balsm-ai

Plugin balsm-ai from marketplace balsm-ai in balsm-health/Balsm-AI. Commands read from the repo's manifest — 1 month ago.

Skills (66)

• analyzing-android-malware-with-apktool

  Perform static analysis of Android APK malware samples using apktool

• analyzing-email-headers-for-phishing-investigation

  Parse and analyze email headers to trace the origin of phishing emails,

• analyzing-indicators-of-compromise

  Analyzes indicators of compromise (IOCs) including IP addresses, domains,

• analyzing-ios-app-security-with-objection

  Runtime iOS app security testing with Objection (Frida): inspect keychain and filesystem data, explore app internals at runtime, and validate/bypass client-side protections during authorized mobile assessments.

• analyzing-kubernetes-audit-logs

  Parses Kubernetes API server audit logs (JSON lines) to detect exec-into-pod,

• analyzing-linux-system-artifacts

  Examine Linux system artifacts including auth logs, cron jobs, shell

• analyzing-memory-dumps-with-volatility

  Analyzes RAM memory dumps from compromised systems using the Volatility framework to identify malicious processes,

• balsm-ai-governance

  Balsm's mandatory AI governance rules for ANY AI/LLM/ML feature in the healthcare platform. Load BEFORE designing, planning, or implementing anything AI: clinical decision support (CDSS), AI chat / chatbot / copilot / assistant, ambient scribing, summarization, triage, recommendations, or any LLM/ML

• balsm-design

  Use this skill to generate well-branded interfaces and assets for Balsm.health (بلسم) — the community-owned healthcare OS for the Arab world. Includes the official five-petal flower mark, the five-color petal palette, cool navy-slate neutrals, type system (Montserrat / IBM Plex Sans / IBM Plex Sans

• brandkit

  Premium brand-kit image generation skill for creating high-end brand-guidelines boards, logo systems, identity decks, and visual-world presentations. Trained for minimalist, cinematic, editorial, dark-tech, luxury, cultural, security, gaming, developer-tool, and consumer-app brand systems. Optimized

• conducting-cloud-incident-response

  Responds to security incidents in cloud environments (AWS, Azure, GCP) by performing identity-based containment,

• design-taste-frontend-v1

  The original v1 taste-skill, preserved for projects depending on its exact behavior. The current default is `design-taste-frontend` (v2 experimental), which is a substantial rewrite. Use this v1 install name only if you need exact backward compatibility.

• design-taste-frontend

  Anti-slop frontend skill for landing pages, portfolios, and redesigns. The agent reads the brief, infers the right design direction, and ships interfaces that do not look templated. Real design systems when applicable, audit-first on redesigns, strict pre-flight check.

• detecting-container-escape-attempts

  Container escape is a critical attack technique where an adversary breaks

• detecting-credential-dumping-techniques

  Detect LSASS credential dumping, SAM database extraction, and NTDS.dit

• detecting-misconfigured-azure-storage

  Detecting misconfigured Azure Storage accounts including publicly accessible

• detecting-s3-data-exfiltration-attempts

  Detecting data exfiltration attempts from AWS S3 buckets by analyzing

• detecting-supply-chain-attacks-in-ci-cd

  Scans GitHub Actions workflows and CI/CD pipeline configurations for

• domain-driven-design-planner

  Decide whether full DDD is worth it, then plan and route Domain-Driven Design work from strategic modeling to tactical implementation and evented architecture (CQRS, event sourcing, sagas, projections). Use for the up-front viability check and staged planning; for the in-depth DDD manual (bounded co

• domain-driven-design

  Model software around the business domain using bounded contexts, aggregates, and ubiquitous language. Use when the user mentions "domain modeling", "bounded context", "aggregate root", "ubiquitous language", "anti-corruption layer", "context mapping", "domain events", "strategic design", "the code

• exploiting-broken-function-level-authorization

  Tests APIs for Broken Function Level Authorization (BFLA) vulnerabilities

• exploiting-deeplink-vulnerabilities

  Tests and exploits deep link (URL scheme and App Link) vulnerabilities

• exploiting-excessive-data-exposure-in-api

  Tests APIs for excessive data exposure where endpoints return more data

• exploiting-http-request-smuggling

  Detecting and exploiting HTTP request smuggling vulnerabilities caused

• exploiting-idor-vulnerabilities

  Identifying and exploiting Insecure Direct Object Reference vulnerabilities

• exploiting-insecure-data-storage-in-mobile

  Identifies and exploits insecure local data storage vulnerabilities

• exploiting-insecure-deserialization

  Identifying and exploiting insecure deserialization vulnerabilities in

• exploiting-mass-assignment-in-rest-apis

  Discover and exploit mass assignment vulnerabilities in REST APIs to

• exploiting-nosql-injection-vulnerabilities

  Detect and exploit NoSQL injection vulnerabilities in MongoDB, CouchDB,

• exploiting-server-side-request-forgery

  Identifying and exploiting SSRF vulnerabilities to access internal services,

• exploiting-sql-injection-vulnerabilities

  Identifies and exploits SQL injection vulnerabilities in web applications

• exploiting-sql-injection-with-sqlmap

  Detecting and exploiting SQL injection vulnerabilities using sqlmap to

• extracting-iocs-from-malware-samples

  Extracts indicators of compromise (IOCs) from malware samples including

• full-output-enforcement

  Overrides default LLM truncation behavior. Enforces complete code generation, bans placeholder patterns, and handles token-limit splits cleanly. Apply to any task requiring exhaustive, unabridged output.

