Explore skills

Apply modern web development best practices for security, compatibility, and code quality. Use when asked to "apply best practices", "security audit", "modernize code", "code quality review", or "check for vulnerabilities".

Audits and fixes HTML accessibility issues including ARIA labels, keyboard navigation, focus management, color contrast, and form errors. Use when adding interactive controls, forms, dialogs, or reviewing WCAG compliance.

Security Skill: Focuses on preventing hardcoded secrets, implementing JWT authentication, and ensuring robust input validation.

Performs thorough code reviews with actionable, prioritized feedback. Covers correctness, security, performance, readability, and best practices across languages.

This comprehensive security skill for AI-assisted projects operates in two modes: AUDIT, running a 50-point checklist with quantitative scoring, and PREVENTIVE, guiding secure code generation by consulting vulnerability knowledge bases. It covers OWASP Top 10, cloud-native security (Supabase RLS, Firebase Rules), and payment security.

Security audit for MCP (Model Context Protocol) servers. Detects data exfiltration risks, command injection, permission escalation, and supply chain vulnerabilities before adding MCP servers to your agent.

Application security agent that audits code for OWASP Top 10 vulnerabilities, hardcoded secrets, and common security flaws. Triggers on: security audit, vulnerability scan, OWASP check, security review, penetration test, hardening.

Service-profile-driven project audit. Auto-fires when the user requests audit, review, code review, pre-launch check, security audit, OWASP/SOLID/12-Factor compliance, project skeleton/bootstrap/setup, or any equivalent in any language (e.g., 점검, 감사, 리뷰, 출시 전 검토, 보안 점검, 골조, 셋업). Reads the full 0–10 section checklist from SPEC.md, filters items by grade (🔴🟠🟡🔵⚪) against the user's service profil

Bug Hunter v1.1.0 Systematically hunts and detects potential bugs in code, including security vulnerabilities, null safety issues, boundary conditions, exception handling gaps, logic defects, code smells, and concurrency problems.

Audit a page for WCAG 2.1 AA accessibility issues. Traces the render chain, checks structural/semantic HTML, contrast indicators, ARIA, and outputs a prioritized report.

Technical SEO audit with GEO-specific checks — crawlability, indexability, security, performance, SSR, and AI crawler access

脅威モデル・認可・データフロー・設計リスクの観点からセキュリティ監査を行う。新機能の設計時、外部接点を変更するとき、認証・認可・データ扱いに触れるときに使う。