MCP App StoreMCP App StoreThis skill provides a rigorous framework for AI agents to handle sensitive information. It ensures that PII, PCI, HIPAA, PHI, GDPR, and other sensitive data—including API keys, passwords, and tokens—are never leaked in chat, logs, or files.
Activates whenever the agent suspects, encounters, or is about to process any data that could be considered sensitive. It is particularly critical during coding tasks, log analysis, and data processing where secrets are common.
[REDACTED:<type>] markers, usage of IETF reserved ranges for placeholders, and a comprehensive scan list for common secret patterns (JWT, AWS keys, GitHub tokens, etc.).Designed for AI coding agents including Claude Code, Codex, and other MCP-compatible environments.
This skill has not been reviewed by our automated audit pipeline yet.
Load Context
Ensure an agent loads the most current execution context and prep steps (bootstrap, docs, tools) before planning or acting.
Reasoning
Structured 7-step meta-cognitive reasoning skill that guides analysis, decomposition, and confident decision-making with explicit caveats.
Rosetta Testing Specialist
Expert guidance for writing isolated, idempotent tests with 80%+ coverage and strict external-only mocking.
Solr Semantic Search Expert
Implement phrase-tagging semantic search in Apache Solr 9.x using concept tagging, taxonomies, and graph-based path resolution.
Subagent Contract
Defines the operational contract, boundaries, and escalation protocols for spawned subagents.
Reverse Engineer
Provides step-by-step guidance and best practices for binary reverse engineering: static analysis, dynamic tracing, disassembly, and documentation workflows for
Sandbox0 Integration
Guidance and templates for integrating Sandbox0 sandboxing into AI agents — CLI/SDK patterns, templates, volumes, network policy, and deployment choices.
CTF Write-up Generator
Generate a concise, reproducible submission-style CTF writeup with a one-path solution script, metadata, and a short checklist for fast verification.
GRC & Compliance (ServiceNow)
Guides Governance, Risk & Compliance (GRC) work in ServiceNow: policies, controls, risk records, audits and ES5 script examples for automating GRC workflows.
Azure External Attack Surface Management
Provides expert guidance for Azure External Attack Surface Management (EASM): quotas, configuration, integrations, and exporting inventory to analytics platform
Node.js Best Practices
Guidelines and decision-making for Node.js architecture, runtime, async patterns, security, validation, and testing to inform framework and system choices.
radar — Smart Contract AST & Security Analysis
Multi-framework AST generator and static analysis tool for smart contracts (Rust/Anchor/Stylus and Solidity/Foundry) with a template DSL for writing detection r
Bash Pro
Defensive, production-grade Bash scripting patterns and CI/CD best practices: strict mode, safe argument parsing, testing with Bats, and tooling (ShellCheck/shf