All authors
Claude Skills by diegosouzapw
github.com/diegosouzapw10,791 skills97 installs17,650 views
- Pci Compliance TechwavedevImplement PCI DSS compliance requirements for secure handling of payment card data and payment systems. Use when securing payment processing, achieving PCI compliance, or implementing payment card security measures.Votes: 0GitHub stars: 57
- Pentest Outbound Interaction Oob DetectionSecurity assessment skill for outbound interaction and out-of-band (OOB) validation. Use when prompts include SSRF callback confirmation, blind XSS beacons, webhook abuse, XXE/OOB behavior, DNS/HTTP callback correlation, or asynchronous server-side interaction proof. Do not use when vulnerabilities are fully in-band and require no external callback correlation.Votes: 0GitHub stars: 57
- Performing Cryptographic Audit Of ApplicationA cryptographic audit systematically reviews an application's use of cryptographic primitives, protocols, and key management to identify vulnerabilities such as weak algorithms, insecure modes, hardcoVotes: 0GitHub stars: 57
- Persona CoordinationUse when coordinating multi-persona team workflows, planning artifact handoffs between personas, or resolving cross-persona conflicts.Votes: 0GitHub stars: 57
- Php Security AuditAnalyze a PHP web application or codebase for security vulnerabilities and OWASP compliance. Use when the user asks to audit, check, review, or analyze the security, vulnerabilities, OWASP compliance, or hardening of a PHP, Laravel, Kirby, Livewire, or Blade application. Also use when the user mentions "securite", "security", "OWASP", "injection SQL", "XSS", "CSRF", "faille", "vulnerabilite", "pentest", "hardening", "authentication", or "authorization". Specialized for PHP, Laravel, Kirby CMS...Votes: 0GitHub stars: 57
- Playwright E2e TestingComprehensive Playwright end-to-end testing patterns with Page Object Model, fixtures, and best practicesVotes: 0GitHub stars: 57
- Playwright Majiayu000Playwright E2E testing patterns and best practices. Cross-browser automation, selectors, fixtures, and CI integration. Trigger: When writing or running end-to-end tests with Playwright.Votes: 0GitHub stars: 57
- Playwright ReviewingReview Playwright E2E tests for best practices violations. Detects mocked app data, explicit timeouts, CSS selectors, skipped tests, and assertion anti-patterns. Use when reviewing Playwright PRs or auditing test quality.Votes: 0GitHub stars: 57
- Playwright TestGenerate robust, zero-flakiness Playwright E2E tests following OpenMetadata patterns. Creates comprehensive test files with proper waits, API validation, multi-role permissions, and complete entity lifecycle management.Votes: 0GitHub stars: 57
- Playwright Visual RegressionPlaywright browser automation patterns for E2E testing, visual regression, screenshot capture, and accessibility validation. Use when implementing or debugging browser-based tests.Votes: 0GitHub stars: 57
- Pr ReviewPerform automated code review on pull requests using Devin Review with regulatory compliance checks. Use this skill when reviewing migration PRs for correctness, when enforcing CIS Benchmark security compliance on code changes, when running automated bug detection and code quality analysis, or when triaging and auto-fixing review findings across enterprise modernization PRs.Votes: 0GitHub stars: 57
- Preen Review InstructionsAudit and update code review instructions (REVIEW.md, .gemini/INSTRUCTIONS.md)Votes: 0GitHub stars: 57
- Program Security BasicsBaseline security checklist for Solana programs: authority checks, input validation, upgrade keys, unsafe patterns, and attack surfaces. Use for design reviews and pre-deploy audits.Votes: 0GitHub stars: 57
- Project DeckGenerate "future self" Beamer presentation decks as progress logs for research projects. Use when users ask to create a project deck, document project status, make slides summarizing their research, log what they've done on a project, or prepare update materials for coauthors. This skill creates dated LaTeX Beamer presentations (written to ./deck/project-deck-YYYYMMDD.tex) that preserve project context across work sessions - not for public speaking, but for communicating with your future self...Votes: 0GitHub stars: 57
- Property Testing Captjay98Property-based testing with fast-check for business logic validationVotes: 0GitHub stars: 57
- Qa Tester Majiayu000QA Tester Agent. 테스트 작성, 실행, 검증을 담당합니다. 테스트, 검증, 단위테스트, 통합테스트, E2E 관련 요청 시 사용됩니다.Votes: 0GitHub stars: 57
