[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M74ADEEJDASCXKAXCD4HS263":3,"skill-same:01M74ADEEJDASCXKAXCD4HS263":48},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":18,"publishedAt":19,"linkOnly":20,"markdownContent":21,"markdownBody":22,"frontMatter":23,"refName":24,"commitSha":25,"skillDirectory":26,"forksCount":27,"repositoryHtmlUrl":28,"repositoryHomepageUrl":29,"ownerHtmlUrl":30,"ownerBlogUrl":31,"ownerDescription":32,"updatedAt":33,"install":34,"resources":47},"01M74ADEEJDASCXKAXCD4HS263","commit-security-scan",null,"Scan code changes for security vulnerabilities using Bug Hunter-native artifacts and STRIDE context. Use whenever the user asks for PR security review, commit-diff scanning, staged-change security checks, branch-comparison security review, or pre-merge security analysis of changed code.","CarlosCaPe\u002Foctorato","CarlosCaPe","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F39838249?v=4","01M72WXX4ZRR8MBH1EP1QND2FQ","dataqbs","01M72WXX5NA7YCKRSJ54GW1GQ8",18,"MIT","https:\u002F\u002Fgithub.com\u002FCarlosCaPe\u002Foctorato\u002Fblob\u002Fmaster\u002Fskills\u002Fbug-hunter\u002Fskills\u002Fcommit-security-scan\u002FSKILL.md",[],[],"2026-11-11 15:11:14",false,"---\nname: commit-security-scan\ndescription: Scan code changes for security vulnerabilities using Bug Hunter-native artifacts and STRIDE context. Use whenever the user asks for PR security review, commit-diff scanning, staged-change security checks, branch-comparison security review, or pre-merge security analysis of changed code.\n---\n\n# Commit Security Scan\n\nThis is a bundled local Bug Hunter companion skill. It is portable and self-contained: use `.bug-hunter\u002F*` artifacts, never `.factory\u002F*` paths.\n\n## Purpose\n\nReview *changed code* for security issues only. This skill is optimized for:\n- PR review\n- staged diff review\n- branch diff review\n- commit \u002F commit-range security scanning\n\n## Inputs\n\nResolve the scan scope from the user request:\n- PR review → use `scripts\u002Fpr-scope.cjs`\n- staged review → use `git diff --cached --name-only`\n- branch diff → use `git diff --name-only \u003Cbase>...\u003Chead>`\n- commit range → use `git diff --name-only \u003Cbase>..\u003Chead>`\n\n## Workflow\n\n1. Ensure threat-model context exists.\n   - Preferred artifacts:\n     - `.bug-hunter\u002Fthreat-model.md`\n     - `.bug-hunter\u002Fsecurity-config.json`\n   - If missing, run the bundled `threat-model-generation` skill first.\n\n2. Resolve the changed-file scope.\n\n3. Read the full contents of the changed source files, not just the patch.\n\n4. Focus on STRIDE-oriented issues in changed code:\n   - Spoofing: auth\u002Fsession\u002Ftoken mistakes\n   - Tampering: SQLi, XSS, path traversal, command injection, mass assignment\n   - Repudiation: security-sensitive actions with no auditability\n   - Information Disclosure: IDOR, secret exposure, verbose errors\n   - DoS: unbounded input, missing limits, expensive regex\u002Fqueries\n   - Elevation of Privilege: missing authorization, role bypass, privilege escalation\n\n5. Reuse Bug Hunter-native security conventions:\n   - findings should be compatible with `.bug-hunter\u002Ffindings.json`\n   - use STRIDE + CWE labels\n   - include confidence scores\n\n6. If the user wants only a focused security diff review, stop after the findings report.\n   If the user wants deeper validation, hand off to the bundled `vulnerability-validation` skill.\n\n## Output\n\nPreferred outputs:\n- `.bug-hunter\u002Ffindings.json` when integrating with the main Bug Hunter pipeline\n- `.bug-hunter\u002Freport.md` as a rendered companion if needed\n\n## Notes\n\n- This skill is intentionally diff-scoped; it does not replace full-repository audits.\n- Use it as the lightweight security fast-path before invoking the broader `security-review` flow.