Claude Skills by aibot88

Run a security vulnerability assessment based on KISA guidelines. Supports CII (560+ items), AI Security Guide, Robot Security (103 items), Space Security (satellite/GSaaS/supply chain, 12 domains, 53 items), Secure Coding (46 CWE), Zero Trust (~396 items), and SW Supply Chain Security (SBOM, 29 items). Use when "security assessment", "vulnerability scan", "CII audit", "KISA assessment", "AI security", "robot security", "space security", "satellite security", "GSaaS security", "zero trust", "...

KISA 가이드라인 기반 배포 전 보안 컴플라이언스 체크리스트를 실행합니다. CII 컴플라이언스(70항목), AI 보안 체크리스트, 로봇 보안 체크리스트, 우주 보안 체크리스트(12분야 53항목)를 지원합니다. "배포 전 점검", "컴플라이언스 체크", "보안 체크리스트", "우주 보안 점검", "위성 보안 체크" 시 사용하세요.

AI 도구(Claude, ChatGPT, Cursor, Copilot)용 시큐어 코딩 프롬프트와 가이드를 생성합니다. KISA CII, CWE 매핑, AI 보안, 로봇 보안, 우주 보안(CCSDS/위성 프로토콜/GSaaS/공급망) 가이드를 지원합니다. "보안 가이드 생성", "시큐어코딩 가이드", "우주 시큐어코딩", "위성 보안 가이드" 시 사용하세요.

将一个真实的人蒸馏为 AI Skill —— 她的声音、她的记忆、她的温度。 通过聊天记录、照片、文字叙述等原材料，构建一个完整的数字副本。

对代码项目进行全面安全审计，支持 Python、Node.js、Go、Java 四种语言。 包含依赖漏洞扫描（结合原生工具 + Claude 分析）、代码安全模式检查（OWASP Top 10、注入、反序列化、 敏感信息泄露、认证授权、加密问题等）、业务逻辑审计、攻击链构建、配置审计、以及结构化报告输出。 触发场景：(1) 用户要求对项目进行安全审计/安全检查/代码审计 (2) 用户要求检查代码中的安全漏洞 (3) 用户要求进行依赖漏洞扫描 (4) 用户提到 security audit、vulnerability scan、代码审计、安全扫描、渗透测试前的代码审查 (5) 用户要求检查 OWASP Top 10 相关问题

Trade on Polymarket via split + CLOB execution. Browse markets, track positions with P&L, discover hedges via LLM. Polygon/Web3.

> A step-by-step guide to designing and implementing a Computer Networks mini-project > using a Market / Shopping Complex as the real-world scenario. > Follows the same requirements as the IOE Pulchowk CN (CT 654) course project. ---

Use this skill whenever creating PPTX slides, presentations, or decks with any of these 30 modern design styles: Glassmorphism, Neo-Brutalism, Bento Grid, Dark Academia, Gradient Mesh, Claymorphism, Swiss International, Aurora Neon Glow, Retro Y2K, Nordic Minimalism, Typographic Bold, Duotone Color Split, Monochrome Minimal, Cyberpunk Outline, Editorial Magazine, Pastel Soft UI, Dark Neon Miami, Hand-crafted Organic, Isometric 3D Flat, Vaporwave, Art Deco Luxe, Brutalist Newspaper, Stained Gl...

Narrative architect. Analyzes and structures stories using Dan Harmon's Story Circle, character arc mapping, plant/payoff tracking, and tonal diagnostics. Apply when outlining, revising, or evaluating any narrative — novels, screenplays, short stories, or episodic content.

Autonomous mobile security audit aligned with OWASP MASTG v2. Performs checklist-driven analysis across MASVS categories: storage, crypto, network, platform, code, resilience, privacy. Exports structured markdown report with MASTG test references.

Use this skill when the user wants to write a Foundry Proof of Concept (PoC) test that reproduces a smart contract vulnerability against a real deployed protocol on a mainnet fork. Triggers include phrases like "write a PoC", "reproduce this bug with Foundry", "fork mainnet and exploit", "validate this finding on-chain", or when the user provides a vulnerability report alongside deployed contract addresses. This skill is strictly for mainnet-forked, real-contract, end-to-end reproductions on ...

Backend development with security-first approach. Use when building APIs, handling data, implementing authentication, or addressing security vulnerabilities.

Activates for any bug bounty, penetration testing, or vulnerability research request. Triggers on: "start recon on [target]", "check for IDOR/SSRF/XSS on [endpoint]", "map attack surface for [domain]", "write a HackerOne/Bugcrowd report", "help me find vulns in this API", "create a PoC for this vulnerability", "enumerate subdomains", "scan for open ports", "chain these vulnerabilities", or any request involving ethical hacking, web/API security testing, red-teaming, or responsible disclosure....

Use this skill to identify and prevent common security vulnerabilities in code. Trigger when writing code, reviewing code for security, or assessing vulnerability risks. This skill covers injection attacks, authentication flaws, data exposure, and security best practices. Essential for writing secure code. Use continuously throughout development to prevent vulnerabilities before they reach production.

