Topic: skills
17,247 skills in this topic.
-
product-brief
Structured product brief and PRD creation assistant. Use when the user needs to write a product brief, PRD, feature spec, or any document that defines what to build and why. Triggers include "product brief", "PRD", "spec", "feature doc", "write a brief", "define this feature", or when scoping work for engineering.
jeremylongshore/claude-code-plugins-plus-skills 1,803
-
lean-startup
Design MVPs, validated learning experiments, and pivot-or-persevere decisions using Build-Measure-Learn. Use when the user mentions "MVP scope", "validated learning", "pivot or persevere", "vanity metrics", or "test assumptions". Covers innovation accounting and actionable metrics. For 5-day prototype testing, see design-sprint. For customer motivation analysis, see jobs-to-be-done. Trigger with 'lean', 'startup'.
jeremylongshore/claude-code-plugins-plus-skills 1,803
-
meeting-prep
Meeting preparation assistant for Product Managers. Use when the user needs to prepare for a meeting, create talking points, anticipate questions, or structure a discussion. Triggers include "prepare for meeting", "meeting prep", "talking points", "get ready for", "1:1 prep", or when preparing for any scheduled conversation.
jeremylongshore/claude-code-plugins-plus-skills 1,803
-
validating-pci-dss-compliance
Validate PCI-DSS compliance for payment card data security. Use when auditing payment systems. Trigger with 'validate PCI-DSS', 'check payment security', or 'audit card data'.
jeremylongshore/claude-code-plugins-plus-skills 1,803
-
managing-ssltls-certificates
Execute this skill enables AI assistant to manage and monitor ssl/tls certificates using the ssl-certificate-manager plugin. it is activated when the user requests actions related to ssl certificates, such as checking certificate expiry, renewing certificates, ... Use when appropriate context detected. Trigger with relevant phrases based on skill purpose.
jeremylongshore/claude-code-plugins-plus-skills 1,803
-
detecting-sql-injection-vulnerabilities
Detect and analyze SQL injection vulnerabilities in application code and database queries.
Use when you need to scan code for SQL injection risks, review query construction, validate input sanitization, or implement secure query patterns.
Trigger with phrases like "detect SQL injection", "scan for SQLi vulnerabilities", "review database queries", or "check SQL security".
jeremylongshore/claude-code-plugins-plus-skills 1,803
-
checking-owasp-compliance
Check compliance with OWASP Top 10 security risks and best practices. Use when performing comprehensive security audits. Trigger with 'check OWASP compliance', 'audit web security', or 'validate OWASP'.
jeremylongshore/claude-code-plugins-plus-skills 1,803
-
assisting-with-soc2-audit-preparation
Execute automate SOC 2 audit preparation including evidence gathering, control assessment, and compliance gap identification.
Use when you need to prepare for SOC 2 audits, assess Trust Service Criteria compliance, document security controls, or generate readiness reports.
Trigger with phrases like "SOC 2 audit preparation", "SOC 2 readiness assessment", "collect SOC 2 evidence", or "Trust Service Criteria compliance".
jeremylongshore/claude-code-plugins-plus-skills 1,803
-
prompt-improver
Analyze and improve plugin prompts, skill definitions, and command instructions for clarity, safety, and effectiveness. Use when the user asks to "improve a prompt", "review a skill", "enhance instructions", "make this prompt better", "optimize this command", or "audit prompt quality".
jeremylongshore/claude-code-plugins-plus-skills 1,803
-
scanning-input-validation-practices
Scan for input validation vulnerabilities and injection risks. Use when reviewing user input handling. Trigger with 'scan input validation', 'check injection vulnerabilities', or 'validate sanitization'.
jeremylongshore/claude-code-plugins-plus-skills 1,803
-
scanning-for-gdpr-compliance
Scan for GDPR compliance issues in data handling and privacy practices. Use when ensuring EU data protection compliance. Trigger with 'scan GDPR compliance', 'check data privacy', or 'validate GDPR'.
jeremylongshore/claude-code-plugins-plus-skills 1,803
-
encrypting-and-decrypting-data
Validate encryption implementations and cryptographic practices. Use when reviewing data security measures. Trigger with 'check encryption', 'validate crypto', or 'review security keys'.
jeremylongshore/claude-code-plugins-plus-skills 1,803
-
checking-session-security
Analyze session management implementations to identify security vulnerabilities in web applications.
