Claude Skills by nuroctane

'Secures AWS API Gateway endpoints with AWS WAF by configuring managed

'Hardens AWS IAM configurations to enforce least-privilege access, covering

'Hardens AWS Lambda execution roles by writing least-privilege IAM policies,

'Deploys and configures Microsoft Defender for Cloud as a CNAPP for

'Secures container registry images (ECR, ACR, GCR, Docker Hub) by scanning

Configures the security features of the Harbor open-source container registry - integrated Trivy scanning, Cosign and Notary content trust policies, project-level RBAC, immutable tag and retention rules, and OIDC authentication - to enforce provenance and block deployment of vulnerable images. Use when deploying or hardening Harbor, or when compliance requires that only signed and scanned images can be pulled. Keywords: Harbor, project policy, content trust, immutable tag, retention, robot ac...

'Hardens GitHub Actions workflows against supply chain attacks, credential

Secures Helm chart deployments by verifying chart signatures and provenance, rendering and linting templates for misconfiguration, enforcing pod security contexts through values.yaml, moving secrets into an external store instead of Helm values, and scoping RBAC for Helm operations in CI/CD. Use when deploying charts to Kubernetes or reviewing chart provenance, templates, or release RBAC. Keywords: Helm, provenance file, helm verify, helm lint, values.yaml, Tiller-less, release RBAC, external...

'Audits and hardens process historian servers (OSIsoft PI, Honeywell PHD,

'Hardens managed Kubernetes clusters on EKS, AKS, and GKE by implementing

'Designs and configures secure remote access to OT/ICS environments for

'Hardens serverless compute platforms (AWS Lambda, Azure Functions, Google

'Tests REST and GraphQL APIs for Broken Object Level Authorization (BOLA/IDOR,

'Tests APIs for mass assignment (auto-binding), OWASP API3:2023, by identifying

Systematically assesses REST, GraphQL, and gRPC API endpoints against the OWASP

Systematically tests web applications and APIs for broken access control

Manually identifies flaws in application business logic - price manipulation,

Tests web application email functionality (contact forms, password reset,

Tests JWT implementations for algorithm confusion, "none" algorithm bypass,

Identifies and exploits open redirect vulnerabilities by analyzing URL

Extracts LLM system prompts using direct requests, jailbreak/instruction-override

Tests web applications for reflected, stored, and DOM-based Cross-Site

Tests OAuth 2.0 and OpenID Connect implementations for authorization code

Probes Retrieval-Augmented Generation pipelines for indirect prompt injection

Tests and validates ransomware recovery procedures - backup restore operations

Tests WebSocket API implementations for missing upgrade-handshake authentication,

Discovers and maps adversary-controlled infrastructure (C2 servers,

Classifies and prioritizes security incidents using structured IR

'Performs initial triage of security incidents using the NIST SP

Triages and prioritizes vulnerabilities with CISA's Stakeholder-Specific

Runs KAPE (Kroll Artifact Parser and Extractor) to collect targeted

Validates backup integrity through cryptographic hash verification,

Verifies TPM 2.0 measured-boot integrity and remote attestation with

Verifies artifact signatures and SLSA provenance using Sigstore's

A playful, arcade-inspired interface for games — built on the VT323 pixel typeface, hard-edged 0px corners, chunky pill buttons that physically press into solid offset blocks

Review DXF and STEP/STP uploads for SendCutSend.com orders using its ordering guide, catalog, and specs. Use only for SendCutSend.com preflight reports covering upload readiness, selected material/SKU/thickness/service availability, and service-specific checks for laser cutting, CNC routing, bending, tapping, countersinking, hardware insertion, and finishing.

Configure this repo for the engineering skills: set up its issue tracker, triage label vocabulary, and domain doc layout. Run once before first use of the other engineering skills.

Set up Husky pre-commit hooks with lint-staged (Prettier), type checking, and tests in the current repo. Use when user wants to add pre-commit hooks, set up Husky, configure lint-staged, or add commit-time formatting/typechecking/testing.

Wire dependency-cruiser into a TypeScript repo so each package is a deep module, with implementation hidden in subfolders and reachable only through its entry-point files. User-invoked.

shadcn/ui expert guidance — CLI, component installation, composition patterns, custom registries, theming, Tailwind CSS integration, and high-quality interface design. Use when initializing shadcn, adding components, composing product UI, building custom registries, configuring themes, or troubleshooting component issues.

Wireframe-first pass — outputs an ASCII layout + state list + content inventory + question list before any code. Use when starting a new screen from scratch or when the user's brief is still ambiguous. Invoke when the user asks for shape on their UI, or mentions 'shape' alongside design / UI / frontend work.

MANDATORY ship/push/deploy pipeline for EVERY Laboratory repo. Triggers on: ship, push, deploy, put on main, land on main, merge to main, release, publish, sync main, install it (after code), backup after ship, or any request to put work on main / on the user's machine. NEVER bare git-push: always commit (if needed), push origin main, then 7z backup to D:\BACKUP\CODE Backups. nur-cli adds system install of nur.exe after backup. Read C:\Users\david\.agents\SHIP.md and/or run ship.ps1. User sho...

Prepares production launches. Use when preparing to deploy to production. Use when you need a pre-launch checklist, when setting up monitoring, when planning a staged rollout, or when you need a rollback strategy.

Derive a fast, reusable API client or CLI for any website by recording its network requests to a HAR file instead of driving the browser every time. Use whenever the user mentions building a "site CLI", making a CLI for a website/service, watching or recording network requests, HAR files, reverse-engineering a site's private/internal API, or automating a site that has no public API. The HAR is the source of truth; a client built without one is guessing.

A friendly, hand-drawn sketch interface inspired by pencil illustrations on warm cream paper. Soft teal brand accents, hand-written display headings, rounded pill controls.

Real-world mimicry with textured surfaces, 3D effects, and familiar physical metaphors for intuitive digital interfaces.

Create new skills, modify and improve existing skills, and measure skill performance. Use when users want to create a skill from scratch, update or optimize an existing skill, run evals to test a skill, benchmark skill performance with variance analysis, or iterate on skill quality. Triggers: "create a skill", "make a new skill", "build a skill for", "write a skill that", "skill for doing X", "I want a skill to", "new skill", "design a skill", "scaffold a skill", "improve this skill", "optimi...

Modern minimalist aesthetic with clean lines, intentional color palette, subtle interactions, and consistent spacing.

Create production grade smart contracts. Use this skill when the user asks to write smart contracts, specially if they are going to be deployed to production (to a mainnet, or used in a mainnet script).

Grounds every implementation decision in official documentation. Use when you want authoritative, source-cited code free from outdated patterns. Use when building with any framework or library where correctness matters.