Claude Skills by aibot88

Implement prompt sanitization, PII redaction, response filtering, and usage tracking for Groq API integrations. Trigger with phrases like "groq data", "groq PII", "groq GDPR", "groq data retention", "groq privacy", "groq compliance".

Deploy Groq integrations to Vercel, Cloud Run, and containerized platforms. Use when deploying Groq-powered applications to production, configuring platform-specific secrets, or setting up deployment pipelines. Trigger with phrases like "deploy groq", "groq Vercel", "groq production deploy", "groq Cloud Run", "groq Docker".

Install and configure Groq SDK authentication for TypeScript or Python. Use when setting up a new Groq integration, configuring API keys, or initializing the groq-sdk in your project. Trigger with phrases like "install groq", "setup groq", "groq auth", "configure groq API key".

Apply Groq security best practices for API key management and data protection. Use when securing API keys, implementing least privilege access, or auditing Groq security configuration. Trigger with phrases like "groq security", "groq secrets", "secure groq", "groq API key security".

Fusionskontrolle und Investitionskontrolle: Erstellt Freigabe-Landkarte für Kartellrecht, Fusionskontrolle, AWV/FDI, Sektorregulierung und Multi-Jurisdiction-Filings.

Freistehender Deal-Fristen- und CP-Kalender: führt Signing-, Closing-, Q&A-, Regulatory-, Register-, Board-, Ordinary-Course- und Restrukturierungsfristen im M&A-Mandat.

Parallel-agent code review for quality, security, dependencies, and docs. Use for reviews, audits, or quality assessments. Produces deduplicated severity-ranked report.

Scan container images, filesystems, and SBOMs for known vulnerabilities using Anchore Grype. Supports major OS package ecosystems and language-specific packages with EPSS risk scoring and OpenVEX filtering.

Use when the user wants Google Search Console data pulled directly into the session instead of manually screenshotting / CSV-exporting from search.google.com. Pulls top queries, top pages, coverage status, manual actions, security issues, and Core Web Vitals field data via the GSC API in one call. Triggers from "pull GSC data for example.com", "Search Console deep dive", "GSC queries last 90 days", "GSC coverage report", "GSC indexing status", "GSC manual actions check", "GSC Core Web Vitals ...

Review changed files for bugs, security issues, and code quality; produce REVIEW.md

Review changed files for bugs, security issues, and code quality; produce REVIEW.md

Retroactively verify threat mitigations for a completed phase

Security audit of changes; enforce defense in depth and OWASP best practices

Claude 親エージェントが Gemini CLI 子プロセスを使って Web 検索結果を安全寄りに取得するための防御スキル。 「○○について調べて」「○○を検索して」などの検索要求で、Claude ではなく Gemini を隔離 searcher として使いたい場合は必ず使用する。 検索結果の title・snippet は生で親 Claude に入れず、Gemini 子の JSON 出力を静的サニタイザに通してから扱うこと。 個別 URL のコンテンツ取得には guarded-webfetch-gemini を使用すること。

Revisa segurança de código, arquitetura, incidentes e dependências de terceiros para identificar vulnerabilidades reais, fragilidades exploráveis, risco de supply chain e mitigações seguras. Use em security review, incidente, validação pré-produção/compliance, auditoria de bibliotecas e scripts ou revisão de APIs, serviços, front-end, back-end, banco, uploads, webhooks e integrações externas.

Implement Guidewire RBAC: API roles, user permissions, and security policies. Trigger: "guidewire enterprise rbac", "enterprise-rbac".

Install Guidewire Studio, configure Cloud API OAuth2 authentication, and register applications with Guidewire Hub. Trigger: "install guidewire", "guidewire auth", "guidewire OAuth2", "guidewire Cloud API setup".

Implement Guidewire security: OAuth2 JWT, API roles, Gosu secure coding, and data protection. Trigger: "guidewire security basics", "security-basics".

Audita implementação de Consent Mode v2, LGPD compliance, CMP e disparos indevidos de tags sem consentimento. Deep dive pós-implementação que complementa a seção "Consent & Privacy Architecture" do measurement-plan. Valida default/update states, CMP integration, comportamento de cada tag por estado de consent, certificação Google CMP Partner, data retention settings, e gera relatório com score, itens críticos e checklist de correção. Use quando precisar auditar consent mode, validar LGPD comp...