Use when you need to audit session handling, check for session fixation risks, review session timeout configurations, or validate session ID generation security.
Trigger with phrases like "check session security", "audit session management", "review session handling", or "session fixation vulnerability".
jeremylongshore/claude-code-plugins-plus-skills 1,803
-
analyzing-dependencies
Analyze dependencies for known security vulnerabilities and outdated versions. Use when auditing third-party libraries. Trigger with 'check dependencies', 'scan for vulnerabilities', or 'audit packages'.
jeremylongshore/claude-code-plugins-plus-skills 1,803
-
finding-security-misconfigurations
Configure identify security misconfigurations in infrastructure-as-code, application settings, and system configurations.
Use when you need to audit Terraform/CloudFormation templates, check application config files, validate system security settings, or ensure compliance with security best practices.
Trigger with phrases like "find security misconfigurations", "audit infrastructure security", "check config security", or "scan for misconfigured settings".
jeremylongshore/claude-code-plugins-plus-skills 1,803
-
scanning-for-data-privacy-issues
Scan for data privacy issues and sensitive information exposure. Use when reviewing data handling practices. Trigger with 'scan privacy issues', 'check sensitive data', or 'validate data protection'.
jeremylongshore/claude-code-plugins-plus-skills 1,803
-
validating-csrf-protection
Validate CSRF protection implementations for security gaps. Use when reviewing form security or state-changing operations. Trigger with 'validate CSRF', 'check CSRF protection', or 'review token security'.
jeremylongshore/claude-code-plugins-plus-skills 1,803
-
analyzing-security-headers
Analyze HTTP security headers of web domains to identify vulnerabilities and misconfigurations.
Use when you need to audit website security headers, assess header compliance, or get security recommendations for web applications.
Trigger with phrases like "analyze security headers", "check HTTP headers", "audit website security headers", or "evaluate CSP and HSTS configuration".
jeremylongshore/claude-code-plugins-plus-skills 1,803
-
generating-security-audit-reports
Generate comprehensive security audit reports for applications and systems.
Use when you need to assess security posture, identify vulnerabilities, evaluate compliance status, or create formal security documentation.
Trigger with phrases like "create security audit report", "generate security assessment", "audit security posture", or "PCI-DSS compliance report".
jeremylongshore/claude-code-plugins-plus-skills 1,803
-
scanning-for-secrets
Detect exposed secrets, API keys, and credentials in code. Use when auditing for secret leaks. Trigger with 'scan for secrets', 'find exposed keys', or 'check credentials'.
jeremylongshore/claude-code-plugins-plus-skills 1,803
-
validating-cors-policies
Validate CORS policies for security issues and misconfigurations. Use when reviewing cross-origin resource sharing. Trigger with 'validate CORS', 'check CORS policy', or 'review cross-origin'.
jeremylongshore/claude-code-plugins-plus-skills 1,803
-
generating-compliance-reports
Generate comprehensive compliance reports for security standards. Use when creating compliance documentation. Trigger with 'generate compliance report', 'compliance status', or 'audit compliance'.
jeremylongshore/claude-code-plugins-plus-skills 1,803
-
performing-penetration-testing
Perform security testing on web applications, APIs, and codebases. Use when
the user asks to "run a security scan", "check for vulnerabilities", "audit
dependencies", "check security headers", "find security issues", "pentest",
"security audit", or "scan for secrets". Trigger with "pentest", "security scan",
"vulnerability check", "audit dependencies", "check headers", "find secrets".
jeremylongshore/claude-code-plugins-plus-skills 1,803
-
auditing-access-control
Audit access control implementations for security vulnerabilities and misconfigurations. Use when reviewing authentication and authorization. Trigger with 'audit access control', 'check permissions', or 'validate authorization'.
jeremylongshore/claude-code-plugins-plus-skills 1,803