Two complementary JavaScript/TypeScript web and Electron security skills: web-security-review traces data flow and reports only proven vulnerabilities; web-security-hardening performs applicability-aware OWASP ASVS 5.0.0 and Electron Security Checklist gap assessments across browser, desktop-runtime, identity, storage, packaging, update, and deployment controls.
Plugin security from marketplace photostructure in photostructure/coding-skills. Commands read from the repo's manifest — 5 days ago.
web-security-hardeningSecurity best-practices and hardening review for JavaScript/TypeScript web and Electron desktop applications. Use when asked to harden an app, review security posture or secure defaults, assess OWASP ASVS or Electron security-checklist alignment, improve HTTP headers or CSP, review forms/input valid
web-security-reviewTop-level security code review for JavaScript/TypeScript web applications and Electron desktop applications. Use when the user asks to "security review", "find vulnerabilities", "check for security issues", "audit security", "OWASP review", "is this secure?", or to review Node/Express/React/Vue/Next
reviewerLeaf worker for an active web-security review. Use only when a parent explicitly assigns role leaf-reviewer and delegation-budget 0; never use for a direct user request.
Workflow skills: write-clearly (plain-language and unambiguous technical prose), replan (iterative planning), review, review-staged, and second-opinion (proof-based code review), gitplan and stage (disciplined Conventional-Commit staging), and the Technical Project Plan workflow (tpp, handoff, tpp-orchestrate — multi-session plan files with serial orchestration, TDD subagents, and cross-model vetted reviews).
11 skills
Two complementary modern-C++ (C++17) native-addon skills: resource-review traces object and resource lifetimes and reports only proven memory/resource defects (use-after-free, double-free, leaks, out-of-bounds, integer overflow, data races, Node-API handle/reference/threadsafe-function misuse); project-setup performs an applicability-aware Met/Gap assessment of cross-platform node-gyp build config, per-OS/per-arch compiler hardening, sanitizer/static-analysis/CI wiring, and maintainable modern-C++ conventions.
2 skills · 1 agent
An applicability-aware Rust project-setup skill covering Cargo workspaces and features, edition/MSRV/toolchain policy, strict usable rustc/Clippy/rustfmt configuration, layered testing and CI, idiomatic safe API design, governed unsafe/FFI boundaries, packaging, and crates.io release preparation.
1 skill
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.
hooks
Persistent memory for Claude Code: the next session starts where the last one left off.
29 skills · 1 MCP server · hooks
Open-source AI job search that runs locally in your AI coding CLI: scan job portals, evaluate listings into a structured A-H report with a 1-5 score, tailor your CV, track applications
5 skills · hooks
SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening
5 skills · 3 commands · 2 agents
Connect Claude to Prowler Cloud through the Prowler MCP server. Reads providers, scans, findings, compliance results and resources for AWS, Azure, GCP, Kubernetes, Microsoft 365, GitHub and the other providers listed at https://registry.prowler.com, and returns remediation guidance for failed checks. Writes are limited to Prowler Cloud itself: triggering scans, finding triage, mute rules and the mutelist, providers and integrations. Your cloud resources are not changed by the connector.
1 skill · 1 MCP server
Worktrunk is a CLI for Git worktree management, designed for parallel AI agent workflows. This plugin provides configuration guidance (LLM commit messages, project hooks, worktree paths), automatic activity tracking (🤖/💬 indicators in `wt list` showing active Claude sessions), and a `/wt-diff` pane showing each worktree's changes.
2 skills · hooks
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.