Security & Compliance

Threat reviews, dependency and secret audits, hardening checklists and the paperwork regulated work asks for.

16 skills

1. 01

   GitHub Actions Hardening

   SkillReviews workflow YAML for the ways CI specifically gets compromised.▲0DevOps & Infrastructure
2. 02

   CodeQL Code Scanning

   SkillSets up CodeQL scanning through Actions or the CLI, and unsticks it when it fails.▲0DevOps & Infrastructure
3. 03

   Threat Model Analyst

   SkillBuilds a STRIDE-A threat model of a repository and keeps it current as code moves.▲0Security & Compliance
4. 04

   MCP Security Audit

   SkillChecks .mcp.json entries before an agent is allowed to load them.▲0Agent Engineering
5. 05

   Security and Hardening

   SkillThreat-models the trust boundaries before writing a single control.▲0Security & Compliance
6. 06

   Semgrep Rule Creator

   SkillWrites custom Semgrep rules and refuses to call one done before its tests pass.▲0Code Reviews
7. 07

   Skill Security Auditor

   SkillScans a third-party agent skill for hostile code before it is installed.▲0Agent Engineering
8. 08

   Dependency Auditor

   SkillReads lockfiles across eight ecosystems for vulnerable packages, licence conflicts and upgrade order.▲0DevOps & Infrastructure
9. 09

   Auth0 Agent Skills

   SkillOne Auth0 skill that routes by framework and feature, then loads only the guides that apply.▲0Security & Compliance
10. 10

    CrowdStrike Falcon Foundry Skills

    SkillBuilds and deploys Falcon Foundry apps through the Foundry CLI.▲0DevOps & Infrastructure
11. 11

    Stripe Skills

    SkillDecides between Stripe's payment APIs and pins the current API and SDK versions.▲0Coding Workflows
12. 12

    SAST Configuration

    SkillSets up Semgrep, CodeQL and SonarQube so the pipeline blocks real findings.▲0DevOps & Infrastructure
13. 13

    Auth Implementation Patterns

    SkillChooses between sessions, JWT and OAuth2 before any login page exists.▲0Coding Workflows
14. 14

    secret-guard

    SkillStops a write that carries a live credential.▲0Security & Compliance
15. 15

    install-guard

    SkillLooks a package up in its registry before it gets installed.▲0Security & Compliance
16. 16

    scope-guard

    SkillCatches an edit that lands outside the project you are in.▲0Security & Compliance