1.9K skills · sorted by relevance
Design and implement a comprehensive DevSecOps pipeline in GitLab CI/CD integrating SAST, DAST, container scanning, dependency scanning, and secret Tespit.
The English summary is being prepared. Showing the original description.
ペネトレーションテストを対話的に実行するスキル。認可確認(Authorization Gate)→カテゴリ選択（Methodology, Reconnaissance, Scanning, VulnerabilityScanning, WebAppTesting, APITesting, PasswordAttacks, Exploitation, PrivilegeEscalation, ActiveDirectory, PostExploitation, WirelessAttacks, NetworkAttacks, SocialEngineering, CloudPentesting, MobileAppTesting, ContainerK8s, BinaryExploitation, OWASPTop10, Reporting, EmailSecurity, DatabaseAttacks, VPNRemoteAccess の全23カテゴリ）→ツール選択→コマンド実行→発見記録(Finding)→レポート生成をステップバイステップで進行。スコープ/除外チェック・ガードレール付き。「ペンテスト実行」「pentest」「侵入テスト」「脆弱性診断」「セキュリティテスト」「pentest executor」で発火。
The English summary is being prepared. Showing the original description.
Builds a structured vulnerability scanning workflow using tools like Nessus, Qualys, and OpenVAS to discover, prioritize, and track remediation of security vulnerabilities across infrastructure. Use when SOC teams need to establish recurring vulnerability assessment processes, integrate scan results with SIEM alerting, and build remediation tracking dashboards.
The English summary is being prepared. Showing the original description.
Design and implement a comprehensive DevSecOps pipeline in GitLab CI/CD integrating SAST, DAST, container scanning, dependency scanning, and secret detection.
The English summary is being prepared. Showing the original description.
Focused Signals scout for PostHog projects running Replay Vision scanners — the standing LLM probes that watch session recordings and write `$recording_observed` events. Watches two promises: that enabled scanners are actually observing (throughput / success-rate cliffs, exhausted quota — a silent watch gap), and that what the scanners see in aggregate gets surfaced (a monitor's `yes`-rate or a scorer's score stepping away from its own baseline, a classifier tag or a recurring summarizer theme concentrating across many sessions). It is the agentic pull complement to the per-session push path: scanners with `emits_signals` already emit one signal per session into this same inbox, so this scout never repeats them — it adds the cross-session shape the per-session probe can't see. Emits findings only when they clear the confidence bar; otherwise writes durable memory and closes out empty. Self-contained peer in the signals-scout-* fleet.
The English summary is being prepared. Showing the original description.
Builds a structured vulnerability scanning workflow using tools like Nessus, Qualys, and OpenVAS to discover, prioritize, and track remediation of security vulnerabilities across infrastructure. Use when SOC teams need to establish recurring vulnerability assessment processes, integrate scan results with SIEM alerting, and build remediation tracking dashboards.
The English summary is being prepared. Showing the original description.
Design and implement a comprehensive DevSecOps pipeline in GitLab CI/CD integrating SAST, DAST, container scanning, dependency scanning, and secret detection.
The English summary is being prepared. Showing the original description.
Review Claude skills and commands for usefulness, overlapping content, and outdated technical references. Choose a scan of changed skills or a full review, then receive reasoned recommendations to keep, improve, update, retire, or merge them.
Audit Claude Code configuration with AgentShield to find exposed secrets, excessive permissions, unsafe hooks, and prompt injection risks, where malicious instructions influence an agent. Generate reports, apply supported automatic fixes, or create a security-focused starter configuration.
Check code changes before committing with security scans, tests, linting, and an independent agent review. Compare failures against the previous baseline, then use a separate agent to fix reported problems and repeat verification.
Process PDF documents by extracting text, tables, and images, merging or splitting files, rotating pages, creating documents, and filling forms. It also covers password protection and OCR, which recognizes text in scanned pages to make them searchable.
Tidy a Paperclip Mine inbox by scanning entries and grouping archive candidates by work status and inactivity. Present checkbox confirmations, then archive only accepted selections, with undo details and no changes to the underlying tasks, branches, or workspaces.
Integrate RuView through shell commands, an HTTP API, or WebAssembly builds, which run compiled code in browsers and supported edge devices. Covers survivor scan commands, result exports, API hosting, and browser or ESP32 deployment paths.
Extract business areas, workflows, and process steps from a codebase and display them as an interactive horizontal flow graph. Use an existing knowledge graph, a map of project components, or run a lightweight scan of project files.
Read local PDFs, scanned images, and Office documents for summaries, questions, and citations. Extract readable content, search indexed documents, and work through long files in sections while retaining precise page and block references.
Scan selected market symbols for unusual price movements and rank potential trading signals. Combine anomaly scores, measures of departure from normal behavior, with strategy filters, historical pattern matches, and predictions about changing market conditions.
Turn Strix vulnerability findings into focused code fixes, prioritized by severity. Address root causes, rerun security scans and original exploit examples, and report the changes and verification results for each issue.
Run security tests for web apps, APIs, and source code on Strix Cloud without local Docker or an LLM key. Register targets, review findings in a team dashboard, export results, and configure recurring scans or PR reviews.
Read, create, and organize PDF files, including merging documents, splitting pages, extracting tables, and filling forms. It also covers password protection and OCR, which recognizes text in scanned pages for extraction or search.
Estimate RNA velocity, the modeled direction of gene expression change, from single-cell spliced and unspliced counts. Fit models, inspect gene-level plots, visualize trajectories, and explore relative timing and associated genes while checking model limitations.
Extract text and its page coordinates locally from PDFs, Office documents, and images. Use OCR to read scans, export structured JSON or Markdown, process document folders, and render pages as PNG images for agents that analyze visual content.
Organize single-cell measurements with cell and gene metadata, read and write h5ad or Zarr files, and prepare subsets or combined datasets. Includes guidance on handling large annotated matrices without loading all measurement values into memory.
Query public single-cell and spatial gene expression data by tissue, disease, or cell type. Retrieve selected expression values, cell metadata, and summary counts for analysis and comparisons across datasets without first downloading entire collections.
Rebuild slide images, screenshots, scanned PDFs, or image-only presentations as editable PowerPoint files. Reconstruct text and simple shapes as separate objects, retain complex visuals as image assets where needed, and check rendered slides against their sources.