Skills that search, synthesize, analyze data, and turn research into decisions.检索、综合、分析数据，并把研究材料转成决策依据的 skill。
Guides authoring of high-quality YARA-X detection rules for malware identification. Use when writing, reviewing, or opt…
Guides authoring of high-quality YARA-X detection rules for malware identification. Use when writing, reviewing, or optimizing YARA rules. Covers naming conventions, string selection, performance optimization, migration from legacy YARA, and false positive reduction. Triggers on…
Builds and queries multi-language source code graphs for security analysis. Includes pre-analysis passes for blast radi…
Builds and queries multi-language source code graphs for security analysis. Includes pre-analysis passes for blast radius, taint propagation, privilege boundaries, and entry point enumeration. Use when analyzing call paths, mapping attack surface, finding complexity hotspots, en…
Creates custom Semgrep rules for detecting security vulnerabilities, bug patterns, and code patterns. Use when writing…
Creates custom Semgrep rules for detecting security vulnerabilities, bug patterns, and code patterns. Use when writing Semgrep rules or building custom static analysis detections.
Translates Mermaid sequenceDiagrams describing cryptographic protocols into ProVerif formal verification models (.pv fi…
Translates Mermaid sequenceDiagrams describing cryptographic protocols into ProVerif formal verification models (.pv files). Use when generating a ProVerif model, formally verifying a protocol, converting a Mermaid diagram to ProVerif, verifying protocol security properties (sec…
Identifies error-prone APIs, dangerous configurations, and footgun designs that enable security mistakes. Use when revi…
Identifies error-prone APIs, dangerous configurations, and footgun designs that enable security mistakes. Use when reviewing API designs, configuration schemas, cryptographic library ergonomics, or evaluating whether code follows 'secure by default' and 'pit of success' principl…
Compares Trailmark code graphs at two source code snapshots (git commits, tags, or directories) to surface security-rel…
Compares Trailmark code graphs at two source code snapshots (git commits, tags, or directories) to surface security-relevant structural changes. Detects new attack paths, complexity shifts, blast radius growth, taint propagation changes, and privilege boundary modifications that…
Systematically verifies suspected security bugs to eliminate false positives. Produces TRUE POSITIVE or FALSE POSITIVE…
Systematically verifies suspected security bugs to eliminate false positives. Produces TRUE POSITIVE or FALSE POSITIVE verdicts with documented evidence for each bug.
Analyzes smart contract codebases to identify state-changing entry points for security auditing. Detects externally cal…
Analyzes smart contract codebases to identify state-changing entry points for security auditing. Detects externally callable functions that modify state, categorizes them by access level (public, admin, role-restricted, contract-only), and generates structured audit reports. Exc…
Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations including Claude Code Action, Gem…
Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations including Claude Code Action, Gemini CLI, OpenAI Codex, and GitHub AI Inference. Detects attack vectors where attacker-controlled input reaches AI agents running in CI/CD pipelines, including e…
[中文] 量化交易员日常任务管理系统 - 专为股票交易员设计的每日工作流程管理工具。 包含：开盘/收盘/日终汇报模板、实时持仓监控、风控提醒、交易日志记录。 使用场景：(1) 管理每日交易任务时间表 (2) 生成汇报给上级的简报 (3)…
[中文] 量化交易员日常任务管理系统 - 专为股票交易员设计的每日工作流程管理工具。 包含：开盘/收盘/日终汇报模板、实时持仓监控、风控提醒、交易日志记录。 使用场景：(1) 管理每日交易任务时间表 (2) 生成汇报给上级的简报 (3) 监控持仓风险 (4) 记录交易日志 (5) 复盘分析 [English] Quantitative Trader Daily Task Management System - A comprehensive daily workflow management tool designed for stock trader…
Workflows that require stronger human review than this catalog entry documents.
需要比当前目录条目更严格人工复核的工作流。
Workflows that require stronger human review than this catalog entry documents.
需要比当前目录条目更严格人工复核的工作流。
Workflows that require stronger human review than this catalog entry documents.
需要比当前目录条目更严格人工复核的工作流。
Tell us your pain points and we'll go look.把你的痛点告诉我们，我们会去找。