batch-security-migration
Use when applying the same security fix across many files or repos at once — large-scale vulnerability remediation. Provides 7 copy-paste /batch recipes (XSS, HTTPS, SQLi, input validation, log PII, secret rotation, CVE patches) each with a safety tier and false-positive trap, plus scan_diff.py to prove the migration introduced no new HIGH/CRITICAL findings.
chrome-devtools-optimizer
Use this skill to reduce token consumption by 70-80% when using the Chrome DevTools MCP. Applies a snapshot-first strategy (text over images) with decision trees and pattern guides for navigation, forms, debugging, and visual checks, plus optional Gemini Flash vision processing for the cases that genuinely need an image.
cybersecurity-policy-generator
Generate enterprise cybersecurity policies from 51 professional templates (SANS, CIS Controls) for ISO 27001, SOC 2, NIST, and CIS Controls compliance in Markdown, Word, HTML, and PDF formats
docx-smart-extractor
Use this skill to extract and analyze large Word documents (1MB-50MB+) with minimal token usage. Losslessly extracts text, tables, formatting, and structure while achieving 10-50x token reduction through local extraction, semantic chunking by headings, and intelligent caching. Use when a .docx is too large for the context window (policies, contracts, technical reports).
gdpr-auditor
This skill should be used when analyzing codebases, applications, databases, or systems for GDPR (General Data Protection Regulation) compliance. Use this skill when users need to audit data protection practices, identify potential compliance issues, assess data handling procedures, review privacy policies, or ensure adherence to EU data protection requirements.
incident-response-playbook-creator
Use this skill to generate comprehensive incident response playbooks from authoritative templates (NIST SP 800-61r3, CISA, NIST SP 800-161r1). Creates customized IR documentation for 11 incident scenarios — ransomware, data breach, phishing, supply-chain, cloud, API, container/K8s, IoT/OT, insider threat, AI/ML, and DDoS — with GDPR Article 33/34 and HIPAA breach-notification guidance.
pdf-smart-extractor
Use this skill to extract and analyze large PDFs (3MB-10MB+) with minimal token usage. Preserves ~100% of content while achieving 12-103x token reduction through local extraction, semantic chunking, and intelligent caching. Use when a PDF is too large for the context window, or for technical/compliance documentation (NIST, ISO, AWS) and research papers.
plugin-security-checker
Use this skill to scan a Claude Code plugin (or any npm/PyPI package tree) for security issues before installation. Detects dangerous functions, code obfuscation, hardcoded credentials, schema problems, and known 2024-2026 supply-chain attack IOCs (Shai-Hulud, Nx s1ngularity, chalk/debug clipper, Axios RAT, litellm/.pth), mapped to MITRE ATT&CK/ATLAS, CVE, and OWASP.
security-hooks
Use this skill to install ready-made Claude Code hooks for security — a ConfigChange compliance audit trail (logs every settings/skill change), plus PreToolUse guards and optional HTTP notifications for security-relevant events. Covers command, http, and prompt hook types.
security-memory-templates
Use this skill to seed Claude Code's auto-memory with pre-built security/compliance patterns — known-safe code patterns, false-positive suppressions for the plugin-security-checker, org compliance rules, and supply-chain best practices. Helps Claude apply consistent security judgment across sessions.
security-report-builder
Use this skill to build professional security reports (HTML, PDF, DOCX) from plugin-security-checker scan results. Reduces false positives through context-aware analysis and maps findings to MITRE ATT&CK/ATLAS, OWASP, and CWE. Use when turning raw scan output into executive-ready, technical, or compliance reports.
xlsx-smart-extractor
Use this skill to extract and analyze large Excel workbooks (1MB-50MB+) with minimal token usage. Losslessly extracts formulas, cell formatting, and complex tables while achieving 20-100x token reduction through local extraction, semantic chunking, and intelligent caching. Use when an .xlsx is too large for the context window (compliance matrices, financial models, audit logs).