security-baseline
Security requirements, threats, and controls that apply across this system.
Browse curated skills with source links, package snapshots, README assets and install signals in one calm, searchable catalog.
Security requirements, threats, and controls that apply across this system.
Scan dependencies/container vulnerabilities with Trivy and fix them in order of severity. Used for pre-release checks.
Setup vector embeddings and semantic search for document collections. Use for AI-powered similarity search, finding related documents, and preparing knowledge bases for RAG systems.
Expert UI/UX design guidance for professional SaaS interfaces. Covers interaction design, visual hierarchy, accessibility (WCAG 2.2 AA), color theory with OKLCH, micro-interactions, and design system …
Setup Sentry Metrics in any project. Use this when asked to add Sentry metrics, track custom metrics, setup counters/gauges/distributions, or instrument application performance metrics. Supports JavaS…
Search Engine Optimization specialist for content strategy, technical SEO, keyword research, and ranking improvements. Use when optimizing website content, improving search rankings, conducting keywor…
Sets up Python development environment using UV for fast dependency management. Configures virtual environment, dependencies, testing (pytest), linting/formatting (ruff), and type checking (mypy). ALW…
File ownership, atomic updates using Edit tool, concurrency rules for Ralph agents
Guides security professionals in implementing defense-in-depth security architectures, achieving compliance with industry frameworks (SOC2, ISO27001, GDPR, HIPAA), conducting threat modeling and risk …
Activate when conducting security analysis using STRIDE threat modeling, vulnerability assessment, and security architecture evaluation
Creates language variants of existing Semgrep rules. Use when porting a Semgrep rule to specified target languages. Takes an existing rule and target languages as input, produces independent rule+test…
Language-independent tokenizer treating text as raw Unicode. Supports BPE and Unigram algorithms. Fast (50k sentences/sec), lightweight (6MB memory), deterministic vocabulary. Used by T5, ALBERT, XLNe…
SEO & GEO (Generative Engine Optimization) for websites. Analyze keywords, generate schema markup, optimize for AI search engines (ChatGPT, Perplexity, Gemini, Copilot, Claude) and traditional search …
Use when complex problems require systematic step-by-step reasoning with ability to revise thoughts, branch into alternative approaches, or dynamically adjust scope. Ideal for multi-stage analysis, de…
Fast structured generation and serving for LLMs with RadixAttention prefix caching. Use for JSON/regex outputs, constrained decoding, agentic workflows with tool calls, or when you need 5× faster infe…
Game Designer worker behavior - extends shared-worker with GDD-specific workflows
Security and privacy engineering
Sicherheit & DSGVO - Atoll Tourisme. Use when reviewing security, implementing auth, or hardening code.
World-class data engineering skill for building scalable data pipelines, ETL/ELT systems, and data infrastructure. Expertise in Python, SQL, Spark, Airflow, dbt, Kafka, and modern data stack. Includes…
Monitor production errors using Sentry MCP. Query errors, analyze patterns, create issues, and verify error tracking is working. Use after deployment, when debugging production issues, or when verifyi…
Perform a focused SEO audit on JavaScript concept pages to maximize search visibility, featured snippet optimization, and ranking potential
Exploration symbolique du code avec Serena MCP. Utiliser pour naviguer dans le code par symboles (fonctions, classes, hooks), trouver des définitions, et comprendre l'architecture sans lire des fichie…
Write GLSL fragment shaders for procedural graphics. Topics: shapes (SDF), patterns, noise (Perlin/simplex/cellular), fBm, colors (HSB/RGB), matrices, gradients, animations. Use for generative art, te…
Use when working with the Shelby Protocol CLI for uploading files, downloading blobs, managing accounts, or configuring contexts. Helps with initialization, funding accounts with ShelbyUSD/Aptos token…