Segurança

Architecture assessment for Android projects. Evaluates Jetpack Compose adoption, UDF pattern (ViewModel + StateFlow), dependency injection, type-safe navigation, repository pattern, and module structure. Triggers on: "architecture", "compose adoption", "module structure", "dependency injection".

You are a dependency security expert specializing in vulnerability scanning, license compliance, and supply chain security. Analyze project dependencies for known vulnerabilities, licensing issues, outdated packages, and provide actionable remediation strategies.

Use this skill when implementing security measures or conducting security audits. Provides OWASP Top 10 mitigations, authentication patterns, input validation strategies, and compliance guidelines. Ensures applications are secure against common vulnerabilities.

When the user needs to prepare for SOC 2, build a compliance roadmap, assess security posture, quantify security risk, or says "we need SOC 2", "security audit", "compliance", "enterprise customer wants SOC 2", "CISO advice".

Perform a rapid defensive triage on an authorized code area when time is limited. Use to find the most plausible high-impact issues fast, then recommend the next best review target.

Software Bill of Materials (SBOM) generation using Syft for container images, filesystems, and archives. Detects packages across 28+ ecosystems with multi-format output support (CycloneDX, SPDX, syft-json). Enables vulnerability assessment, license compliance, and supply chain security. Use when: (1) Generating SBOMs for container images or applications, (2) Analyzing software dependencies and pac

Strategic Android improvement roadmap. 4-phase plan with app-type specific templates for social, ecommerce, fintech, health/fitness, productivity apps. Triggers on: "android plan", "android strategy", "android roadmap", "improvement plan".

Skill robusta de cibersegurança full-spectrum para arquitetar, auditar e responder a incidentes. Use-a para projetar segurança, auditar projetos, garantir hardening, defender contra invasões, mitigar vulnerabilidades e tratar incidentes, ativando-se também com termos como 'cibersegurança', 'hackeado' e 'ataque'.

Scans Cosmos SDK blockchain modules and CosmWasm contracts for consensus-critical vulnerabilities — chain halts, fund loss, state divergence. 25 core + 16 IBC + 10 EVM + 3 CosmWasm patterns. Use when auditing custom x/ modules, reviewing IBC integrations, or assessing pre-launch chain security. Updated for SDK v0.53.x.

This skill should be used when the user asks to "pentest WordPress sites", "scan WordPress for vulnerabilities", "enumerate WordPress users, themes, or plugins", "exploit WordPress vulnerabilities", or "use WPScan". It provides comprehensive WordPress security assessment methodologies.

Gerencia escalonamento de privilégios autorizado, CTFs e pós-exploração em Linux, contêineres e K8s, com gatilhos como 'privesc', 'CTF', 'pentest', 'post-exploitation', 'container escape', 'SUID' e 'GTFOBins'. Não é para hardening; para isso, use security-audit.

Advanced vulnerability analysis principles. OWASP 2025, Supply Chain Security, attack surface mapping, risk prioritization.