- git clone --mirror (镜像)： 主要用于仓库迁移(常见不同托管平台)：实现仓库一比一完整迁移： 保留所有分支，提交历史、标签等

Purpose: post to Buffer-connected social channels (Pinterest, YouTube, TikTok for FDWA right now) via Buffer's official MCP server.

General AI Supply Chain Security Skill for any AI agent platform in 2026. Detects the exact class of attack that hit Vercel (and every similar real threat): over-privileged integrations, unpinned CI actions, unsigned webhooks, cross-boundary token forwarding, malicious MCP/OpenClaw skills, and OWASP ASI-09 risks. Runs live VirusTotal on every external dependency.

A valid test skill for validation testing.

Patch CVE vulnerabilities across one or many repositories. Invoke with a list of CVEs and optionally specific repo names. Researches each CVE (affected package, ecosystem, versions), then launches dependency-patcher agents to update, verify, commit, and push. Use this skill whenever the user mentions CVEs, security vulnerabilities in dependencies, patching dependencies, or updating packages for security fixes — even if they don't say 'CVE' explicitly but reference a security advisory or vulne...

- **Name:** MACP Research Assistant - **Version:** 0.1.0-alpha - **Author:** YSenseAI / FLYWHEEL TEAM - **License:** MIT - **Repository:** https://github.com/creator35lwb-web/macp-research-assistant

Claude-Zeroclaw is a lightweight, open-source daemon that runs within Claude Code, enabling background task automation, scheduled jobs, Telegram integration, voice transcription, and persistent memory — all without separate API keys or additional billing overhead.

Eres un DevOps Engineer. Configuras CI/CD, infraestructura como código, y deployment a Azure cloud.

git commit -m "$(cat <<'EOF' type(scope): 简述 EOF )" git commit -m "$(cat <<'EOF' type(scope): 简述 body（如有） EOF )" 提交后执行 git status 确认成功 第七步：后续建议 提交成功后，根据情况提示： 还有未提交的改动 → 提醒并建议下一次提交内容 分支领先 remote → 提示可以 push（不自动 push） 如果用户要求创建 PR → 按标准 PR 流程执行

Claude Code 自进化系统初始化技能。为任意项目搭建完整的自进化开发环境， 包括：认知核心(CLAUDE.md)、权限配置(settings.json)、路径作用域规则(rules/)、 专用子智能体(agents/)、工作流(skills/)、记忆系统(memory/)。当用户说"初始化自进化系统"、 "搭建Claude Code进化环境"、"设置项目进化配置"、"启用自进化"时触发。

Fix CVEs in project dependencies end-to-end. Use when the user wants to fix a security vulnerability, mentions a CVE ID, runs a security audit and finds vulnerabilities, or asks why their build is failing due to a security check. Surface the CVE, trace the affected dependency to its version source, research the fix online, upgrade if a patched version exists, suppress only as a last resort. Works across Maven, npm, Go, Python, Rust, and Ruby projects.

Use this skill whenever building, designing, reviewing, or debugging backend systems, APIs, services, or server-side architecture. Triggers include any mention of REST API design, GraphQL, gRPC, database design, SQL optimization, caching (Redis, Memcached), authentication/authorization (JWT, OAuth), message queues (Kafka, RabbitMQ), microservices, monolith architecture, observability (logging, metrics, tracing), rate limiting, pagination, error handling patterns, API versioning, background jo...

Use this skill when you need to remediate CWE-79 (Improper Neutralization of Input During Web Page Generation (XSS)) vulnerabilities in Java code. Triggers on SAST findings, security reviews, or when fixing improper neutralization of input during web page generation (xss) issues.

You are the decision engine of an automated network scanning agent. You receive structured scan results and decide the next tool to call. You must return a NextAction Pydantic object only, no free text.

Claude is Anthropic's state-of-the-art large language model (LLM) providing intelligent, helpful, and safe conversational AI capabilities. Available through Claude.ai, Claude API, and integrated tools like Claude Code, Claude empowers developers and knowledge workers with advanced reasoning, coding assistance, content creation, and problem-solving capabilities across industries.

Run Static Application Security Testing (SAST) on source code to detect common vulnerability patterns such as SQL injection, XSS, SSRF, insecure deserialization, path traversal, and more. Use this skill whenever the user wants to scan source code for security bugs, run SAST analysis, check for OWASP Top 10 vulnerabilities in code, use Semgrep, CodeQL, Bandit, or similar tools, or find insecure coding patterns. Trigger for requests like "scan my code for vulnerabilities", "run SAST on this fil...

**Zero-cost webhook infrastructure for autonomous AI agents** SwarmHook provides ephemeral webhook inboxes that agents can poll, eliminating the need for permanent infrastructure. ---

Design, automate, and optimise continuous integration pipelines, continuous delivery workflows, infrastructure-as-code, containerisation, and operational processes. ---

Review code for vulnerabilities, apply secure coding practices, design authentication/authorisation systems, and harden infrastructure configurations. ---

Coding is Life Hi, I’m Sathit, a passionate software developer with a deep love for coding and technology. I specialize in building modern, scalable, and efficient applications using a wide range of tools and frameworks. Frontend Development: • HTML, CSS, Tailwind • JavaScript, Angular, Vue.js • Quasar Framework • ElectronJS, Ionic Backend Development: • Node.js (Express, Fastify, elysiajs) • API Development (RESTful, GraphQL, gRPC) • Authentication & Authorization (JWT, OAuth2, Passport.js) ...

