Segurança

ISO 13485 internal audit expertise for medical device QMS. Covers audit planning, execution, nonconformity classification, and CAPA verification. Use for internal audit planning, audit execution, finding classification, external audit preparation, or audit program management.

Critical review (min. 5 findings). Modes: code, audit, plan. Use when: "review", "critical review", "code review", "plan review", "audit review".

Produce consistent, auditable release notes from Conventional Commits. Separates commit parsing, semantic-bump logic, and changelog rendering for automated releases with editorial control. Use when cutting a release, generating CHANGELOG.md from git history, or automating release notes in CI.

Realiza uma auditoria completa de um projeto, abrangendo acessibilidade, UX, desempenho, SEO, segurança, banco de dados, arquitetura, conformidade legal, operações e observabilidade. Alimentado por graphify, relata descobertas com evidências e severidade, podendo opcionalmente mitigar os problemas.

Use when about to claim work is complete, fixed, or passing, before committing or creating PRs - requires running verification commands and confirming output before making any success claims; evidence before assertions always

/cs:fda-qsr-audit-prep <scope> — FDA 21 CFR 820 (QSR / QMSR) audit 6-question forcing interrogation. Post-Feb 2026 substantially harmonized with ISO 13485. Use before annual internal QSR audit, pre-FDA-inspection readiness, or Form 483 response.

Utilize para pesquisa de vulnerabilidades, auditoria de segurança, análise de código, bug bounty, desafios CTF, testes de penetração ou desenvolvimento de exploits. Abrange auditoria de código-fonte em mais de 30 domínios de ataque, análise de sink para 12 linguagens, integração SAST/DAST, encadeamento de vulnerabilidades e desenvolvimento de PoC.

Review MERN code for compliance with standards, NFRs, and security policy.

Security policy for MERN apps. Enforces OWASP Top 10 and CWE Top 25 mitigations.

/cs:iso27001-audit-prep <scope> — ISO 27001 ISMS audit readiness 6-question forcing interrogation. Use before annual Clause 9.2 internal audit, surveillance audit prep, or stage 1 certification readiness.

审查自定义 Claude Code Skills 的质量与规范性。 检查 SKILL.md 渐进式披露、行数、frontmatter、参考文件链接、目录结构等。 触发词：审查skill、检查skill质量、skill audit、review skills、 检查技能规范、skill质量检查

Security auditing skill for web applications and codebases. Scans for OWASP Top 10, dependency vulnerabilities, secrets exposure, XSS/CSRF/injection flaws, auth weaknesses, and misconfigurations. Use when task involves security scan, vulnerability assessment, pen test review, threat modeling, or hardening a codebase.