\n","# Commit Security Scan\n\nThis is a bundled local Bug Hunter companion skill. It is portable and self-contained: use `.bug-hunter\u002F*` artifacts, never `.factory\u002F*` paths.\n\n## Purpose\n\nReview *changed code* for security issues only. This skill is optimized for:\n- PR review\n- staged diff review\n- branch diff review\n- commit \u002F commit-range security scanning\n\n## Inputs\n\nResolve the scan scope from the user request:\n- PR review → use `scripts\u002Fpr-scope.cjs`\n- staged review → use `git diff --cached --name-only`\n- branch diff → use `git diff --name-only \u003Cbase>...\u003Chead>`\n- commit range → use `git diff --name-only \u003Cbase>..\u003Chead>`\n\n## Workflow\n\n1. Ensure threat-model context exists.\n   - Preferred artifacts:\n     - `.bug-hunter\u002Fthreat-model.md`\n     - `.bug-hunter\u002Fsecurity-config.json`\n   - If missing, run the bundled `threat-model-generation` skill first.\n\n2. Resolve the changed-file scope.\n\n3. Read the full contents of the changed source files, not just the patch.\n\n4. Focus on STRIDE-oriented issues in changed code:\n   - Spoofing: auth\u002Fsession\u002Ftoken mistakes\n   - Tampering: SQLi, XSS, path traversal, command injection, mass assignment\n   - Repudiation: security-sensitive actions with no auditability\n   - Information Disclosure: IDOR, secret exposure, verbose errors\n   - DoS: unbounded input, missing limits, expensive regex\u002Fqueries\n   - Elevation of Privilege: missing authorization, role bypass, privilege escalation\n\n5. Reuse Bug Hunter-native security conventions:\n   - findings should be compatible with `.bug-hunter\u002Ffindings.json`\n   - use STRIDE + CWE labels\n   - include confidence scores\n\n6. If the user wants only a focused security diff review, stop after the findings report.\n   If the user wants deeper validation, hand off to the bundled `vulnerability-validation` skill.\n\n## Output\n\nPreferred outputs:\n- `.bug-hunter\u002Ffindings.json` when integrating with the main Bug Hunter pipeline\n- `.bug-hunter\u002Freport.md` as a rendered companion if needed\n\n## Notes\n\n- This skill is intentionally diff-scoped; it does not replace full-repository audits.\n- Use it as the lightweight security fast-path before invoking the broader `security-review` flow.\n",{"name":5,"description":7},"master","b4414608cd5a3f87d1525b518f1c6add8363540d","skills\u002Fbug-hunter\u002Fskills\u002Fcommit-security-scan",6,"https:\u002F\u002Fgithub.com\u002FCarlosCaPe\u002Foctorato","https:\u002F\u002Fwww.dataqbs.com\u002Foctorato","https:\u002F\u002Fgithub.com\u002FCarlosCaPe","www.dataqbs.com"," AI-powered data engineering\r\n& consulting\r\n\r\nWe build data platforms that turn complexity into clarity — from cloud architecture and ETL pipelines to AI-driven","2026-11-14 00:21:00",{"source":8,"skillName":5,"commands":35,"prompt":45,"zipAvailable":46},[36,39,42],{"tool":37,"command":38},"npx","npx skills add CarlosCaPe\u002Foctorato --skill commit-security-scan",{"tool":40,"command":41},"bunx","bunx skills add CarlosCaPe\u002Foctorato --skill commit-security-scan",{"tool":43,"command":44},"pnpm","pnpm dlx skills add CarlosCaPe\u002Foctorato --skill commit-security-scan","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002FCarlosCaPe\u002Foctorato\u002Fblob\u002Fmaster\u002Fskills\u002Fbug-hunter\u002Fskills\u002Fcommit-security-scan\u002FSKILL.md",true,[],[49,58,66,73,81,89],{"skillNo":50,"name":51,"nameZh":6,"description":52,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":53,"licenseFileUrl":54,"sourceHtmlUrl":55,"categories":56,"keywords":57,"publishedAt":19},"01M74EVAA4A4B4AKR5TT732GP4","yeet","Use only when the user explicitly asks to stage, commit, push, and open a GitHub pull request in one flow using the GitHub CLI (`gh`).","Apache-2.0","https:\u002F\u002Fgithub.com\u002FCarlosCaPe\u002Foctorato\u002Fblob\u002Fmaster\u002Fskills\u002Fyeet\u002FLICENSE.txt","https:\u002F\u002Fgithub.com\u002FCarlosCaPe\u002Foctorato\u002Fblob\u002Fmaster\u002Fskills\u002Fyeet\u002FSKILL.md",[],[],{"skillNo":59,"name":60,"nameZh":6,"description":61,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":53,"licenseFileUrl":62,"sourceHtmlUrl":63,"categories":64,"keywords":65,"publishedAt":19},"01M74EV4WMRDKP2NQS4YWR8PXH","wrangler","Cloudflare Workers CLI for deploying, developing, and managing Workers, KV, R2, D1, Vectorize, Hyperdrive, Workers AI, Containers, Queues, Workflows, Pipelines, and Secrets Store. Load before running wrangler commands to ensure correct syntax and best practices. Biases towards retrieval from Cloudflare docs over pre-trained knowledge.","https:\u002F\u002Fgithub.com\u002FCarlosCaPe\u002Foctorato\u002Fblob\u002Fmaster\u002Fskills\u002Fwrangler\u002FLICENSE","https:\u002F\u002Fgithub.com\u002FCarlosCaPe\u002Foctorato\u002Fblob\u002Fmaster\u002Fskills\u002Fwrangler\u002FSKILL.md",[],[],{"skillNo":67,"name":68,"nameZh":6,"description":69,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":70,"categories":71,"keywords":72,"publishedAt":19},"01M74EV05MHTXKEXD4B2QJEYTF","workspace-skill-discovery","Discover and include ALL skills across the workspace — not just global ones. Use at the start of every session or when the user asks about available skills. Ensures project-level skills (under .claude\u002Fskills\u002F or skills\u002F in any repo) are never missed.","https:\u002F\u002Fgithub.com\u002FCarlosCaPe\u002Foctorato\u002Fblob\u002Fmaster\u002Fskills\u002Fworkspace-skill-discovery\u002FSKILL.md",[],[],{"skillNo":74,"name":75,"nameZh":6,"description":76,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":53,"licenseFileUrl":77,"sourceHtmlUrl":78,"categories":79,"keywords":80,"publishedAt":19},"01M74ETV78525B4VP2F28Z6NRD","workers-best-practices","Reviews and authors Cloudflare Workers code against production best practices. Load when writing new Workers, reviewing Worker code, configuring wrangler.jsonc, or checking for common Workers anti-patterns (streaming, floating promises, global state, secrets, bindings, observability). Biases towards retrieval from Cloudflare docs over pre-trained knowledge.","https:\u002F\u002Fgithub.com\u002FCarlosCaPe\u002Foctorato\u002Fblob\u002Fmaster\u002Fskills\u002Fworkers-best-practices\u002FLICENSE","https:\u002F\u002Fgithub.com\u002FCarlosCaPe\u002Foctorato\u002Fblob\u002Fmaster\u002Fskills\u002Fworkers-best-practices\u002FSKILL.md",[],[],{"skillNo":82,"name":83,"nameZh":6,"description":84,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":53,"licenseFileUrl":85,"sourceHtmlUrl":86,"categories":87,"keywords":88,"publishedAt":19},"01M74ETR75NF67WGVEN7288ACV","winui-app","Create, build and design WinUI 3 desktop apps with C# and the Windows App SDK following Microsoft's official guidance and CommunityToolkit. Covers XAML, navigation, theming, accessibility and deployment.","https:\u002F\u002Fgithub.com\u002FCarlosCaPe\u002Foctorato\u002Fblob\u002Fmaster\u002Fskills\u002Fwinui-app\u002FLICENSE.txt","https:\u002F\u002Fgithub.com\u002FCarlosCaPe\u002Foctorato\u002Fblob\u002Fmaster\u002Fskills\u002Fwinui-app\u002FSKILL.md",[],[],{"skillNo":90,"name":91,"nameZh":6,"description":92,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":93,"categories":94,"keywords":95,"publishedAt":19},"01M74ETJFRNPPNSQZ36C6HD6CW","windows-brain-script-portability","Scripts in ~\u002F.claude\u002Fscripts\u002F that run on a Windows brain: use the python3.cmd shim and not bare python3, and reconfigure stdout to UTF-8 if you print symbols. Use it when writing a brain script or triaging a Windows-only crash.","https:\u002F\u002Fgithub.com\u002FCarlosCaPe\u002Foctorato\u002Fblob\u002Fmaster\u002Fskills\u002Fwindows-brain-script-portability\u002FSKILL.md",[],[]]