audit
Skill4 starsChanged 7 months agoMITView on GitHub
Run a security audit pipeline on the codebase. Chains security scanning, dependency audit, and secret detection.
We split this skill into the rules it gives an agent
1 rule. 0 are common, 1 is distinctive, and 0 are very specific to this project.
0
Common
Most of the 166 edited versions we read keep these.
1
Distinctive
This author's own choices. Worth a look.
0
Very specific
Tied to their project's names, files or tools. Probably skip.
- Common
- Distinctive
- Very specific
- Distinctive: line 10
Run a comprehensive security audit right now on:
“Common” is measured: kept by at least 6 in 10 of the 166 edited versions of this file we could read. “Very specific” is our guess from the words: it names a file, a command, a setting or the project itself.
Files
Run a comprehensive security audit right now on:
Target: $ARGUMENTS (path or defaults to full codebase)
Pipeline:
- SAST Scan — Search for: SQL injection, XSS, command injection, path traversal, insecure deserialization, SSRF patterns
- Dependency Audit — Run
npm audit/pip audit/cargo audit, categorize by severity - Secret Detection — Grep for hardcoded credentials, API keys, tokens, private keys
- Config Review — Check for missing security headers, CSRF, weak auth, exposed debug endpoints
Bash restricted to: npm audit, pip audit, cargo audit, read-only git commands
Output a consolidated report:
| Severity | Category | File:Line | Issue | Remediation |
End with executive summary and risk score (critical/high/medium/low overall).
Other versions189 projects use a version of this.
Word for word · 0
None found.
Edited · 0
None found.
Wrote their own version · 189
- openai/plugins★ 7.4ksame name
- ccch1mneyyy/dsh-TUI★ 5.7ksame name
- yournextstore/yournextstore★ 5.5ksame name
- macro-inc/macro★ 4.9ksame name
- gadievron/raptor★ 3.9ksame name
- alchemy-run/alchemy★ 1.7ksame name
- alchemy-run/alchemy-effect★ 1.7ksame name
- jsmastery-pro/skills★ 1.4ksame name
- nateherkai/AIS-OS★ 1.4ksame name
- suboss87/FDEOps★ 940same name
179 more not listed
How matches are found. Word for word: the exact same text. Edited: shares passages with this file (“99% same” means 99% of its five-word phrases also appear here; 10% or more counts). Their own version: similar meaning, or, weakest, the same name. We can’t tell which project had it first. Projects are counted among the 200 most-starred candidates, and mentions are links to the repository we found, up to 50 per site, so both counts are a floor.
Used alongsideProjects with it also use delight, overdrive and 10 more.
Other files people use alongside this one.
Files found in the same public projects as a version of this one, more often than they turn up anywhere else. Each project counts once, large collections count for less, and this file's own repository is left out.
HK-hubSkilldelight
Add moments of joy, personality, and unexpected touches that make interfaces memorable and enjoyable to use. Elevates functional to delightful. Use when the user asks to add polish, personality, animations, micro-interactions, delight, or make an interface feel fun or memorable.
Also in 30 projects that use this
HK-hubSkilloverdrive
Pushes interfaces past conventional limits with technically ambitious implementations — shaders, spring physics, scroll-driven reveals, 60fps animations. Use when the user wants to wow, impress, go all-out, or make something that feels extraordinary.
Also in 23 projects that use this
zwy123zwySkillnormalize
将用户随意输入的提示词规范化为结构清晰、便于大模型执行的标准化提示词。适用于需要整理、统一提示词格式时调用。
Also in 18 projects that use this
owshq-mecSkilllayout
Improve layout, spacing, and visual rhythm. Fixes monotonous grids, inconsistent spacing, and weak visual hierarchy. Use when the user mentions layout feeling off, spacing issues, visual hierarchy, crowded UI, alignment problems, or wanting better composition.
Also in 8 projects that use this
ww-w-aiSkillpm-discovery
PM Agent Team - Automated product discovery, strategy, and PRD generation. Runs PM analysis workflow to produce comprehensive PRD before PDCA Plan phase.
Also in 3 projects that use this
- +7 more from HK-hub
In this repository31 other files it gives its agents.
- .claude/CLAUDE.mdCLAUDE.md
- CLAUDE.mdCLAUDE.md
- global/CLAUDE.mdCLAUDE.md
- case-studySkill
- ci-commentSkill
- cold-outreachSkill
- daily-briefingSkill
- dep-checkSkill
- github-readmeSkill
- hub-statusSkill
- invoice-genSkill
- kronus-helpSkill
- kronusSkill
- kronus-troubleshootSkill
- lead-qualifySkill
- linkedin-postSkill
- manifest-validateSkill
- meeting-notesSkill
- planSkill
- profile-optimizeSkill
- project-summarySkill
- quick-reviewSkill
- reviewSkill
- secret-scanSkill
- seo-articleSkill
- standup-updateSkill
- telegram-projectSkill
- test-genSkill
- test-runSkill
- testSkill
- upwork-proposalSkill
Does it work?
Reviews from people and from AI agents that ran it: what they used it for, and whether it worked.
Reviews can't be read right now.
Your trail
Files you open will collect here, so you can find them again.
Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.
Now do this for your own.
Bring your CLAUDE.md, AGENTS.md or skills. agentleFS shows which of your rules are common, which are yours and which only fit one project, and keeps one version your agents read everywhere.

