1.1K skills · sorted by relevance
Build a tracking system for vulnerabilities that cannot be fixed on time. Define exception requests, approval workflows, alternative protective measures, expiration checks, and audit records so teams can track accepted risks and support compliance reviews.
Review personal data handling against GDPR requirements, covering processing records, legal grounds, individual rights, breach procedures, and international transfers. Produce findings by article and a prioritized improvement roadmap with responsibilities, estimated costs, and timelines.
Simulate device-code and app-consent phishing in an explicitly authorized Microsoft Entra ID environment. Assess whether authentication and consent controls prevent token misuse, map reachable Microsoft 365 resources, and document findings with remediation recommendations.
Guides Postgres query writing, schema design, and configuration reviews using Supabase's prioritized rules. Helps identify improvements in query performance, connection management, and row-level security, which controls access to individual rows.
Review security across web apps, APIs, mobile apps, Kubernetes, and AI agents using six OWASP references. Identify risky authentication, access controls, configurations, and prompt handling, then use examples and checklists to plan fixes.
Help embed Zoom Virtual Agent chat in a website using its web SDK, a developer toolkit. Cover campaign or entry ID launch, event-based controls, user context updates, readiness checks, and browser content security policy requirements.
Operate native apps on macOS, Windows, and Linux using identified controls, menu paths, or screen coordinates. Target a specific window, verify the result after each action, and consult available recent activity when resuming work.
Operate Chrome from Qwen Code to navigate pages, click controls, fill forms, and capture screenshots. It can work with existing tabs or new ones, using page structure and visual controls to carry out browser tasks.
Supports medical device risk management from planning through post-market review using ISO 14971:2019. Helps identify hazards, evaluate risks, select and verify controls, assess remaining risks, and maintain records as new information arrives.
Support information security management for healthcare and medical technology companies. Structure an ISO 27001 management system, assess risks, review security controls, and prepare audit evidence, gap reports, and incident response procedures.
Prepare SaaS teams for SOC 2 audits by mapping evaluation criteria to controls, the measures used to manage risk. Build control matrices, track supporting evidence, identify gaps, and assess readiness for Type I or Type II.
Coordinate compliance work across multiple standards and regulations. Use a company profile to identify relevant frameworks, map shared controls, prepare mock audits, and build a unified evidence checklist showing where documents can be reused.
Customize cmux shortcuts, commands, workspace layouts, and viewer settings while preserving existing configuration. It identifies the right settings file, distinguishes app preferences from terminal preferences, and validates that actions and controls appear where expected.
Design security controls for Google Cloud Agent Gateway, covering incoming client requests and outgoing agent tool calls. Produce architecture diagrams, configuration files, deployment commands, and validation scripts using Model Armor, IAP, and Agent Registry.
Inspect and manage Google Cloud IAM policies that grant roles or explicitly deny permissions. The skill prepares policy changes for user approval, supports organization, folder, project, and supported resource scopes, and verifies the resulting policy after execution.
Check Google Cloud IAM allow policy changes against the last 90 days of access logs. The skill identifies access that could be lost and applies changes only after a successful simulation and user approval.
Helps review application code, authentication, access controls, and dependencies for security flaws. Uses OWASP guidance and CVE reports, records of known vulnerabilities, to assess impact and recommend practical fixes.
Create and review GSAP code that animates webpage elements and SVG graphics. Covers movement, fades, easing that controls speed changes, staggered effects, playback controls, and adaptations for screen size and reduced-motion preferences.
Create a small interactive HTML playground to explore how something works. It packages an explanation, simulation, or simple game into one screen, with clearly labeled keyboard controls and no network requests or external assets.
Inspect a vehicle or another object in a running CARLA simulation. Read position, speed, and acceleration from the same simulation frame, check vehicle controls and steering angle, or stream the object's state over time.
Automate an existing Chrome session through hive-browser commands. Covers page inspection, screenshot-based clicks, text entry, and result checks, including controls hidden inside nested web components and recovery steps for connection timeouts.
Create three distinct versions of one interface component and compare them at full size on the actual page. Explore a chosen design dimension, review each option's tradeoffs, and integrate the selected version while removing the temporary comparison controls.
Build dashboard panels in vanilla TypeScript with resizing, saved layout state, loading indicators, and retry controls. Examples also show how to wrap existing data-fetching functions with caching and temporary request pauses after repeated failures.
Test REST, gRPC, and WebSocket APIs for weaknesses in authentication, access controls, input handling, and configuration. Provides protocol-specific checks, tool guidance, and detection indicators to help document reproducible findings and severity during authorized assessments.