Segurança

Triggers the L5 Red Team Sub-Agent to rigorously audit a plugin against the 39-point L4 pattern matrix.

Autonomous security vulnerability scanner for codebases. Detects secrets, XSS, missing security headers, auth issues, OWASP Top 10 patterns, dependency vulnerabilities, PII exposure, CORS misconfiguration, and more. Aligned to OWASP APTS (Autonomous Penetration Testing Standard) Foundation tier. Outputs SARIF JSON, Markdown report, and APTS Conformance Claim. Use when the user wants a security aud

Esta skill realiza uma varredura de compatibilidade 4.6/4.7 quando solicitada, abrangendo CLAUDE.md, AGENTS.md, subagentes, arquivos de skill, settings.json, hooks, manifestos de pacote e locais de chamada do SDK da Anthropic.

Extracts pure, framework-free, IO-free domain models and deterministic business rules from a rapid prototype with strict preservation vs replacement classification and purity audit enforcement.

Audit Vector DB coverage -- compares the live filesystem manifest against the ChromaDB index to identify coverage gaps.

Gemini CLI sub-agent system for persona-based analysis. Use when piping large contexts to Google Gemini models for security audits, architecture reviews, QA analysis, or any specialized analysis requiring a fresh model context.

Auditoria de segurança pré-instalação para skills de agentes de IA de terceiros. Detecta padrões maliciosos, engenharia social e excesso de permissões em arquivos SKILL.md antes da instalação.

Interactively prepares a targeted Red Team Review package. It conducts a brief discovery interview to determine the threat model, generates a strict security auditor prompt, compiles a manifest of relevant project files, and bundles them into a single Markdown artifact or ZIP archive ready for an external LLM (like Grok, ChatGPT, or Gemini) or a human reviewer.

Avalie sua posição no espectro entre modo fundador e modo gerente, com base nos frameworks de Brian Chesky e Paul Graham. Ideal para fundadores e CEOs que desejam verificar se estão liderando como fundadores ou se desviando para o modo gerente.

Python dependency and environment management for multi-service or monorepo python backends. Use when: (1) adding, upgrading, or removing a Python package, (2) responding to Dependabot or security vulnerability alerts (GHSA/CVE), (3) creating a new service that needs its own requirements files, (4) debugging pip install failures or Docker build issues related to dependencies, (5) reviewing or audit

Audit file path references in plugins and skills. Trigger with "audit path references", "check file references", "find broken references", "path reference audit", "verify paths", or when you need to validate that all ./references in code actually exist in the skill/plugin. Three-phase audit: (1) SCAN all files for references, (2) VERIFY each exists, (3) REPORT issues. Generates inventory.json for

Audit RLM cache coverage - compare manifest against filesystem