AI Agent Skills

Work with GitLab attestations for software supply chain security including artifact verification and provenance. Use when verifying software artifacts, managing attestat…

Create new Fortify application(s) in Fortify on Demand (FoD) or Application Security Center (SSC).

Full agent verification suite. Runs security, patterns, quality, and language-specific checks. Use when asked to "verify agent", "verify my agent", "audit agent", or "fu…

Apple firmware: inspect and reverse-engineer IPSWs, kernelcaches, dyld shared caches, private headers, entitlements, Mach-O binaries, KEXTs, and security internals with…

API security best practices and common vulnerability prevention. Enforces security checks for authentication, input validation, SQL injection, XSS, and OWASP Top 10 vuln…

A Metabase AI-governance coach, covering the *controls and rollout* side of AI: who may use Metabot, what it can see, what it costs, where the model runs, and the audit…

A Metabase AI-readiness coach, covering the *data groundwork* that makes AI answers trustworthy: modeling with Transforms, table and field metadata, the Glossary, saved…

Use when reviewing Roblox or Luau code for security, performance, monetization, data persistence, or architecture risks.

Implement a GitHub issue end-to-end when Vigilante dispatches work for a Go repository with idiomatic tooling and security guidance.

Implement a GitHub issue end-to-end when Vigilante dispatches work for a Kubernetes-focused repository with manifest hardening and workload security guidance.

Implement a GitHub issue end-to-end when Vigilante dispatches work for a PHP repository with Composer, static analysis, and security guidance.

Implement a GitHub issue end-to-end when Vigilante dispatches work for a Ruby repository with Bundler, test, lint, and security guidance.

Validate the Python Template repository or a project generated from it. Use before committing, publishing, deploying, or reviewing a stack to check catalog compilation,…

Decide what the system should become before /spec commits an implementation plan. Runs inline in the active coding-agent session, grounds every claim in current reposito…

Reviews completed frontend implementation for governing-source compliance, scope economy, repository quality, and security, and applies user-approved React corrections.

Aggregates audit findings mapped to framework controls, classifies each control, identifies blind spots, prioritizes gaps by severity, and produces a complete gap report…