security-review
Security vulnerability detection and remediation for Python code. Use PROACTIVELY after writing code that handles user input, API endpoints, authentication, or sensitive data. Flags secrets, injection vulnerabi...
发现 研究与调研 相关 Skills,比较来源仓库和用途,查看适合你工作流的技能说明。
Security vulnerability detection and remediation for Python code. Use PROACTIVELY after writing code that handles user input, API endpoints, authentication, or sensitive data. Flags secrets, injection vulnerabi...
Use this skill when users want to add Langfuse tracing to their code, set up observability, instrument LLM calls, or add scoring to their pipelines. Helps users correctly structure traces, spans, and generation...
다각도 코드 리뷰 스킬. UI/UX, 성능, 디자인, 코드 품질, 엣지케이스, 보안 등 6가지 관점에서 체계적인 코드 리뷰를 수행합니다. 코드 변경 후, PR 생성 전, 기능 구현 완료 후에 사용하세요. "/multi-perspective-code-revi...
Expert reverse engineer specializing in binary analysis, disassembly, decompilation, and software analysis. Masters IDA Pro, Ghidra, radare2, x64dbg, and modern RE toolchains. Handles executable analysis, libra...
Use when the user wants to add or update human scores on traces, manage annotation workflows, list scores, find traces pending review, or export annotations from Langfuse.
Use when working with debugging toolkit smart debug
Bundle size, render cycles, and Core Web Vitals optimization.
You are an expert error analysis specialist with deep expertise in debugging distributed systems, analyzing production incidents, and implementing comprehensive observability solutions.
디버깅 전략, 로깅 베스트 프랙티스, 에러 추적
Expert malware analyst specializing in defensive malware research, threat intelligence, and incident response. Masters sandbox analysis, behavioral analysis, and malware family identification. Handles static/dy...
Audit de sécurité complet de la codebase - vulnérabilités, bonnes pratiques, conformité OWASP
Performs comprehensive security audit on TypeScript/JavaScript codebases. Use when asked to review security, find vulnerabilities, audit code, or check for OWASP issues. Covers injection attacks, SSRF, XSS, aut...
Use this skill when the user wants to explore or search across the codebase. Delegates search to GLM-4.7 via background subagent for non-blocking execution. Appropriate for: finding implementations, locating co...
Understand anti-reversing, obfuscation, and protection techniques encountered during software analysis. Use when analyzing protected binaries, bypassing anti-debugging for authorized analysis, or understanding...
Identifies and fixes performance bottlenecks. Use when optimizing code performance, fixing slow operations, or when asked to improve speed.
Ultra-fast codebase exploration for finding files, patterns, symbols, and dependencies. Use when you need to quickly search across large codebases.
AST-based structural code search, security scanning, and refactoring using ast-grep (sg CLI). Supports 40+ languages with pattern matching and code transformation.
TypeScript strictest patterns, type guards, optional properties (exactOptionalPropertyTypes), Drizzle query safety, null checks. Use when fixing type errors, implementing complex types, or when user mentions Ty...
This skill should be used when the user asks to "get langfuse traces", "fetch trace data", "retrieve last traces", "show me the trace", "debug a trace", "analyze trace ID", "what happened in trace", or needs to...
Use when the user asks to evaluate UX, dogfood a product, assess production readiness, run an MCP app evaluation, trace UI-to-backend gaps, or find UX issues in a flow. Provides three modes (ux-eval, dogfood, m...
Master memory forensics techniques including memory acquisition, process analysis, and artifact extraction using Volatility and related tools. Use when analyzing memory dumps, investigating incidents, or perfor...
Review React components for best practices, hooks usage, performance issues, accessibility, and TypeScript type safety. Use when you need to audit existing React components or provide code review feedback.
IPA guideline-compliant security diagnostic and review skill for Laravel/React applications. Use when performing security checks during code implementation or review. Diagnoses 11 vulnerability types (SQL injec...
Expert database optimizer specializing in modern performance tuning, query optimization, and scalable architectures. Masters advanced indexing, N+1 resolution, multi-tier caching, partitioning strategies, and c...
默认按已收录数据中的 GitHub 仓库 Stars 排序。Stars 属于来源仓库,同一仓库的多个技能可能共享相同数值;它反映仓库关注度,不代表单个技能的安装量或质量评分。