Segurança

Master smart contract security best practices to prevent common vulnerabilities and implement secure Solidity patterns. Use when writing smart contracts, auditing existing contracts, or implementing security measures for blockchain applications.

Configure Static Application Security Testing (SAST) tools for automated vulnerability detection in application code. Use when setting up security scanning, implementing DevSecOps practices, or automating code vulnerability detection.

Audit an Anthropic Cookbook notebook based on a rubric. Use whenever a notebook review or audit is requested.

Master smart contract security best practices to prevent common vulnerabilities and implement secure Solidity patterns. Use when writing smart contracts, auditing existing contracts, or implementing security measures for blockchain applications.

Comprehensive Solidity smart contract development skill using Foundry framework. Use for writing, testing, deploying, and auditing Solidity contracts with security-first practices. Also triggers when working with .sol files, Foundry project files (foundry.toml), test files (.t.sol), or smart contract deployment scripts. Example triggers: "Write smart contract", "Create Solidity test", "Deploy cont

Use when writing skills, CLAUDE.md files, agent prompts, or any directives that involve shell commands, environment variables, API credentials, file creation, or git operations - prevents secrets leakage into LLM context, unsafe shell patterns, and credential exposure

服务器安全审计与加固。扫描 SSH、防火墙、端口暴露、文件权限、暴力破解等安全问题，生成报告并提供一键修复。当用户说服务器安全、安全审计、安全检查、安全加固时使用

Send recent work to OpenAI Codex CLI for an independent audit/review

WordPress performance code review and optimization analysis. Use when reviewing WordPress PHP code for performance issues, auditing themes/plugins for scalability, optimizing WP_Query, analyzing caching strategies, checking code before launch, or detecting anti-patterns, or when user mentions "performance review", "optimization audit", "slow WordPress", "slow queries", "high-traffic", "scale WordP

Use this skill when securing web applications, preventing OWASP Top 10 vulnerabilities, implementing input validation, or designing authentication. Triggers on XSS, SQL injection, CSRF, SSRF, broken authentication, security headers, input validation, output encoding, OWASP, and any task requiring application security hardening.

Use esta skill ao auditar habilidades ou definições de agentes de IA para vulnerabilidades de segurança, injeção de prompt, abuso de permissão, riscos da cadeia de suprimentos ou qualidade estrutural. Ela é acionada em revisão de skill, auditoria de segurança, verificação de segurança de skill, detecção de injeção de prompt, verificação de confiança de skill, portão de qualidade de skill, auditoria de agente, revisão de segurança de agente, verificação de segurança de subagente e qualquer tarefa que exija segurança.

Esta skill auxilia em todo o ciclo de vida de contratos inteligentes Solidity, desde o desenvolvimento e auditoria até a implantação. Abrange segurança, otimização de gás, padrões ERC, prevenção de vulnerabilidades e testes com ferramentas como Foundry/Hardhat.