Find the perfect skill
AI Prompt Safety Review
Security
Comprehensive analysis and improvement of AI prompts for safety, bias, security, and effectiveness. Provides detailed frameworks and educational recommendations.
OTTO - LGPD Privacy Guardian
Security
Scans code for LGPD (Brazilian Data Protection Law 13.709/18) violations: exposed personal data (CPF, RG, email, phone), logs containing PII, and tracking without consent. Use when code accesses personal data, implements analytics/tracking, or before commits that alter data collection.
Review Semgrep Findings
Security
Review and triage semgrep security scan results to identify true positive vulnerabilities. Performs deep code analysis to distinguish real vulnerabilities from false positives.
Backend Application Security
Security
Secures backend applications by addressing OWASP Top 10 vulnerabilities, implementing authentication (JWT, OAuth2) and encryption (bcrypt, TLS), and configuring vulnerability scanning tools (SAST, DAST, SCA). Helps achieve compliance with frameworks like GDPR, HIPAA, PCI-DSS, and SOC2, and includes incident response procedures.
Audit Specific MCP Skill
Security
Security audit of a specific MCP skill via npm or GitHub, detects threats and suggests actions.
CIS OpenShift 1.3.3: Service Account Private Key File
Security
Manual audit for CIS OpenShift control 1.3.3 to verify the service account private key file is configured.
Create Skill from Custom Approach
Security
Guide to save a successful custom security testing approach as a reusable skill, including steps for parameter definition, pattern extraction, and file creation.
Scan a Specific MCP Skill
Security
Security audit of a specific MCP skill by npm package name or GitHub URL using the ATR engine, producing a vulnerability report.
Export OSCAL
Security
Export NIST compliance evidence as OSCAL JSON from an ArangoDB graph. Supports NIST 800-171 and CMMC Level 2 frameworks.
Scan Specific MCP Skill
Security
Scans a specific MCP skill by npm package name or GitHub URL, runs an audit, and reports findings with severity.
Security Scanning and Hardening
Security
Coordinate multi-layer security scanning and hardening across application, infrastructure, and compliance controls.
Secrets Scanner and Rotator
Security
Detect hardcoded secrets in code, suggest proper secret management, and help rotate compromised credentials.