Leaked credentials can remain accessible in repository history after deletion. This guide explains scanning workflows, credential rotation, and preventive hooks, but includes no executable scanner.

AI-generated prototypes can lack secret management, monitoring, and recovery plans. This guide helps an AI agent organize hardening work for single-instance web applications.

Autonomous agents need spending limits and clear approval rules before handling funds. This public guide outlines wallet controls for planning, but does not include implementation files.

Belgian SMEs need consistent security documentation for audits and customer reviews. This guide helps an AI assistant draft ISMS scope, risk assessments, applicability statements, and policies.

FastAPI repositories can contain exposed credentials, unsafe SQL queries, and unprotected webhooks. This guide organizes an agent-assisted review of these risks before deployment.

Social media drafts can contain sensitive terms and platform-specific publication risks. This skill guides SocialDataX text checks and presents available risk signals with revision suggestions.

Large files and credentials are difficult to exchange through chat without exposing their contents. This skill guides SEAL transfers through inboxes, restricted files, and recipient-addressed links.

Security scan results need source review before teams can trust findings or apply fixes. This skill guides Frame scans, evidence-based triage, patch review, and verification.

Reviewing changes across security, secrets, dependencies, and lint tools requires coordinating several checks. OpenQodex combines relevant scanners and a separate reviewer into one report.

Application security teams need reproducible testing with clear scope, costs, and evidence. This skill guides Strix setup, authorized scans, and interpretation of validated findings.

Web application reviews can miss vulnerabilities behind login and across tenant boundaries. This skill guides authorized Strix testing, evidence review, and repeat testing after fixes.

セキュリティレビューでは、一般的な Web アプリケーションのリスクを見落とすことがあります。このスキルは Claude、Codex、Claude Code に、構造化された OWASP チェック、スキャナーワークフロー、修復ガイダンスを提供します。

SharePoint の権限レビューは機密性の高いアクセス経路を明らかにしますが、一貫して収集するのが難しい場合があります。このスキルは、読みやすいレポートを生成するローカル監査をガイドします。

Multi-account browser setups can leak identity through shared storage, mismatched network signals, or unstable fingerprints. This skill provides repeatable checks for authorized profiles, QA fixtures, and anti-fraud testing.

Browser tests can fail when fingerprints, sessions, and regional signals are inconsistent. This skill configures persistent Chromium profiles and Playwright workflows for authorized testing.

Security assessments can miss categories or confuse incomplete coverage with a clean result. This skill guides Strix testing and evidence-based reporting against OWASP Top 10:2025.

セキュリティレビューでは、一貫したチェックリストや再利用可能なワークフローが不足しがちです。このスキルは、Claude、Codex、Claude Code 向けに、セキュリティレビューのひな形、参照ガイダンス、シンプルなレポート作成スクリプトを提供します。

セキュリティチームには、プロジェクト全体で一貫したレビューワークフローが必要です。このスキルは、反復可能なチェックのためのSecOps CLIの雛形とリファレンスガイドを提供します。

医療機器チームには、設計、規制対応、市販後業務にわたって一貫したリスクマネジメントのエビデンスが必要です。このスキルは、ISO 14971 に基づく計画、分析、管理策、ファイル保守を支援します。

ISMS 監査には、明確な範囲、証拠、リスクベースの優先順位が必要です。このスキルは、ISO 27001 監査計画、統制テスト、準備作業を支援します。