35 skills · sorted by relevance
Builds security testing pipelines for SAST, DAST, SCA, secrets, containers. Use when wiring scanners into CI or regression gates.
The English summary is being prepared. Showing the original description.
Integrating OWASP ZAP/Burp Suite/Nuclei, planning penetration tests, executing DAST, and scanning for vulnerabilities. For runtime vulnerability validation. Complements Sentinel static analysis.
The English summary is being prepared. Showing the original description.
Expert coding skill for the full MapTiler platform — Cloud REST APIs, MapTiler SDK JS (built on MapLibre GL JS), native mobile SDKs, on-premise infrastructure, and vector tile schemas. USE WHEN the user wants to add a map to a web or mobile app, show locations or routes, display geographic data, build a store locator, create data visualizations on maps, add geocoding or address search, do reverse geocoding, look up elevation, do IP geolocation, fetch weather data, transform coordinates between CRS/EPSG, embed static map images, work with vector tilesets (Planet v4, Buildings, Contours, Outdoor, Ocean, Landcover, Cadastre), write MapLibre style expressions or data-driven styling, render 3D terrain, globe view, or 3D buildings extrusion, use satellite imagery, add markers, popups, heatmaps, or clustering, integrate maps in React, Vue, Svelte, Angular, Next.js, Leaflet, OpenLayers, Cesium, or deck.gl, build native maps on iOS (Swift), Android (Kotlin), Flutter, or React Native, self-host with MapTiler Server or generate tiles with MapTiler Engine CLI, or upload/manage tilesets via the Admin API. Also USE WHEN the user mentions MapLibre GL JS — the SDK extends MapLibre with built-in cloud services, helpers, and session billing.
The English summary is being prepared. Showing the original description.
DevSecOps skill for securing CI/CD pipelines, infrastructure as code, containers, Kubernetes, cloud deployments, secrets handling, dependency management, SAST/DAST/SCA, release gates, supply-chain controls, SBOMs, policy-as-code, and secure SDLC workflows. Use for pipeline hardening, deployment risk reviews, security automation, and remediation planning.
The English summary is being prepared. Showing the original description.
Run security verification — SAST pattern scanning, DAST against a running app, OWASP Top 10 compliance, CVSS assessment, and adversarial code audit. Use before commit/push or when checking code for vulnerabilities. Trigger on "security scan", "is this vulnerable", "OWASP check", "security verify", "scan for vulnerabilities".
The English summary is being prepared. Showing the original description.
Use when a task needs the judgment of an Application Security Engineer — checking whether an endpoint verifies object-level authorization (not just authentication), running threat modeling at design time rather than deferring security review to the end, triaging a dependency vulnerability by actual reachability rather than CVSS score alone, combining SAST/DAST/SCA tooling to cover their distinct blind spots, or applying context-specific output encoding to untrusted input. Distinct from an information security analyst — this role works inside the SDLC to prevent vulnerabilities before they ship, not detect and respond to intrusions in production.
The English summary is being prepared. Showing the original description.
Italian geographic and property data through Openapi - geocoding/reverse geocoding, zip codes (CAP), municipalities/provinces/regions with ISTAT codes, Italian cadastre (catasto) property and owner lookups, visure catastali/ipotecarie, real estate valuations.
The English summary is being prepared. Showing the original description.
Aggregate SAST, SCA, DAST, secrets, API, frontend, and backend security checks into one report.
The English summary is being prepared. Showing the original description.
Econometrics skill for OLS regression and linear models. Activates when the user asks about: "run OLS", "linear regression", "ordinary least squares", "interpret regression results", "heteroskedasticity", "multicollinearity", "regression assumptions", "robust standard errors", "GLS", "WLS", "fit a regression model", "check regression diagnostics", "OLS假设", "最小二乘法", "线性回归", "回归系数", "残差检验", "异方差", "多重共线性", "普通最小二乘", "稳健标准误", "回归诊断"
The English summary is being prepared. Showing the original description.
Cria e mantém o contexto de criativos — Figma, brand kit, formatos ativos, geradores configurados e restrições. Use quando o usuário disser "configurar criativos", "setup do social", "cadastrar a marca", "qual o design system", "iniciar campanha", ou quando qualquer skill deste plugin não encontrar .claude/pwdev-social-context.md. É a fundação: toda skill lê este arquivo antes de perguntar.
The English summary is being prepared. Showing the original description.
Cria e mantém o inventário da plataforma — contas AWS, clusters, ambientes, bancos, hosts e o mapeamento que distingue produção de staging. Use quando o usuário disser "configurar devops", "mapear a infra", "qual o ambiente", "cadastrar cluster", ou quando qualquer skill não encontrar .claude/pwdev-devops-context.md. Fundação: sem este arquivo, o plugin não sabe o que é produção — e trata tudo como produção.
The English summary is being prepared. Showing the original description.