- Qa Testing IosiOS testing with XCTest/XCUITest on simulators and devices: layered strategy, determinism/flake control, device matrix selection, CI ergonomics, and repeatable simulator automation.Votes: 0GitHub stars: 57
- Qa Testing PlaywrightEnd-to-end web application testing with Playwright: scope control, stable selectors, parallelization/sharding, flake control, network mocking vs real services, visual testing tradeoffs, and CI/CD integration.Votes: 0GitHub stars: 57
- Qa Testing Strategy Majiayu000Risk-based quality engineering test strategy across unit, integration, contract, E2E, performance, and security testing with shift-left gates, flake control, CI economics, and observability-first debugging.Votes: 0GitHub stars: 57
- Qa TestingEnsure data integrity, stability, and basic security for a personal productivity app. Focus on preventing data loss, memory leaks, and sync failures during daily 8-hour usage sessions. Skip enterprise-grade testing. Use when testing, verifying, validating, checking features, running tests, or before claiming anything is "done" or "fixed".Votes: 0GitHub stars: 57
- Qe Security Compliance Majiayu000Security auditing, vulnerability scanning, and compliance validation for OWASP, SOC2, GDPR, and other standards.Votes: 0GitHub stars: 57
- Quality Standards Majiayu000Overview of protected quality thresholds and quick reference for all quality tools. Use when you need to understand quality metrics, run comprehensive quality checks, or learn which specialized skill to use. For specific issues, use dedicated skills (deptrac-fixer for Deptrac, complexity-management for PHPInsights, testing-workflow for coverage).Votes: 0GitHub stars: 57
- Redis Security Majiayu000Master Redis security - authentication, ACL, TLS encryption, network hardening, and production security best practicesVotes: 0GitHub stars: 57
- ResumeAdapt, diagnose, and optimize resumes to land interviews with ATS optimization, job-specific tailoring, and recruiter-tested tactics.Votes: 0GitHub stars: 57
- ReviewerActivate when reviewing code, before committing, after committing, or before merging a PR. Activate when user asks to review, audit, check for security issues, or find regressions. Analyzes code for logic errors, regressions, edge cases, security issues, and test gaps. Fixes findings AUTOMATICALLY. Required at process skill quality gates.Votes: 0GitHub stars: 57
- Reviewing SecurityExecutes security design and implementation reviews with threat modeling, OWASP-based checks, and risk-ranked remediation guidance. Activates when reviewing security, threat modeling, checking for vulnerabilities, auditing auth flows, performing OWASP reviews, or assessing security posture. Does not handle code quality or test coverage (code-reviewer), writing production code (backend-developer or frontend-developer), or infrastructure deployment (devops).Votes: 0GitHub stars: 57
- RodauthPlutonium Rodauth integration - authentication setup, account types, and configurationVotes: 0GitHub stars: 57
- Rust LearnerRust 学习与生态追踪专家。处理新版本特性、crate 更新、最佳实践演进、RFC、每周新闻等问题。触发词：latest version, what's new, Rust 版本, 新特性, update, upgrade, rfc, 每周新闻, 学习, 教程Votes: 0GitHub stars: 57
- Saas Compliance Frameworks Majiayu000Security and compliance requirements for SaaS applications. Covers SOC 2, GDPR, HIPAA, and common compliance patterns with implementation guidance.Votes: 0GitHub stars: 57
- Safe Commit Majiayu000⚠️ MANDATORY - YOU MUST invoke this skill when committing. Complete commit workflow with all safety checks. Invokes security-scan, quality-check, and run-tests skills. Shows diff, gets user approval, creates commit with conventional format. NO AI attribution. User approval REQUIRED except during PR creation. NEVER commit manually.Votes: 0GitHub stars: 57
- Safe Commit Meriley⚠️ MANDATORY - YOU MUST invoke this skill when committing. Complete commit workflow with all safety checks. Invokes security-scan, quality-check, and run-tests skills. Shows diff, gets user approval, creates commit with conventional format. NO AI attribution. User approval REQUIRED except during PR creation. NEVER commit manually.Votes: 0GitHub stars: 57
- Sast ConfigurationConfigure Static Application Security Testing (SAST) tools for automated vulnerability detection in application code. Use when setting up security scanning, implementing DevSecOps practices, or aut...Votes: 0GitHub stars: 57
