All authors

Claude Skills by tigusigalpa
github.com/tigusigalpa38 skills0 installs0 views
- Go WorkApply project Go rules when changing confirmed Go packages, services, or tests.Votes: 0GitHub stars: 11
- Laravel WorkApply project Laravel rules when changing confirmed Laravel code, models, resources, or migrations.Votes: 0GitHub stars: 11
- Moodle WorkApply project Moodle rules when changing a confirmed Moodle installation or plugin.Votes: 0GitHub stars: 11
- Project ContinuityMaintain AI-KIT's own context, template boundaries, and installer verification when kit structure or procedures change.Votes: 0GitHub stars: 11
- Python WorkApply project Python rules when changing confirmed Python scripts, packages, or tests.Votes: 0GitHub stars: 11
- ai-kitUse when installing, configuring, upgrading, explaining, or maintaining AI-KIT, the portable kit that gives AI coding agents verified project memory, stack rules, guardrails, model routing, and native client configuration.Votes: 0GitHub stars: 11
- Ai Kit BootstrapRun only when the user explicitly asks to bootstrap AI-KIT: confirm installer drafts and fill PROJECT_CONTEXT and project.json from verified repository evidence.Votes: 0GitHub stars: 11
- Ai Kit ReviewRun only when the user explicitly asks for an AI-KIT review of current changes or of a named diff, commit range, or path.Votes: 0GitHub stars: 11
- Ai Kit Sync ContextRun only when the user explicitly asks to synchronize AI-KIT project context, WIKI, decisions, and changelog after work in this session.Votes: 0GitHub stars: 11
- Context7 DocsRetrieve version-relevant library and API documentation with an available Context7 connection, or prepare a requested Context7 setup.Votes: 0GitHub stars: 11
- Design ExtractAnalyze supplied website references or a requested design extraction into project design observations, when Web Design is enabled.Votes: 0GitHub stars: 11
- Dotnet WorkApply .NET rules to confirmed projects: async and cancellation, disposal, nullable types, tests, and dotnet checks.Votes: 0GitHub stars: 11
- Filament WorkApply Filament rules to confirmed Resources, schemas/forms, tables, actions, relation managers, pages, widgets, and panel access.Votes: 0GitHub stars: 11
- Frontend WorkApply frontend rules for confirmed package.json browser modules, assets, JavaScript, or TypeScript.Votes: 0GitHub stars: 11
- Go WorkApply Go rules for go.mod modules, Go packages, services, or tests.Votes: 0GitHub stars: 11
- Infra WorkApply infrastructure rules to confirmed Terraform/Helm paths: state safety, plan review, pinned versions, and lint/validate.Votes: 0GitHub stars: 11
- Java WorkApply Java rules to confirmed modules: wrappers, exceptions, resource handling, tests, and Maven/Gradle checks.Votes: 0GitHub stars: 11
- Laravel Blade UiImplement or refine Blade interfaces using the confirmed Laravel stack and selected CSS/component library, when Web Design is enabled.Votes: 0GitHub stars: 11
- Laravel WorkApply Laravel rules for laravel/framework modules, Eloquent models, queues, or migrations.Votes: 0GitHub stars: 11
- Library WorkApply public API and compatibility rules for a confirmed reusable package, module, library, or SDK.Votes: 0GitHub stars: 11
- Moodle WorkApply Moodle rules for a confirmed Moodle installation or component plugin with version.php and db APIs.Votes: 0GitHub stars: 11
- Php WorkApply PHP baseline for confirmed composer.json or PHP modules, including non-Laravel packages.Votes: 0GitHub stars: 11
- Project ContinuityBootstrap AI-KIT or maintain PROJECT_CONTEXT, WIKI, and skills when repository facts, module scope, or procedures change.Votes: 0GitHub stars: 11
- Python WorkApply Python rules for confirmed Python scripts, pyproject packages, or Python tests.Votes: 0GitHub stars: 11
- Rust WorkApply Rust rules to confirmed crates: ownership, unsafe discipline, error boundaries, tests, and cargo checks.Votes: 0GitHub stars: 11
- Security AuditUse only when the user explicitly invokes security-audit for security guidance, a focused review, or a separately requested full audit.Votes: 0GitHub stars: 11
- StrixUse only when the user explicitly invokes Strix to prepare or run a scoped local security scan, inspect its findings, or request remediation.Votes: 0GitHub stars: 11
- Ui ReviewReview changed screens for visual consistency, responsive behavior, accessibility and working interactions, when Web Design is enabled.Votes: 0GitHub stars: 11
- Web DesignTurn a website brief and visual references into a coherent design and implementation, or revise an existing visual design, when Web Design is enabled.Votes: 0GitHub stars: 11
