Organizations need consistent controls across the data lifecycle. This skill structures classification, risk assessment, MLPS planning, safeguards, audits, and response deliverables.

Complex data initiatives require coordinated legal, security, privacy, policy, standards, and sector review. This skill organizes those perspectives into evidence-based assessments and remediation plans.

Cloudflare One deployments span identity, traffic, devices, private networks, and data controls. This skill structures design, configuration, troubleshooting, validation, and staged rollout decisions.

Firestore Rules can expose private data when access and validation logic are incomplete. This skill helps create structured rules with least-privilege access, schema checks, and security test scenarios.

Browser login automation can expose credentials when agents handle them directly. This skill provides a consent-based Bitwarden Agent Access workflow with domain checks, sanitized status, and explicit trust boundaries.

Challenge authors need to reduce shallow LLM pattern matching without making fair challenges frustrating. This skill reproduces the intended solve, selects a small resistance change, and verifies the result end to end.

Security reviews can miss trust boundaries and unsafe data flows. This skill supplies threat-modeling prompts, OWASP patterns, and practical review checklists.

Skill authors need reliable checks for package safety, triggering, behavior, and release readiness. Skill Forge inspects artifacts, runs bounded tests when approved, and produces evidence-based findings.

Security reviews require consistent scope, evidence, and remediation guidance across many tools. This skill provides practical workflows for authorized assessment, monitoring, hardening, and reporting.

Fraud teams need practical methods to identify abuse, test controls, and monitor drift. This skill guides risk analysis, rules, models, backtesting, and real-time system design.

云服务器设置经常失败，是因为 SSH、防火墙、DNS、Nginx 和 TLS 步骤的顺序不正确。此技能会引导 Claude、Codex 或 Claude Code 完成经过验证、感知发行版差异的托管与加固工作流。

如果云访问配置过于宽泛，自托管的 OpenClaw 可能会暴露强大的控制平面。此技能指导以私有优先的 Linux 部署，包括强化主机设置、环回绑定、SSH 隧道、Podman、令牌认证、配对和沙箱默认设置。

Manual image review is slow and inconsistent. This skill compresses image batches, submits them to an MCP moderation service, and summarizes pass, blocked, and failed results.

智能合约团队在部署协议变更前需要可重复的测试。此技能提供实用的 Hardhat 和 Foundry 模式，用于单元测试、分叉、模糊测试、gas 检查、覆盖率和验证。

安全团队需要一种可重复的方法，在设计交付前识别威胁。此技能会引导 Claude、Codex 和 Claude Code 完成 STRIDE 类别分析、风险评分和缓解措施文档编写。

威胁模型通常止步于风险，而没有明确的实施工作。此技能会将威胁、合规需求和业务背景转换为可测试的安全需求。

CI/CD 管道经常通过硬编码值、日志或薄弱的访问控制暴露凭据。此技能帮助 Claude、Codex 和 Claude Code 设计更安全的密钥存储、检索、轮换和扫描工作流。

安全团队需要在不同工具和代码仓库中实现可重复的 SAST 配置。此技能会指导 Claude、Codex 和 Claude Code 完成设置、调优以及 CI/CD 集成。

支付系统必须保护持卡人数据并减少合规范围。此技能帮助 Claude、Codex 和 Claude Code 结合实用实施指导来应用 PCI DSS 控制措施。

服务团队需要在服务网格和 Kubernetes 集群中采用一致的 mTLS 模式。此技能提供实用模板、轮换指导和故障排查步骤，用于保障服务通信安全。