MCP App StoreMCP App Store
from superpowers-sage13
Comprehensive security patterns for WordPress development using Sage and Acorn, focusing on sanitization, escaping, and authorization.
Provides a rigorous security framework for writing and reviewing WordPress code within the Sage/Acorn ecosystem. It implements a multi-layered defense strategy covering input sanitization, output escaping, and robust authorization checks.
Use this skill during the development of any feature that handles user input, renders dynamic content in Blade templates, interacts with the database via $wpdb or Eloquent, or processes file uploads. It is also intended as a final security audit pass before deployment.
sanitize_text_field), contextual escaping (esc_html, esc_attr), nonce verification, capability checks (current_user_can), SQL preparation, and CSRF protection.Optimized for Claude Code and other AI coding assistants working on modern WordPress architectures.
This skill has not been reviewed by our automated audit pipeline yet.
Design Tool Integration — Superpowers Sage
Route design links (Paper, Figma, Stitch, local assets) to the correct extractor, extract per-section layout and assets, and save structured design notes for im
Acorn Middleware & Authentication
Implements Laravel-style HTTP middleware, JWT authentication, and request filtering within WordPress using Acorn and Sage.
WordPress REST API Patterns
Expert patterns for creating, modifying, and debugging WordPress REST API endpoints, ensuring secure and performant API surfaces.
Reverse Engineer
Provides step-by-step guidance and best practices for binary reverse engineering: static analysis, dynamic tracing, disassembly, and documentation workflows for
Sandbox0 Integration
Guidance and templates for integrating Sandbox0 sandboxing into AI agents — CLI/SDK patterns, templates, volumes, network policy, and deployment choices.
OpenTestAI
Automated, high-confidence AI testing: bug detection, persona feedback, and prioritized test-case generation using many specialized tester profiles.
CTF Write-up Generator
Generate a concise, reproducible submission-style CTF writeup with a one-path solution script, metadata, and a short checklist for fast verification.
Minimal Run & Audit (repro reporting)
Execute a README-first smoke test and produce standardized reproducibility outputs (`repro_outputs/`) and PATCHES.md — trusted reporting for repo reproduction r
Skill Issue — Skill Auditor
Scan and audit installed agent skills to produce a health report covering inventory, usage, dependency checks, version status, and actionable recommendations.
GRC & Compliance (ServiceNow)
Guides Governance, Risk & Compliance (GRC) work in ServiceNow: policies, controls, risk records, audits and ES5 script examples for automating GRC workflows.
Azure External Attack Surface Management
Provides expert guidance for Azure External Attack Surface Management (EASM): quotas, configuration, integrations, and exporting inventory to analytics platform