• gpt-taste

  Elite UX/UI & Advanced GSAP Motion Engineer. Enforces Python-driven true randomization for layout variance, strict AIDA page structure, wide editorial typography (bans 6-line wraps), gapless bento grids, strict GSAP ScrollTriggers (pinning, stacking, scrubbing), inline micro-images, and massive sect

• hardening-docker-containers-for-production

  Hardening Docker containers for production involves applying security

• hardening-docker-daemon-configuration

  Harden the Docker daemon by configuring daemon.json with user namespace

• high-end-visual-design

  Teaches the AI to design like a high-end agency. Defines the exact fonts, spacing, shadows, card structures, and animations that make a website feel expensive. Blocks all the common defaults that make AI designs look cheap or generic.

• hunting-for-persistence-mechanisms-in-windows

  Systematically hunt for adversary persistence mechanisms across Windows

• hunting-for-unusual-network-connections

  Hunt for unusual network connections by analyzing outbound traffic patterns,

• hunting-for-webshell-activity

  Hunt for web shell deployments on internet-facing servers by analyzing

• image-to-code

  Elite website image-to-code skill for Codex. For visually important web tasks, it must first generate the design image(s) itself, deeply analyze them, then implement the website to match them as closely as possible. In Codex, it must prefer large, readable, section-specific images instead of tiny co

• imagegen-frontend-mobile

  Elite mobile app image-generation skill for creating premium, app-native screen concepts and flows. Designed for iOS, Android, and cross-platform mobile products. Prioritizes clean hierarchy, comfortably readable text, strong multi-screen consistency, controlled color palettes, non-generic creative

• imagegen-frontend-web

  Elite frontend image-direction skill for generating premium, conversion-aware website design references. CRITICAL OUTPUT RULE — generate ONE separate horizontal image FOR EVERY section. A landing page with 8 sections produces 8 images. Never compress multiple sections into one image. Enforces compos

• implementing-api-key-security-controls

  Implements secure API key generation, storage, rotation, and revocation

• implementing-api-rate-limiting-and-throttling

  Implements API rate limiting and throttling controls using token bucket,

• implementing-aws-iam-permission-boundaries

  Configure IAM permission boundaries in AWS to delegate role creation

• implementing-cloud-security-posture-management

  Implementing Cloud Security Posture Management (CSPM) to continuously

• implementing-hashicorp-vault-dynamic-secrets

  Implements HashiCorp Vault dynamic secrets engines for database credentials,

• implementing-secrets-management-with-vault

  This skill covers deploying HashiCorp Vault for centralized secrets

• implementing-secrets-scanning-in-ci-cd

  Integrate gitleaks and trufflehog into CI/CD pipelines to detect leaked

• industrial-brutalist-ui

  Raw mechanical interfaces fusing Swiss typographic print with military terminal aesthetics. Rigid grids, extreme type scale contrast, utilitarian color, analog degradation effects. For data-heavy dashboards, portfolios, or editorial sites that need to feel like declassified blueprints.

• minimalist-ui

  Clean editorial-style interfaces. Warm monochrome palette, typographic contrast, flat bento grids, muted pastels. No gradients, no heavy shadows.

• performing-mobile-device-forensics-with-cellebrite

  Acquire and analyze mobile device data using Cellebrite UFED and open-source

• redesign-existing-projects

  Upgrades existing websites and apps to premium quality. Audits current design, identifies generic AI patterns, and applies high-end design standards without breaking functionality. Works with any CSS framework or vanilla CSS.

• securing-aws-lambda-execution-roles

  Securing AWS Lambda execution roles by implementing least-privilege

• stitch-design-taste

  Semantic Design System Skill for Google Stitch. Generates agent-friendly DESIGN.md files that enforce premium, anti-generic UI standards — strict typography, calibrated color, asymmetric layouts, perpetual micro-motion, and hardware-accelerated performance.

• testing-api-for-mass-assignment-vulnerability

  Tests APIs for mass assignment (auto-binding) vulnerabilities where

• testing-for-sensitive-data-exposure

  Identifying sensitive data exposure vulnerabilities including API key

• testing-for-xss-vulnerabilities-with-burpsuite

  Identifying and validating cross-site scripting vulnerabilities using

• testing-for-xss-vulnerabilities

  Tests web applications for Cross-Site Scripting (XSS) vulnerabilities

• testing-for-xxe-injection-vulnerabilities

  Discovering and exploiting XML External Entity injection vulnerabilities

• testing-jwt-token-security

  Assessing JSON Web Token implementations for cryptographic weaknesses,

• testing-mobile-api-authentication

  Tests authentication and authorization mechanisms in mobile application

• testing-oauth2-implementation-flaws

  Tests OAuth 2.0 and OpenID Connect implementations for security flaws

• triaging-security-incident

  Performs initial triage of security incidents to determine severity,

Slash commands (1)

• /balsm-ai:balsm-context

  Summarize which Balsm repo you're in and its role in the wider workspace.

Subagents (1)

• balsm-reviewer

  Reviews changes across any Balsm repo for correctness, security, and cross-repo contract drift (API ↔ Flutter ↔ website). Read-only. Spawn for "review my Balsm change" or "check this against the API contract".

MCP servers (3)

• github

  connects to: https://api.githubcopilot.com/mcp/

• sentry

  connects to: https://mcp.sentry.dev/mcp

• supabase

  connects to: https://mcp.supabase.com/mcp?read_only=true

Hooks (2)

• UserPromptSubmit

  ${CLAUDE_PLUGIN_ROOT}/hooks/ai-governance-trigger.sh

• PreToolUse

  ${CLAUDE_PLUGIN_ROOT}/hooks/docs-with-code-guard.sh

Similar plugins