Agent Skills Hub

pci-compliance

Implement PCI DSS compliance for secure payment processing, cardholder data protection, and audit preparation using standardized security patterns.

constant-time-testing

Detects timing side channels in cryptographic code to prevent secret data leakage. Essential for auditing sensitive implementations.

n8n-security-testing

Automated security scanning for n8n workflows: detects credential exposure, validates OAuth flows, tests API key management, and checks data sanitization.

code-security

Comprehensive secure coding guidelines for 15+ languages, covering OWASP Top 10, infrastructure security, and best practices to identify vulnerabilities in code, configurations, and cloud setups.

secure-claude-code

Monitor Runwall security posture, enabled guardrails, and recent audit logs for Claude Code, Codex, and MCP-based development environments.

auth-patterns

Implement secure backend authentication (JWT, OAuth, Sessions) and authorization (RBAC, ABAC) patterns, including password hashing, MFA, and security best practices.

secrets-management

Securely manage CI/CD secrets with Vault, AWS Secrets Manager, and environment-specific patterns. Prevent credential leakage, implement rotation, and enforce least-privilege access for pipelines.

constant-time-analysis

Detects timing side-channel vulnerabilities in cryptographic code through static and dynamic analysis across multiple programming languages.

clarity-gate

Enforce epistemic quality in RAG systems with pre-ingestion verification. Ensures documents are properly qualified and structured before knowledge base entry.

hash

A Zod schema generation and validation rule set for the HASH intelligent database ecosystem to ensure type safety and data integrity.

performance-security

Optimize React performance, implement security hardening, and ensure WCAG accessibility compliance with automated patterns and checklists.

openai-whisper

Local speech-to-text transcription using the OpenAI Whisper CLI, providing private, high-accuracy audio processing without external API keys.