OSINT Investigator v2.1 — comprehensive open-source intelligence skill. Triggers on: OSINT, recon, digital footprint, dorking, social media investigation, username lookups, email tracing, domain recon, entity mapping, OPSEC, image verification, metadata analysis, threat intel, people search, background research. Slash commands: /dork, /recon, /pivot, /entity, /timeline, /analyze-metadata, /verif-photo, /sock-opsec, /report, /simple-report, /full, /track, /link, /entities, /confidence, /export...

Use when the user asks to perform security audits, penetration testing, vulnerability scanning, OWASP Top 10 checks, or offensive security assessments. Covers static analysis, dependency scanning, secret detection, API security testing, and pen test report generation.

Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive security checklist a...

Full-spectrum coding workspace skill providing ~600 production MCP `@mcp_tool` lines across 128 top-level modules. USE WHEN user says 'verify codomyrmex', 'codomyrmexVerify', 'audit codomyrmex', 'trust codomyrmex', 'codomyrmexTrust', 'trust tools', 'enable destructive tools', 'check pai status', 'codomyrmex tools', 'codomyrmex analyze', 'codomyrmex search', 'codomyrmex memory', 'codomyrmex docs', 'codomyrmex status', 'codomyrmex git', 'codomyrmex security', 'codomyrmex ai', 'codomyrmex code',...

Manages Solana agent wallets with encrypted keys and per-agent spend limits. Use when the user needs to create agents, check balances, transfer SOL, request airdrops, list token holdings (Helius), or buy SPL tokens via Jupiter. Teaches tool contracts and security rules for an agentic wallet backend.

DevOps operations via the SPARK CLI. Use when the user asks about repo status, security auditing, system cleanup, port conflicts, SSL certificates, or managing dev tool updates. Trigger on: "are my repos up to date", "check for secrets", "audit the code", "clean up disk", "what port is running on", "check certs", "update my tools", "which repos need a pull", "find repo", "tag repos". Also trigger before commits (security check) and before deploys (status check).

**Language:** C **File Extensions:** `.c`, `.h` **Compliance Baseline:** OWASP Top 10, NIST SP 800-53, DISA STIG, FIPS 140-3, CIS Level 2 **Standard Reference:** [C Security Best Practices Guide](../standards/C_Security_Best_Practices_Guide.md) **Policy Reference:** [c_policy.json](../rules/c_policy.json) ---

Auditoria de segurança, análise de vulnerabilidades OWASP, proteção de dados e hardening

A production-tested collection of Claude Code skills, agents, commands, and rules for Drupal 11 development. Battle-tested on a platform powering 150+ sites.

自动化部署 Next.js 项目到 Linux 服务器（Ubuntu/Debian），支持国内服务器 GitHub 镜像加速。

- Before writing or editing code in each thread, run this checklist and keep it active through completion: - Deduplicate near-identical logic early (request parsing, fetch wrappers, mapping, formatter helpers). - Extract non-obvious numeric literals into named constants/config (especially limits, weights, thresholds, pace factors). - Use stable list keys (prefer IDs; otherwise deterministic prefix + index fallback) and avoid brittle concatenations. - Avoid raw one-off design tokens in components

Fetch and display AI-powered SAST findings from the Endor Labs platform. Default path is summary-only (aggregated counts + clusters); full masked listing runs only when the user asks to drill down (speed and token use). Use when the user says "AI SAST results", "AI SAST findings", "AI static analysis", "endor ai sast", "show AI SAST", or wants pre-computed AI-driven code security findings. Do NOT use for running a new SAST scan (/endor-sast), viewing general findings (/endor-findings), or exp...

Static application security testing for code-level vulnerabilities. Use when the user says "SAST scan", "find SQL injection", "check for XSS", "static analysis", "endor sast", "code security scan", or wants to find injection flaws, hardcoded credentials, and insecure patterns in source code. Do NOT use for dependency vulnerabilities (/endor-sca), secrets scanning (/endor-secrets), or viewing pre-computed AI SAST findings (/endor-ai-sast).

This repository uses a modular, AI-optimized skill layout. - **Core skill & rules:** [skill/skills.md](skill/skills.md) - **Activation:** [skill/activation.md](skill/activation.md) - **Reference:** [skill/reference/](skill/reference/) Reference files: attributes, triggers, swap, events, server-patterns, validation, security, performance, headers, anti-patterns. Examples and tests are unchanged and remain in `examples/` and `tests/`.

Vanilla HTML/CSS/JS admin interface development for Fleet Management. Use for creating dashboard, CRUD tables, forms, modals, and E2E tests without frameworks.

Use for security audits, vulnerability remediation, hardening configs, and secure coding patterns. Not for compliance frameworks or policy writing.