Run security scans with the ASH (Automated Security Helper) MCP server. Use this skill whenever the user asks to scan for vulnerabilities, run a security check, find CVEs, audit dependencies, check for secrets, run SAST or SCA, scan IaC (Terraform/CloudFormation/Kubernetes), check for hardcoded credentials, or mentions ASH, Bandit, Semgrep, Checkov, Grype, Syft, or detect-secrets. Also trigger when the user wants to find security issues, harden a codebase, or asks "is my code secure". Do NOT trigger for code review without security context, performance audits, or test writing.
7108d agoReviewMountCreate a free account to mount
Clean up the ~/.claude environment: redundant, stale or context-expensive skills, memory, hooks, permissions, MCP servers and caches, one item at a time with an undo path. Use for \"bersihin config\", \"~/.claude berantakan\", \"kebanyakan skill\", \"sesi lambat mulai\", \"context cepat penuh\", \"audit setup gue\".
2216d agoReviewMountCreate a free account to mount
Working on the Data SL Consulting toolkit (datasl CLI and SDKs, agent skill, plugin manifests) or writing code that calls the Data SL Consulting public API or MCP server
Set up, verify, and troubleshoot Katalon True Platform/TestOps MCP connectivity for any AI coding agent. Use when you need to install or configure the Katalon MCP server, connect to a Katalon platform account, verify available Katalon MCP tools, diagnose missing authentication or repository access, confirm project/repository discovery, or explain what platform operations are and are not exposed through the MCP. One-time cross-cutting setup, run once by whoever wires the agent to the platform, before any lifecycle skill can work.
105mo agoReviewMountCreate a free account to mount
Security for LLM and agent systems: direct and indirect prompt injection, the OWASP Top 10 for LLM Applications, MITRE ATLAS technique mapping, excessive agency and tool-scope containment, egress allowlisting to stop data exfiltration, human confirmation for irreversible actions, and treating third-party skills and MCP servers as untrusted code. Use when an agent is given tools or credentials, when retrieved documents or repository files could carry injected instructions, or when reviewing an AI feature before it reaches production.
MCP (Model Context Protocol) usage for agent-framework MCP examples. When to use MCP, check tool schema, server setup, and hooks for audit/gate. Apply when running MCP workflows or editing MCP examples.
Use this rule to learn how external tools are integrated via MCP, find the MCP host code and server configuration file, identify built-in and external (E5 embedding) servers, and trace how Gemini function calls are executed as MCP tool requests.
1719mo agoReviewMountCreate a free account to mount
How to contribute to the modelcontextprotocol org (go-sdk, python-sdk, typescript-sdk, servers, inspector, the spec repo, extensions). Use when finding an MCP issue to work on, evaluating or reproducing an MCP SDK bug, or opening a PR/issue to a modelcontextprotocol repo.
there, or building the document fails. `POST /_stcore/agent/mcp` serves the same protocol as an MCPserver; its `interact` and `get_data` tool descriptions, also in `protocol.py`, are hand-written
Steady4 mentions in 2 weeks
No other project uses it yet
46k11d agoReviewMountCreate a free account to mount
explicitly requested by the user.
=== boost rules ===
## Laravel Boost
- Laravel Boost is an MCPserver that comes with powerful tools designed specifically for this application. Use them.
## Artisan
No other project uses it yet
17k6mo agoReviewMountCreate a free account to mount
Argent iOS Simulator and Android Emulator Agent — always-on guidance for methodology and tools for working with, interacting, testing and profiling mobile app work
No other project uses it yet
8.7k5mo agoReviewMountCreate a free account to mount