Security

Development: GitHub CLI authentication for GHCR access and runner registration.Authenticates with GitHub and logs into the container registry. Run fromrepository root with 'just gh-login'. Use when developers need to pushimages or set up GitHub runners.

Use when developing WordPress plugins: architecture and hooks, activation/deactivation/uninstall, admin UI and Settings API, data storage, cron/tasks, security (nonces/capabilities/sanitization/escaping), and release packaging.

Comprehensive quality analysis for WoW addons. Combines security, complexity, deprecation, and dead code analysis into a single audit workflow. Triggers: audit, quality, analysis, review, check, scan.

Implement hooks for permission control and security in custom agents. Use when adding security controls, blocking dangerous operations, implementing audit trails, or designing permission governance.

Comprehensive security audit workflow including dependency scanning, unsafe code detection, and secret management. Use when scanning for vulnerabilities or before production deployment.

Real-time bidirectional communication with security focus on CSWSH prevention, authentication, and message validation

Dockerfile best practices, Kubernetes manifest validation, container security

Expert skill for implementing text-to-speech with Kokoro TTS. Covers voice synthesis, audio generation, performance optimization, and secure handling of generated audio for JARVIS voice assistant.

Immutable audit logging patterns for compliance and security. Covers event design, storage strategies, retention policies, and audit trail analysis.

The "-ilities" framework for non-functional requirements. Use when defining NFRs, evaluating architecture trade-offs, or ensuring quality attributes are addressed in system design. Covers scalability, reliability, availability, performance, security, maintainability, and more.

Enforces fixed version dependency installation across all package managers. Ensures reproducible builds, supply chain security, and stability.Use when: installing packages, updating dependencies, working with package.json/requirements.txt/go.mod/Cargo.toml/pom.xml/build.gradle/composer.json/Gemfile/.csproj, reviewing dependency configurations, configuring CI/CD pipelines

Operational skill hub for LLM system architecture, evaluation, deployment, and optimization (modern production standards). Links to specialized skills for prompts, RAG, agents, and safety. Integrates recent advances: PEFT/LoRA fine-tuning, hybrid RAG handoff (see dedicated skill), vLLM 24x throughput, multi-layered security (90%+ bypass for single-layer), automated drift detection (18-second response), and CI/CD-aligned evaluation.

Expert documentation generation for ingestion layers. Automatically detects connector types (REST API, Database, File, Streaming), documents authentication patterns, rate limiting strategies, and incremental load patterns. Use when documenting data source ingestion workflows.

Cross-platform desktop application framework combining Rust backend with web frontend, emphasizing security and performance

Create professional, dark-themed architecture diagrams as standalone HTML files with SVG graphics. Use when the user asks for system architecture diagrams, infrastructure diagrams, cloud architecture visualizations, security diagrams, network topology diagrams, or any technical diagram showing system components and their relationships.

Comprehensive authentication implementation guidance including JWT best practices, OAuth 2.0/OIDC flows, Passkeys/FIDO2/WebAuthn, MFA patterns, and secure session management. Use when implementing login systems, token-based auth, SSO, passwordless authentication, or reviewing authentication security.

This skill enables Claude to automatically check for HIPAA (Health Insurance Portability and Accountability Act) compliance issues in codebases, infrastructure configurations, and documentation. It leverages the hipaa-compliance-checker plugin to identify potential violations related to data privacy, security, and access controls. Use this skill when the user explicitly requests to "check HIPAA compliance", "scan for HIPAA violations", "assess HIPAA readiness", or similar phrases related to HIPAA audits and security best practices. It is useful for projects handling protected health information (PHI) and requiring adherence to HIPAA regulations.

暗号化鍵のライフサイクル管理（生成、ローテーション、失効、バックアップ）のベストプラクティスを提供するスキル。Anchors:- NIST SP 800-57 / 適用: 鍵ライフサイクル全般 / 目的: 業界標準準拠- AWS KMS Best Practices / 適用: クラウド鍵管理 / 目的: クラウド実装パターン- Continuous Delivery (Jez Humble) / 適用: 自動化設計 / 目的: ローテーション自動化Trigger:Use when implementing key generation, rotation, revocation, backup strategies, or managing cryptographic key lifecycle.encryption key, key rotation, key lifecycle, key management, cryptographic keys, HSM, KMS

Enforces minimum quality thresholds in CI including code coverage, linting, type checking, and security scanning. Provides required checks, PR rules, and automated enforcement. Use for "quality gates", "CI checks", "code quality", or "PR requirements".

ElectronデスクトップアプリケーションのUI実装パターンと設計知識。BrowserWindow管理、ネイティブUI要素、フレームレスウィンドウを提供。Anchors:• Electron API / 適用: BrowserWindow・Menu・Tray / 目的: ネイティブUI実装• Don't Make Me Think / 適用: ウィンドウレイアウト / 目的: ユーザビリティ向上• Electron Security / 適用: preload・contextIsolation / 目的: セキュアなUI実装Trigger:Use when configuring BrowserWindow, implementing custom titlebars, designing native menus, developing system tray apps, or building frameless windows.BrowserWindow, Menu, Tray, frameless window, custom titlebar, native UI