정보 보안 분석가

Security Review

Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive security checklist and patterns.

Daanish-Hindustani0

아키텍처 패턴

daedalus-skills-md-skills-the-hacker-mindset-skill-md

Apply the hacker mindset to any problem: security research, reverse engineering, CTF challenges, protocol analysis, creative problem-solving, constraint subversion, and adversarial reasoning. Use this skill whenever the user wants to: break or bypass a system, understand how something really works under the hood, approach a hard problem from first principles, think adversarially about their own design, find the edge cases that break assumptions, do recon/enumeration, or just "think like a hacker". Trigger on phrases like "how would an attacker...", "what's the weakest point", "how does X actually work", "can I bypass...", "CTF", "reverse engineer", "undocumented API", "what assumptions am I making", or any request for lateral / creative / adversarial problem-solving. Also trigger when the user seems stuck in a local optimum and needs a fundamentally different angle of attack.

daedalus0

Backend

Api Security Best Practices

Implement secure API patterns with concrete guidance for FastAPI, Django, NestJS, and NextJS, including authentication, authorization, validation, rate limiting, headers, and OWASP API Top 10 mitigations

daciolima0

Caido

Interact with Caido proxy for HTTP traffic analysis, request replay, and security testing. Use when user mentions 'caido', 'proxy traffic', 'pentest', 'replay request', 'HTTP history', 'security finding', 'intercept', or wants to analyze/modify/replay HTTP requests.

filipnyquist0

Git 워크플로

Ss Security

Strict automated security review gate for software engineering teams. Analyzes git diffs or commits from a security perspective, looking for vulnerabilities such as hardcoded secrets, injection risks, authentication and authorization issues, insecure design patterns, missing input validation, risky dependencies, weak cryptography, and insecure infrastructure configurations.

filipedfs0

시스템 관리

Security Engineering Operator

Operate security-sensitive systems and testing workflows.

아키텍처 패턴

Security Engineering Specialist

Advanced security engineering for vulnerability analysis, adversarial testing, sandboxing, and control design.

영업 및 마케팅

Security Engineering Builder

Build secure systems, controls, and assessment workflows for software and AI environments.

금융 및 투자

Security Engineering Reviewer

Review code and systems for exploitable weakness, bad assumptions, and weak control boundaries.

Memory Reviewer

Review AI memory systems for scope creep, privacy risk, stale recall, retrieval quality, and product-value alignment.

LLM & AI

Governance Reviewer

Review AI governance implementations for bypasses, weak enforcement, poor auditability, and mismatch between policy intent and actual control points.

LLM & AI

Governance Builder

Build governance controls around AI systems with explicit policies, approval gates, tool restrictions, and audit-ready enforcement points.

ARES Security Platform

Complete reference for working with the ARES (Advanced Rust & Ethereum Security) platform — an AI-powered security testing platform with 8 integrated tools: Trident (Solana fuzzing), Semgrep (static analysis), Checked Math (Rust overflow detection), FuzzyAI (LLM fuzzing), Whistleblower (prompt extraction), MCP Injection (MCP security testing), Multi-Agent System (AI orchestration), and HexStrike AI (pentest automation). Use this skill whenever the user wants to: run security scans on smart contracts, perform AI-powered vulnerability analysis, execute pentest automation, analyze Rust/Solana code, fuzz Solana programs, test LLM security, extract system prompts, audit MCP tools, or orchestrate multiple security tools via the multi-agent system. Also trigger when the user mentions ARES, aressystem.dev, security audit workflow, or any of the 8 security tools.

fikriaf0

Security Audit Skill

針對代碼執行專注的安全審計，尋找 OWASP Top 10 漏洞。

fet-33120

Sec Security Vulnerability Analysis

Analyze dependency, secret, filesystem, container, and IaC vulnerabilities, then turn the findings into triaged remediation work and CI/CD scanning guidance. Prefer `sec-risk-security-review` for design-time security review.

Sec Static Code Analysis

Perform stack-aware static code analysis and security-focused source scanning, then convert the output into triaged findings, CI recommendations, and remediation work. Prefer `sec-security-vulnerability-analysis` for dependency, container, and IaC scanning. Prefer `sec-risk-security-review` for design-time threat modeling and compliance review.

Sec Risk Security Review

Perform threat modeling, risk assessment, and control review using OWASP ASVS framework and data classification. Identify threats (STRIDE), prioritize by risk (likelihood × impact), design mitigations, and escalate policy/legal decisions. Prefer `sec-security-vulnerability-analysis` for scanner-style findings and `sec-static-code-analysis` for source-level checks.

스크립팅

Gov Autonomous Execution Policy

Define when unattended AI execution is allowed, what still requires approval, and what audit evidence must be recorded. Use when the repository or project wants to move from interactive work toward sandboxed autonomous execution.

시스템 관리

Cc Security

Configure Claude Code permissions, sandbox mode, allow/deny rules, and audit security settings. Use when the user needs to set up or review permission modes, sandbox configuration, allow/deny tool patterns, or telemetry settings. Triggers on: 'permissions', 'sandbox', 'allow', 'deny', 'security', 'telemetry', 'restrict access', 'unsafe commands', 'permission denied'.

fernandoxavier020

부동산 및 법률

Dependency Auditor

fernandogarzaaa0

Token Expiration Check

Specialized audit of token lifecycle, including expiration, refresh rotation, and session synchronization.

Fernando142350

Auth Security Audit

Deep security audit of authentication flows and Role-Based Access Control (RBAC) enforcement.

Fernando142350

Web Security

Browser-facing and cross-cutting web security skill for production applications. Covers: CSRF, XSS, CSP, cookie security, CORS, session management, authentication, JWT security, OAuth 2.1, SSRF, security headers, input validation, dependency scanning, and OWASP API Security Top 10. Use when: implementing auth, reviewing security posture, configuring CORS/CSP/cookies, or hardening endpoints against browser-based attacks. Sources: OWASP cheat sheets, Google BeyondCorp, Stripe, Cloudflare, Mozilla, Auth0, RFC 9700.

Fenntasy0

Security Reviewer

Acts as a Security Engineer reviewing code and architecture for security vulnerabilities. Use for security reviews, threat modeling, compliance mapping, and identifying vulnerabilities. Invoked when reviewing code for security or discussing security architecture.

femitfash0

아키텍처 패턴

Security Skill

Use this skill for security architecture design. Trigger on security design, data protection, encryption, PCI, Kafka security, API security, data at rest, data in transit, database protection, or any solution requiring security architecture. Covers transit encryption, data at rest, Kafka and database security, PCI patterns, and API Gateway connectivity. Always included in Solution Intent.

dacy0

LLM & AI

Red Teaming Code

Use this skill whenever the user wants to red-team code, code agents, or LLM-powered systems from a security perspective. Triggers include: "red team this code", "find vulnerabilities in this agent", "adversarial testing", "security audit", "test my LLM app for jailbreaks", "probe this system prompt", "write red team prompts", "simulate attacks on my AI system", "check for prompt injection", "fuzz this endpoint", or any request to systematically stress-test or attack a software system or AI model for weaknesses. Also trigger when the user shares code and asks if it can be exploited, bypassed, or abused. Covers both traditional code security review AND AI/LLM-specific adversarial testing.

daedalus0