sast-configuration
Static Application Security Testing (SAST) tool setup, configuration, and custom rule creation for comprehensive security scanning across multiple programming…
A skill ships inside a plugin. Install the plugin, and a skill that gets Auto-invokedWhat is this?This plugin ships a FLOW.md router the engine fires, so the matching skill runs itself. No slash command to remember.Learn how → runs itself when your prompt calls for it.
40,077 skills across 2,408 plugins. 1,867 of them fire as you prompt.
Static Application Security Testing (SAST) tool setup, configuration, and custom rule creation for comprehensive security scanning across multiple programming…
Comprehensive security auditing workflow covering web application testing, API security, penetration testing, vulnerability scanning, and security hardening.
Complete toolkit for senior fullstack with modern tools and best practices.
Design identification strategy or pre-analysis plan. Dispatches Strategist (proposer) and strategist-critic (validator). Replaces /identify and…
This skill covers structural econometric models. Use when the user is building, estimating, or debugging structural models — including BLP demand estimation,…
Use parallel subagents for large-scale paper screening and deep dive analysis
Statistical visualization. Scatter, box, violin, heatmaps, pair plots, regression, correlation matrices, KDE, faceted plots, for exploratory analysis and…
Perform language and framework specific security best-practice reviews and suggest improvements. Trigger only when the user explicitly requests security best…
Analyze git repositories to build a security ownership topology (people-to-file), compute bus factor and sensitive-code ownership, and export CSV/JSON for…
Break epics into parallelizable tasks with acceptance criteria, effort estimates, and dependency graphs.
Red-Green-Refactor TDD methodology with mandatory failing tests, minimal implementation, quality refactoring, and 80% coverage gating.
Cross-reference GitHub, Linear, Slack, and PostHog with bidirectional sync for team briefs
Für Mediation Escalation: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt.
Für Medizinische Leistungen AGB: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt.
Für Mehrdeutigkeit 305c2: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Schnittstellenkarte mit Zuständigkeits- und Nachweisfragen.
When the user wants to turn one piece of content into multiple formats or adapt content across platforms. Also use when the user mentions 'repurpose,' 'turn…
When the user wants to plan a social media content strategy, decide what to post, or figure out topic clusters and content mix. Also use when the user mentions…
When the user wants to set up or update their social media profile, voice, audience, content pillars, or platform preferences. Also use when the user mentions…
List observable undesirable effects with evidence and severity as starting points for constraint/root-cause analysis.
Map system structure into ablatable units, dependencies, legal removal/replacement operations, and expected contribution hypotheses.
Map source structure/relations/functions to target structure and annotate match quality.
Use when crafting narratives that connect product value to customer pain through clear setup-conflict-resolution arcs.
Metrics framework for monitoring engagement, progression, and completion.
Use to structure collaborative success plans with milestones, KPIs, and
Diagnose and audit SEO issues affecting crawlability, indexation, rankings, and organic performance.
Manages shadcn/ui components and projects, providing context, documentation, and usage patterns for building modern design systems.
Automate Shopify tasks via Rube MCP (Composio): products, orders, customers, inventory, collections. Always search tools first for current schemas.
This skill covers academic journal submission, referee responses, and revision management. Use when the user is preparing a manuscript for submission,…
Final submission verification gate for the sewage-house-prices paper. Runs full paper excellence review, replication audit, enforces score gates, and generates…
Complex survey analysis: strata/PSU/weights, variance estimation (Taylor, BRR, jackknife, bootstrap), survey GLM, domain analysis, calibration. Polars-native.…
Dedicated security-audit route for OWASP-style risks, secret leaks, auth flaws, injection, unsafe input handling, SSRF/XSS, and sensitive-data exposure. Use…
Repository-grounded threat modeling that enumerates trust boundaries, assets, attacker capabilities, abuse paths, and mitigations, and writes a concise…
World-class computer vision skill for image/video processing, object detection, segmentation, and visual AI systems. Expertise in PyTorch, OpenCV, YOLO, SAM,…
Template loading, variable filling, and scaffolding for all GSD artifacts. Manages 22+ templates covering every document type in the GSD system, from…
Execute Vitest and Playwright test suites with result collection and failure analysis.
Strict RED-GREEN-REFACTOR cycle enforcement. Tests are never skipped or deferred. Run mode only, never watch mode. Exit code evidence mandatory.
Für Mehrsprachige AGB Check: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt.
Für Mindestabnahme: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt. Fachgebiet: AGB-Recht-Prüfer. Route:…
Für Mitwirkungspflichten: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt. Fachgebiet: AGB-Recht-Prüfer.…
When the user wants help writing opening lines, hooks, or first sentences that grab attention. Also use when the user mentions 'hook,' 'opening line,' 'first…
Instagram analytics report — queries profile stats, recent posts, engagement rates, insights for all connected accounts. Generates HTML report. Use when user…
LinkedIn analytics report — profile data, posts (when available), org stats. Use when user says 'linkedin report', 'linkedin analytics', or any reference to…
Map a set of methods/assets/evidence items against a typed problem, capability, condition, or design space to expose redundancy and coverage structure.
Construct a dependency graph and identify cycles, critical paths, and parallelizable branches.
Represent where perspectives/arguments agree, disagree, and why.
Use to define guardrails that pause signal-driven plays when accounts
Use to craft rigorous survey instruments with sampling, question logic,
Central repository structure for manufacturing RFP responses, compliance
© 2026 Flowy · Free and open source
Built for Claude Code · Not affiliated with Anthropic