Quick install of the Google Workspace CLI (gws) on an additional machine using existing OAuth credentials. Requires client_secret.json from a previous gws-setup. Use when setting up gws on a new computer, reinstalling after a fresh OS, or configuring a second workstation. Triggers: "install gws", "gws on new machine", "gws install", "set up gws again".

Google Sheets financial tracking and automation for Israeli freelancers and small businesses using the Google Workspace CLI (gws). Use when user asks to create income/expense sheets with Shekel formatting, track VAT (18%) calculations, generate tax-period summaries for accountants, backup spreadsheets as CSV, or auto-log payments. Do NOT use for direct bank API integrations, payroll processing, or filing taxes with the Israel Tax Authority.

Set up the Google Workspace CLI (gws) from scratch. Guides through GCP project creation, OAuth credentials, authentication, and installing 90+ agent skills for Claude Code. Use when setting up gws for the first time, configuring Google Workspace API access, or troubleshooting gws auth issues. Triggers: "set up gws", "google workspace cli", "gws setup", "install gws".

Self-service diagnostics — query Hope Agent's local SQLite databases (logs / sessions / async jobs) directly via the `exec` tool to investigate problems, analyze usage, and locate root causes. Trigger on: user reports something broken / failing / slow / stuck / not responding ('X 不工作', 'X 报错', 'X 卡住', '为什么 X 失败', 'why did X fail', 'show me the logs', 'check what happened'); ad-hoc data analysis ('this week's token usage', '最近调用最多的工具', 'how many subagent runs failed', 'tool error rate', 'find ...

Use cli-web-hackernews to browse and interact with Hacker News — top stories, newest, best, Ask HN, Show HN, jobs, search stories/comments, view story details with comments, user profiles, and (with auth) upvote, submit stories, post comments, favorite, hide, view favorites, submissions, and comment threads. Invoke this skill whenever the user asks about Hacker News, HN stories, HN search, trending tech posts, tech news, startup news, or wants to browse/search/interact with Hacker News conten...

Monitors Hacker News for user-configured keywords, deduplicates against a local SQLite cache, and sends Slack alerts for new matching posts. Use when asked to monitor Hacker News for mentions, track keywords on HN, get alerts when something is posted about a topic on Hacker News, or set up HN keyword monitoring. Trigger when a user mentions Hacker News alerts, HN monitoring, keyword tracking on HN, or wants to know when a topic appears on Hacker News.

Lets an agent exercise REST, GraphQL, and gRPC authorization paths with YAML-defined role tests so BOLA, BFLA, broken authentication, and related API flaws are caught before release.

Use when working with Halo CLI login, bearer token or basic auth, profile setup, profile switching, current profile inspection, or fixing missing keyring credentials.

Use when searching public content on a Halo site with Halo CLI, especially for keyword search, site URL based search, result limits, or search without authenticated console access.

Use when you, your group, or someone you advise is being attacked with calculated personal insult, mockery, nickname-branding, or ridicule — not as a loss of temper by the attacker, but as a calibrated political or media tactic. Helps the user recognize the insult playbook and respond in a way that doesn't legitimize it, mirror it, or walk into its trap. Triggers on phrases like "they've given me a nickname that keeps sticking", "I'm being mocked publicly and I don't know how to respond", "th...

Hanko is an open-source authentication and user management platform built on passkeys and WebAuthn. It provides a drop-in authentication solution as an alternative to Auth0, Clerk, and Stytch, with pre-built web components, a REST API, and an admin dashboard.

This skill should be used when the user wants a metacognitive vibecheck gate before code is shared for review or a pull request is opened — phrases like "/hard-cheese", "/cheese --hard", "gate this before I push", "vibecheck me", "make sure I understand this diff", "epistemic-debt check". Reads the working diff, asks the human author to explain its causal logic in their own words, spawns a fresh-context judge sub-agent to grade the explanation against the SOLO Taxonomy (pass ≥ Multistructural...

Harden-Runner by StepSecurity is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity in real-time, detecting supply chain attacks such as the tj-actions and Codecov compromises.

Harness Open Source (formerly Gitness) is an end-to-end developer platform that integrates Git repository hosting, CI/CD pipelines, hosted development environments, and artifact registries in a single self-hosted binary.

Harper is an offline, privacy-first grammar checker written in Rust by Automattic. It runs locally with sub-10ms response times, supports LSP for editor integration, compiles to WebAssembly for browser use, and provides grammar, spelling, and style checking without sending text to external servers.

