semgrep-rule-creator
Creates custom Semgrep rules for detecting security vulnerabilities, bug patterns, and code patterns. Use when writing Semgrep rules or building custom static analysis detections.
适用于安全审计、认证流程、漏洞检测和合规检查的安全技能,服务 AI 辅助开发场景。
这个技能目录把可安装的 AI Agent 技能集中在一起,方便你按搜索、分类、主题和官方来源快速筛选,并直接安装到 Claude Code、Cursor、Windsurf 等环境。
Creates custom Semgrep rules for detecting security vulnerabilities, bug patterns, and code patterns. Use when writing Semgrep rules or building custom static analysis detections.
Creates custom Semgrep rules for detecting security vulnerabilities, bug patterns, and code patterns. Use when writing Semgrep rules or building custom static analysis detections.
Perform code review on staged changes or a pull request. Checks for bugs, security issues, performance problems, and best practices. Use when user says review code, check my code, review PR, or is this code okay.
TMDB (The Movie Database) API integration for React Native TV streaming apps. Use when users need help with movie/TV show data, poster images, search functionality, trending content, video trailers from TMDB, API authentication, rate limiting, or TypeScript types for TMDB responses.
Analyzes smart contract codebases to identify state-changing entry points for security auditing. Detects externally callable functions that modify state, categorizes them by access level (public, admin, role-restricted, contract-only), and generates structured audit reports. Excludes view/pure/read-only functions. Use when auditing smart contracts (Solidity, Vyper, Solana/Rust, Move, TON, CosmWasm) or when asked to find entry points, audit flows, external functions, access control patterns, or privileged operations.
Security review checklist for code and infrastructure
Activate Code Reviewer mode for code review and quality assurance. Use when reviewing code for bugs, security issues, or optimization opportunities.
Token-based authentication for TanStack Client (SPA) apps including login/logout, protected routes, auth context, token storage, and route guards. SHARED skill for both TanStack Start (client-only mode) and TanStack Router.
Manage 1Password secrets. Use when user wants to list, get, or read passwords, OTP codes, API keys, or other secrets from 1Password.
GitHub API 是一种用于管理 GitHub 资源的 REST API
Use when implementing or debugging mobile/native network requests, API calls, or data fetching. Covers fetch API, auth/session flows, error handling, caching strategies, and offline support. For GraphQL use graphql-frontend; for existing frontend REST code follow the repos Axios service layer.
Security auditing and hardening for OpenClaw and system infrastructure.