Search Results

Source: ~/.claude/skills/sentry-iterate-pr/SKILL.md name: iterate-pr description: Iterate on a PR until CI passes. Use when you need to fix CI failures, address review feedback, or continuously push fixes until all checks are green. Automates the feedback-fix...

Source: ~/.claude/skills/sentry-security-review/SKILL.md name: security-review description: Security code review for vulnerabilities. Use when asked to "security review", "find vulnerabilities", "check for security issues", "audit security", "OWASP review", o...

Source: ~/.claude/skills/sentry-skill-scanner/SKILL.md name: skill-scanner description: Scan agent skills for security issues. Use when asked to "scan a skill", "audit a skill", "review skill security", "check skill for injection", "validate SKILL.md", or ass...

Source: ~/.claude/skills/tob-ask-questions-if-underspecified/skills/ask-questions-if-underspecified/SKILL.md name: ask-questions-if-underspecified description: Clarify requirements before implementing. Use when serious doubts arise. Ask Questions If Underspec...

Source: ~/.claude/skills/tob-audit-context-building/skills/audit-context-building/SKILL.md name: audit-context-building description: Enables ultra-granular, line-by-line code analysis to build deep architectural context before vulnerability or bug finding. De...

Source: ~/.claude/skills/tob-devcontainer-setup/skills/devcontainer-setup/SKILL.md name: devcontainer-setup description: Creates devcontainers with Claude Code, language-specific tooling (Python/Node/Rust/Go), and persistent volumes. Use when adding devcontai...

Source: ~/.claude/skills/tob-differential-review/skills/differential-review/SKILL.md name: differential-review description: > Performs security-focused differential review of code changes (PRs, commits, diffs). Adapts analysis depth to codebase size, uses git...

Source: ~/.claude/skills/tob-fix-review/skills/fix-review/SKILL.md name: fix-review description: > Verifies that git commits address security audit findings without introducing bugs. This skill should be used when the user asks to "verify these commits fix th...

Source: ~/.claude/skills/tob-insecure-defaults/skills/insecure-defaults/SKILL.md name: insecure-defaults description: "Detects fail-open insecure defaults (hardcoded secrets, weak auth, permissive security) that allow apps to run insecurely in production. Use...

Source: ~/.claude/skills/tob-property-based-testing/skills/property-based-testing/SKILL.md name: property-based-testing description: Provides guidance for property-based testing across multiple languages and smart contracts. Use when writing tests, reviewing ...

Source: ~/.claude/skills/tob-second-opinion/skills/second-opinion/SKILL.md name: second-opinion description: "Runs external LLM code reviews (OpenAI Codex or Google Gemini CLI) on uncommitted changes, branch diffs, or specific commits. Use when the user asks ...

Source: ~/.claude/skills/tob-sharp-edges/skills/sharp-edges/SKILL.md name: sharp-edges description: "Identifies error-prone APIs, dangerous configurations, and footgun designs that enable security mistakes. Use when reviewing API designs, configuration schema...

Source: ~/.claude/skills/tob-static-analysis/skills/codeql/SKILL.md name: codeql description: >- Runs CodeQL static analysis for security vulnerability detection using interprocedural data flow and taint tracking. Applicable when finding vulnerabilities, runn...

Source: ~/.claude/skills/tob-static-analysis/skills/sarif-parsing/SKILL.md name: sarif-parsing description: Parse, analyze, and process SARIF (Static Analysis Results Interchange Format) files. Use when reading security scan results, aggregating findings from...

Source: ~/.claude/skills/tob-static-analysis/skills/semgrep/SKILL.md name: semgrep description: Run Semgrep static analysis scan on a codebase using parallel subagents. Automatically detects and uses Semgrep Pro for cross-file analysis when available. Use whe...

Source: ~/.claude/skills/tob-testing-handbook-skills/skills/address-sanitizer/SKILL.md name: address-sanitizer type: technique description: > AddressSanitizer detects memory errors during fuzzing. Use when fuzzing C/C++ code to find buffer overflows and use-a...

Source: ~/.claude/skills/tob-testing-handbook-skills/skills/aflpp/SKILL.md name: aflpp type: fuzzer description: > AFL++ is a fork of AFL with better fuzzing performance and advanced features. Use for multi-core fuzzing of C/C++ projects. AFL++ AFL++ is a for...

Source: ~/.claude/skills/tob-testing-handbook-skills/skills/atheris/SKILL.md name: atheris type: fuzzer description: > Atheris is a coverage-guided Python fuzzer based on libFuzzer. Use for fuzzing pure Python code and Python C extensions. Atheris Atheris is ...