- Api Security TestingSecurity-test a REST, GraphQL, or gRPC API with Strix — autonomous agents that enumerate endpoints from an OpenAPI/GraphQL schema (or by crawling), then actually exploit the API-specific vulnerability classes in the OWASP API Security Top 10 (2023) — broken object-level authorization (BOLA/IDOR), broken object property level authorization (excessive data exposure and mass assignment), broken function-level authorization, unrestricted resource consumption, SSRF, injection, and auth/token flaws...Votes: 0GitHub stars: 11
- Application Security TestingApplication security testing (AppSec) across a whole product with Strix — decide which asset needs which test (source code, running web app, API, CI pipeline), run it, and turn the results into a ranked remediation plan. Autonomous agents exploit and prove each issue instead of emitting static-analysis alerts, so the plan is ordered by what is actually reachable. Use when the user asks for an application security review or audit, an appsec assessment, vulnerability scanning across their stack...Votes: 0GitHub stars: 11
- Ci Security Scanning With StrixAdd security scanning to CI/CD with Strix — GitHub Actions, GitLab CI, or any pipeline — so every pull request gets a diff-scoped AI pentest that blocks vulnerable code before it merges, with results as PR comments and SARIF uploaded to code scanning. Covers both the self-hosted open-source CLI (runs in your runner) and the managed app.strix.ai platform (GitHub/GitLab app or API, no runner infra). Use when the user asks to add security scanning, SAST/DAST, pentesting, vulnerability checks, or...Votes: 0GitHub stars: 11
- Find Security Vulnerabilities In CodeFind security vulnerabilities in a codebase or repository with Strix — a white-box AI security review that reads your source, reasons about the actual data flow and authorization model, then exploits what it finds in a live sandbox so every reported issue has a working proof-of-concept instead of a noisy static-analysis alert. Covers injection, XSS, SSRF, broken access control and IDOR, insecure deserialization, secrets in code, unsafe dependencies, and business-logic flaws. Use when the user...Votes: 0GitHub stars: 11
- Fix Security Vulnerabilities With StrixFix security vulnerabilities found by a Strix pentest (open-source CLI or app.strix.ai cloud) — triage by severity, patch the root cause rather than the symptom, and re-run Strix to prove each fix actually closes the exploit. Handles injection, XSS, SSRF, broken access control, IDOR, and other validated findings. Use after a Strix scan reports findings, or when the user asks to remediate, patch, or fix security issues from a strix_runs report, vulnerabilities.json, findings.sarif, or a cloud ...Votes: 0GitHub stars: 11
- Managed Pentesting With StrixRun a managed pentest of a web app, API, repository, or local workspace on the app.strix.ai platform with the `strix cloud` CLI or REST API — no local Docker or LLM key needed. Safely review and upload local source, register assets, launch and poll scans, triage vulnerabilities, export SARIF, download compliance reports, start PR reviews, buy credits, and set up schedules or webhooks. Use for managed, continuous, scheduled, team-tracked, or sandboxed-agent security testing.Votes: 0GitHub stars: 11
- Owasp Top 10 TestingTest an application against the OWASP Top 10 with Strix — autonomous AI agents that attempt real exploits for each category of the current OWASP Top 10:2025 (broken access control including SSRF, security misconfiguration, software supply chain failures, cryptographic failures, injection, insecure design, authentication failures, integrity failures, logging and alerting failures, mishandling of exceptional conditions) and report only what they could actually prove, mapped back to the category...Votes: 0GitHub stars: 11
- Penetration Testing With StrixPentest a web app, API, codebase, repository, URL, domain, or IP with Strix — autonomous AI penetration testing that exploits and proves vulnerabilities (OWASP Top 10 and beyond — injection, XSS, SSRF, auth/access-control flaws, IDOR, business logic) instead of just flagging them. Runs self-hosted with the open-source CLI or via the managed app.strix.ai cloud, and returns validated findings with proof-of-concept exploits (Markdown, JSON, CSV, SARIF). Use when the user asks to pentest, hack, s...Votes: 0GitHub stars: 11
- Web App Penetration TestingPentest a web app or website end to end — black-box testing of a live URL, staging environment, or local dev server that finds and exploits real vulnerabilities (auth bypass, broken access control, IDOR, injection, XSS, SSRF, business logic) and proves each one with a working proof-of-concept instead of a signature match. Runs with Strix, either the self-hosted open-source CLI or the managed app.strix.ai cloud. Use when the user asks to pentest, hack, security-test, or audit their web app, we...Votes: 0GitHub stars: 11