Use when answering legal questions about US business law, including startup formation (Delaware C-Corp, LLC, S-Corp), fundraising (SAFE notes, convertible notes, priced rounds), employment law (at-will, FLSA, discrimination, non-competes), contracts (UCC, common law), and intellectual property (patents, trademarks, trade secrets). Delivers specific statutory citations, worked examples, and legal memo format. Covers federal law and Delaware as default state.

The official HashiCorp Vault MCP server lets AI assistants read, write, list, and delete secrets in Vault's KV engine through a safe, auditable MCP interface. Supports both stdio and HTTP transports, TLS encryption, and CORS controls.

Connects to HashiCorp Vault HTTP API for automated secret rotation workflows. Manages dynamic database credentials via Vault database secrets engine, handles PKI certificate renewal, and implements lease lifecycle management with TTL monitoring.

Scans codebases for hardcoded secrets using HashiCorp Vault SDK and truffleHog patterns. Integrates with Vault Transit engine for automatic secret rotation and re-encryption of detected credentials.

Automates secret rotation in HashiCorp Vault using the Vault API and dynamic secrets engines. Manages database credential leases, PKI certificate renewal, and AWS STS token generation with TTL policies.

Build, evaluate, and document HCC / risk-adjustment extraction pipelines for CMS-HCC V28 / V24 / HHS-HCC (NLP engineering, not chart review). Use when asked to "build an HCC extractor", "risk adjustment NLP", "clinical NLP for risk adjustment", "build a suspect engine", "build a validate engine", "RAF NLP", "RAF score NLP", "MEAT as NLP", "MEAT validation", "HCC hierarchy enforcement", "RADV simulation", "RADV readiness", "date of service for HCC", "Z-code disambiguation for HCC", "model card...

Review an Architecture Decision Record (ADR) in this repo for boundary discipline, charter compliance, and decision-ledger consistency.

Reference guide for running Claude Code in headless, container, and CI environments — covers auth strategies, interactive mode pitfalls, tmux orchestration, root user workarounds, and git auth without SSH agents or keychains

Project health dashboard — compilation, tests, TODOs, API spec drift, migration pairs, deps, security, docs, bundle

Scaffolds a FHIR R4-compliant healthcare API with clinical resource models, SMART on FHIR auth, HIPAA audit logging, PHI-safe error handling, and interoperability endpoints. Triggers on: \"healthcare api\", \"FHIR api\", \"medical api\", \"health api\", \"build a FHIR server\", \"clinical data api\", \"patient api\", \"EHR integration\", \"SMART on FHIR\", \"HIPAA compliant api\", \"healthcare backend\", \"HL7 api\", \"build a health platform\", \"medical records api\", \"telehealth backend\".

Audit a healthcare software codebase for HIPAA Privacy and Security Rule compliance, HITECH breach notification readiness, 21st Century Cures Act interoperability requirements, and state-level regulatory gaps. Produces severity-rated findings with remediation priorities. Use when building EHR/EMR systems, patient portals, telehealth platforms, clinical decision support, or any software that handles PHI.

中文优先：用于医疗评估运行框架相关任务，帮助识别、设计、实现或验证对应工作流。English keywords: Patient safety evaluation harness for healthcare application deployments. Automated test suites for CDSS accuracy, PHI exposure, clinical workflow integrity, and integration compliance. Blocks deployments on safety failures.

Clinical terminology, healthcare compliance (HIPAA/HITECH), patient safety, and health data management.

中文优先：用于医疗PHI合规相关任务，帮助识别、设计、实现或验证对应工作流。English keywords: Protected Health Information (PHI) and Personally Identifiable Information (PII) compliance patterns for healthcare applications. Covers data classification, access control, audit trails, encryption, and common leak vectors.

Reviews HealthKit code for authorization patterns, query usage, background delivery, and data type handling. Use when reviewing code with import HealthKit, HKHealthStore, HKSampleQuery, HKObserverQuery, or HKQuantityType.

Read, write, and query Apple Health data using HealthKit. Covers HKHealthStore authorization, sample queries, statistics queries, statistics collection queries for charts, saving HKQuantitySample data, background delivery, workout sessions with HKWorkoutSession and HKLiveWorkoutBuilder, HKUnit, and HKQuantityTypeIdentifier values. Use when integrating with Apple Health, displaying health metrics, recording workouts, or enabling background health data delivery.