Orchestrate comprehensive security scanning, vulnerability remediation, and defense-in-depth hardening across your application, infrastructure, and compliance controls with automated DevSecOps workflows.

Automatically scan project dependencies across npm, pip, Go, and Rust ecosystems to identify security vulnerabilities, generate SBOMs, and create remediation plans.

Developers need to ensure their code follows security best practices but often miss critical vulnerabilities. This skill provides comprehensive checklists and patterns to identify and fix security issues before deployment.

Transform threat analysis into actionable security requirements. This skill provides templates and patterns for creating security user stories, compliance mappings, and test specifications from threat models.

This skill helps developers and security teams assess compliance readiness for GDPR, HIPAA, SOC2, and PCI-DSS with actionable implementation guidance and audit support.

Create comprehensive security documentation for sensitive applications. This skill provides patterns and guidance for building security Blue Books that document security controls, threat models, and compliance requirements.

Organizations struggle to integrate security into development workflows and meet compliance requirements. This skill provides comprehensive security auditing expertise including DevSecOps integration, vulnerability assessment, and regulatory compliance guidance.

This workflow bundle orchestrates multiple security skills to conduct full penetration tests, vulnerability assessments, and security hardening across web applications and APIs.

Store and manage sensitive credentials securely in CI/CD pipelines using Vault, AWS Secrets Manager, and platform-native secret management solutions.

This skill helps Claude and Codex find, filter, and synthesize information from the web using advanced search techniques. It provides structured approaches for research, competitive analysis, and fact-checking with verifiable sources.

Create cinematic scroll-driven web experiences with parallax storytelling and engaging animations that capture user attention from first scroll.

Creating marketing-quality screenshots for Product Hunt, social media, or documentation is time-consuming. This skill automates screenshot capture with retina resolution using Playwright.

Ensure your web applications work with screen readers like VoiceOver, NVDA, and JAWS. This skill provides testing checklists, keyboard commands, and code patterns for accessible development.

Creating proper schema.org markup is complex and errors can hurt SEO. This skill provides a structured approach to design valid JSON-LD that qualifies for Google rich results while avoiding common mistakes.

Security professionals need comprehensive guidance on using scanning tools effectively and legally. This skill provides structured documentation for network discovery, vulnerability assessment, and compliance validation using industry-standard tools.

Developers building Scala applications need expert guidance on functional programming patterns, distributed system architecture, and performance optimization. This skill provides enterprise-grade Scala development assistance for Akka, Spark, ZIO, and reactive architectures.

Manual SAST setup is complex and time-consuming. This skill provides ready-to-use configurations for Semgrep, SonarQube, and CodeQL to integrate security scanning into your CI/CD pipeline.

Salesforce admins and sales teams need efficient CRM automation without manual clicks. This skill enables Claude and Codex to execute leads, contacts, accounts, opportunities, and SOQL queries through Rube MCP.

Salesforce developers need reliable patterns for building scalable CRM solutions. This skill provides proven architectures for Lightning Web Components, bulkified Apex triggers, and async processing with Queueable Apex.

Create professional cold emails, follow-ups, and proposals in minutes instead of hours. This skill helps sales teams craft personalized outreach that converts.