工具，用于逆向工程。在需要解码 APK 文件、提取资源、检查…时使用。

Comprehensive Docker security guidelines and threat mitigation strategies

Expert-level insurance systems, underwriting, claims processing, actuarial analysis, risk assessment, and insurtech solutions

Conduct comprehensive SSH security assessments including enumeration, credential attacks, vulnerability exploitation, tunneling techniques, and…

Hono middleware patterns - creation, composition, built-in middleware, and execution order for web applications

Manage authentication and user operations in Supabase. Use for sign up, sign in, sign out, password resets, and user management.

Derive security requirements from threat models and business context. Use when translating threats into actionable requirements, creating security user…