security-analyst
Security analyst persona with deep OWASP expertise, vulnerability classification, risk assessment, and compliance mapping
Découvrez les skills Bases de données, comparez leurs dépôts et consultez leurs instructions.
Security analyst persona with deep OWASP expertise, vulnerability classification, risk assessment, and compliance mapping
Use when making architecture decisions, creating ADRs, designing system components, evaluating technology choices, or planning technical implementations. Invoked for system design, scalability analysis, and pla...
Use when explaining or applying Spec-Driven Development workflow, guiding through SDD phases, or helping with workflow decisions. Invoked for methodology guidance, workflow optimization, and best practices.
Validates constitution status before executing /flowspec commands. Enforces tier-based validation rules (Light=warn, Medium=confirm, Heavy=block).
Fuzzing strategist persona specializing in dynamic testing guidance, fuzzing strategy development, and crash analysis
Use when creating backlog tasks from security findings, integrating security scans into workflow states, or managing security remediation tracking. Invoked for security workflow integration and task automation.
Use when creating backlog tasks from security findings, integrating security scans into workflow states, or managing security remediation tracking. Invoked for security workflow integration and task automation.
Use when creating test plans, reviewing test coverage, defining quality gates, writing E2E test scenarios, or validating acceptance criteria. Invoked for quality assurance, testing strategy, and verification ac...
Patch engineer persona focused on security fix quality, code correctness, testing strategies, and regression prevention
Use when reviewing code for security vulnerabilities, conducting threat modeling, ensuring SLSA compliance, or performing security assessments. Invoked for security analysis, vulnerability detection, and compli...
Generates UI components in National Design Studio style. Use when building government websites, landing pages with Instrument Serif typography, warm beige or dark navy themes, full-viewport heroes, or when user...
Route commands to appropriate workflows based on task language and status. Invoke when executing /task, /research, /plan, /implement commands.
Implement semantic theories and Python/Z3 code with TDD. Invoke for Python-language implementation tasks.
Research and develop semantic theories using ModelChecker with Z3 SMT solver. Define operators, adjust frame constraints, create examples, run tests, and report findings. Invoke with /mc or when working with mo...
Conduct general research using web search, documentation, and codebase exploration. Invoke for non-Lean research tasks.
Research Python/Z3 patterns and APIs for semantic theory development. Invoke for Python-language research tasks.
Atomically update task status across TODO.md and state.json. Invoke when task status changes.
Create phased implementation plans from research findings. Invoke when a task needs an implementation plan.
Execute general implementation tasks following a plan. Invoke for non-Lean implementation work.
Create scoped git commits for task operations. Invoke after task status changes or artifact creation.
Обновление README.md по текущему состоянию кода и метрик тестирования (make test, make infection), с синхронизацией docs/ARCHITECTURE.md при архитектурных изменениях.
This skill should be used when teams need to adopt Supertester to build deterministic Elixir OTP tests with isolation, synchronization, and supervision coverage.
AI面试教练,提供全面的面试准备、模拟和反馈。覆盖技术面试、系统设计、行为面试(STAR法则)、HR面试。生成面试题、模拟真实面试、提供详细反馈和改进建议。当用户准备面试或进行模拟面试时自动触发。
职业发展顾问。分析技能差距、推荐学习路径、规划职业发展、指导角色转换。帮助你做出战略性的职业决策。
Le classement utilise les étoiles du dépôt GitHub indexé. Plusieurs skills peuvent partager ce nombre : ce n’est ni un nombre d’installations ni une note de qualité.