Segurança

Routes security requests to the correct specialist: secure coding, auditing, compliance, or penetration testing. Covers OWASP, SOC2, GDPR, authentication, encryption, and vulnerability management. Triggers: security audit, vulnerability, penetration test, compliance, gdpr, soc2, secure coding, owasp, authentication, authorization, encryption, security policy, access control, secrets management, th

Safe flow state for Claude Code. Auto-approves routine actions, activates when the agent is about to: write files, run shell commands, send messages, access credentials, make API calls, install packages, modify config, or perform any irreversible operation. Also activates when user invokes /guardrails, or when token cap is exceeded.

Realiza revisões de código completas com feedback acionável e priorizado, cobrindo correção, segurança, desempenho, legibilidade e melhores práticas em diversas linguagens. Utilize para revisar código, verificar qualidade, encontrar bugs ou auditar implementações.

在执行 ≥ 30 条目的批量核查 / 批量修改任务（引用核查、术语一致性检查、格式统一、文献元数据补齐）时， 必须采用"派多个 Agent 并行 + 每个 Agent 输出 JSON + 主进程汇总落盘 + 分批断点续跑"的标准模式， 不得在主会话里串行单线程跑全量。 Use when 任务规模 ≥ 30，涉及对独立条目的同质操作（每个条目处理逻辑相同、之间无依赖）。

Audit code for security vulnerabilities — OWASP Top 10, injection flaws, auth issues, secrets exposure, and dependency risks.

Write, format, and export professional academic research papers as publication-ready PDFs using reportlab. Use this skill whenever the user wants to write a research paper, preprint, white paper, literature review, position paper, or technical report — whether from scratch, from notes, or from an existing draft. Also trigger when the user asks to convert markdown/text into an academic PDF, needs S

Accessibility audit. Dispatches an accessibility auditor to identify WCAG conformance gaps, prioritize by user impact, and recommend fixes. Advisory only — no changes made.

Assist authorized penetration testing — recon methodology, vulnerability identification, and report writing.

Use this skill whenever the user wants to do anything with PDF files. This includes reading or extracting text/tables from PDFs, combining or merging multiple PDFs into one, splitting PDFs apart, rotating pages, adding watermarks, creating new PDFs, filling PDF forms, encrypting/decrypting PDFs, extracting images, and OCR on scanned PDFs to make them searchable. If the user mentions a .pdf file or

White-box security audit. Blue-teamer and lead red-teamer run in parallel isolation for an independent first pass — neither sees the other's output during reconnaissance. A synthesis step categorizes findings into four prescriptive buckets (anchoring-suppressed, convergent, blue-flagged-unverified, divergent), producing a unified target list. Focused red-teamers then deep-dive each target. Iterate

Esta skill é para situações onde segurança, políticas, governança, conformidade ou proteção são críticas, abrangendo operações perigosas, exclusões, modificações de arquivos, chamadas de API e manipulação de credenciais. Ela instala hooks determinísticos PreToolUse/PostToolUse.

Create a scheduled task that can be run on demand or automatically on an interval.