007
無料Security audit, hardening, threat modeling (STRIDE/PASTA), Red/Blue Team, OWASP checks, code review, incident response, and infrastructure security for any project.
日本語の概要は準備中です。原文の説明を表示しています。
aibot88/sec_skill_store42026年5月27日 更新
無料GitHub で公開
ag-sentinel
Maquina autonoma de seguranca, load testing e LGPD. 6 dimensoes, modo hybrid, convergencia SSS >= 80. Security Certificate + Load Report + Fix PR.
含まれるファイル（2）
- SKILL.md2.8 KB
- source.json645 B
SKILL.md（原文）
インストールする前に、エージェントに与えられる指示の中身を確認できます。
SENTINEL — Maquina Autonoma de Seguranca
Invocacao
/sentinel https://app.example.com # Producao (DEFENSIVE auto)
/sentinel ~/Claude/GitHub/raiz-platform # Local (OFFENSIVE auto)
/sentinel https://preview-xyz.vercel.app # Staging (HYBRID auto)
/sentinel ~/Claude/GitHub/fgts-platform --threshold 90
/sentinel https://app.example.com --audit-only
/sentinel --resume
/sentinel ~/Claude/GitHub/raiz-platform --mode defensive # Override modo
O que faz
Executa security + performance + compliance AUTONOMO em 5 fases:
- RECON — Mapeia superficie de ataque (endpoints, auth, headers, deps)
- SIEGE — Testa 6 dimensoes:
- S1-SHIELD: Headers, CORS, cookies, HTTPS
- S2-GATES: Auth bypass, session, RBAC
- S3-WALLS: Injection (SQL, XSS, CMD), validacao
- S4-VAULT: Secrets, .env, git history, deps
- S5-STRESS: Load test k6 (5-200 VUs)
- S6-GUARD: LGPD, PII, audit trail
- ARMOR — Hardening + fix de vulnerabilidades
- CONVERGE — Calcula SSS, loop ate >= threshold
- CERTIFY — Security Certificate, Load Report, Fix PR, issues
Modo Hybrid
| Ambiente | Modo | Payloads | Load Test |
|---|---|---|---|
| Producao | DEFENSIVE | Nenhum | Smoke (5 VUs) |
| Staging | HYBRID | Leves | Load (50 VUs) |
| Local | OFFENSIVE | Completos | Full (200 VUs) |
Execucao
Agent({
subagent_type: "ag-sentinel",
prompt: "{input do usuario}",
run_in_background: true,
mode: "auto"
})
Ferramentas Externas (opcionais)
| Ferramenta | Proposito | Install |
|---|---|---|
| k6 | Load testing | brew install k6 |
| trufflehog | Secrets em git | brew install trufflehog |
| semgrep | SAST analysis | pip3 install semgrep |
Se ausentes: degraded mode (grep manual) ou SKIP da dimensao.
Artefatos Produzidos
| Artefato | Arquivo |
|---|---|
| Security Certificate | docs/sentinel-certificate-YYYY-MM-DD.md |
| Load Test Report | docs/sentinel-load-report-YYYY-MM-DD.md |
| Fix PR | GitHub PR com hardening |
| Baselines | sentinel-baselines.json |
| State (recovery) | sentinel-state.json |
| KB Update | ~/.claude/shared/sentinel-kb/ |
| Issues backlog | GitHub Issues label sentinel-finding |
レビュー
まだレビューはありません。使ってみた感想をお寄せください。
同じリポジトリのスキル
概要と使いどころ
Guides the creation of agile user stories and Gherkin feature files. Use when the user wants to create a user story, write acceptance criteria, define Gherkin scenarios, or author BDD feature files. This should trigger for requests such as Create a user story; Write a user story; I need to write a user story. Part of cursor-rules-java project
日本語の概要は準備中です。原文の説明を表示しています。
aibot88/sec_skill_store42026年5月27日 更新
Facilitates conversational discovery to create Architectural Decision Records (ADRs) for non-functional requirements using the ISO/IEC 25010:2023 quality model. Use when the user wants to document quality attributes, NFR decisions, security/performance/scalability architecture, or design systems with measurable quality criteria. This should trigger for requests such as Create ADR for Non-functional requirements; Document Non-functional requirements; Capture Non-functional requirements; Generate Non-functional requirements in an ADR. Part of cursor-rules-java project
日本語の概要は準備中です。原文の説明を表示しています。
aibot88/sec_skill_store42026年5月27日 更新
Run a health check on an existing project: dependency audit, security scan, test runner detection, CI/CD evaluation, and missing configuration analysis. Maps the three execution gates (pre/in/post) from /10x-bootstrapper to an assessment framework for existing codebases. Reads optional context/foundation/stack-assessment.md from /10x-stack-assess to focus checks on identified gaps. Writes context/foundation/health-check.md with findings, prioritized fixes, and an agent-readiness verdict. Use when the user has an existing project and wants to verify its health before working with an agent. Trigger phrases: "health check", "check my project", "audit my project", "is my project healthy", "sprawdź projekt", "audyt projektu", "health-check", "project health". Use AFTER /10x-stack-assess (brownfield chain), BEFORE agent onboarding (m1-l4).
日本語の概要は準備中です。原文の説明を表示しています。
aibot88/sec_skill_store42026年5月27日 更新
10x-team
無料You MUST use this when building projects end-to-end. Orchestrates all 12 team roles — automatically switches between CTO, architect, PM, engineers, SRE, security, DBA, QA, and EM based on the current phase of work. Starts with brainstorming before any implementation.
日本語の概要は準備中です。原文の説明を表示しています。
aibot88/sec_skill_store42026年5月27日 更新
Use when you need to add or configure Maven plugins in your pom.xml — including quality tools (enforcer, surefire, failsafe, jacoco, pitest, spotbugs, pmd), security scanning (OWASP), code formatting (Spotless), version management, container image build (Jib), build information tracking, and benchmarking (JMH) — through a consultative, modular step-by-step approach that only adds what you actually need. This should trigger for requests such as Add Maven plugins in pom.xml; Improve Maven plugins in pom.xml. Part of cursor-rules-java project
日本語の概要は準備中です。原文の説明を表示しています。
aibot88/sec_skill_store42026年5月27日 更新