- Sast TriageTriage static analysis findings from gosec, golangci-lint, and govulncheck — classify severity, filter false positives, and prioritize remediationVotes: 0GitHub stars: 57
- ScribeTechnical writing for formal security audit reports. Use when the user wants to write up a security finding, create a formal issue report, or draft system overview and security model sections for an audit report.Votes: 0GitHub stars: 57
- SecupdatesSecurity news from tldrsec, no.security, Krebs, Schneier, and other sources. USE WHEN security news, security updates, what's new in security, breaches, security research, sec updates, tldrsec, Krebs, Schneier.Votes: 0GitHub stars: 57
- Secure Code Guardian Majiayu000Use when implementing authentication/authorization, securing user input, or preventing OWASP Top 10 vulnerabilities. Invoke for authentication, authorization, input validation, encryption, OWASP Top 10 prevention. Keywords: security, authentication, authorization, OWASP, encryption, vulnerability.Votes: 0GitHub stars: 57
- Secure CodingImplementing OWASP Proactive Controls (Input Validation, Output Encoding, AuthZ/AuthN).Votes: 0GitHub stars: 57
- Secure Development LifecycleComprehensive SDLC security covering planning, development, testing, deployment, and maintenance with classification-driven controls and AI governanceVotes: 0GitHub stars: 57
- Security Analysis Majiayu000Security audit patterns including OWASP Top 10, secret scanning, and language-specific vulnerabilities.Votes: 0GitHub stars: 57
- Security Angeldev96Security Engineer and application security expert. Performs threat modeling, security architecture review, penetration testing, vulnerability assessment, and security compliance. Handles OWASP Top 10, authentication security, authorization, encryption, secrets management, HTTPS/TLS, CORS, CSRF, XSS, SQL injection prevention, secure coding practices, security audits, and compliance (GDPR, HIPAA, PCI-DSS, SOC 2). Activates for security, security review, threat model, vulnerability, penetration ...Votes: 0GitHub stars: 57
- Security Assessment Majiayu000Execute threat modeling, vulnerability scanning, and security control validation. Use when relevant to the task.Votes: 0GitHub stars: 57
- Security Audit Agent Majiayu000Performs comprehensive security audits of codebases, identifying vulnerabilities and security best practicesVotes: 0GitHub stars: 57
- Security Audit Gunning4itAudit codebase for security vulnerabilities, secret leakage, dependency risks, and configuration issues. Use before commits, when adding dependencies, or reviewing PRs. Enforces zero-secrets policy, dependency isolation, and secure build practices.Votes: 0GitHub stars: 57
- Security Audit McgoComprehensive security audit with findings classification, epic generation, and PDF reportVotes: 0GitHub stars: 57
- Security Audit RankjayInvoke when reviewing security-sensitive code: authentication, authorization, payment processing, data protection, or any code handling sensitive information.Votes: 0GitHub stars: 57
- Security Audit RenatinhosfariaUse when reviewing code for security vulnerabilities and OWASP top 10 issuesVotes: 0GitHub stars: 57
- Security Audit Scanner Majiayu000Automated security scanning for Vigil Guard v2.0.0. Use for OWASP Top 10 checks, TruffleHog secret detection, npm/pip vulnerability scanning, 3-branch service security, heuristics-service audit, and CI/CD security pipelines.Votes: 0GitHub stars: 57
- Security Auditor Always FurtherActivates when user needs security review, vulnerability scanning, or secure coding guidance. Triggers on "security review", "find vulnerabilities", "is this secure", "check for injection", "security audit", "OWASP", "secure this code", or security-related questions.Votes: 0GitHub stars: 57
- Security Auditor Chicanoandres702Expert security auditor specializing in DevSecOps, comprehensive cybersecurity, and compliance frameworks. Masters vulnerability assessment, threat modeling, secure authentication (OAuth2/OIDC), OWASP standards, cloud security, and security automation. Handles DevSecOps integration, compliance (GDPR/HIPAA/SOC2), and incident response. Use PROACTIVELY for security audits, DevSecOps, or compliance implementation.Votes: 0GitHub stars: 57
- Security Auditor ClaudcherejiExpert security auditor specializing in comprehensive security assessments, compliance validation, and risk management. Masters security frameworks, audit methodologies, and compliance standards with focus on identifying vulnerabilities and ensuring regulatory adherence.Votes: 0GitHub stars: 57