Security & Infra

Agent Skill

⚡ 88

Cloudflare Turnstile Bot Verification & Siteverify Skill

Implement privacy-preserving Cloudflare Turnstile challenge widgets on frontend forms with mandatory server-side Siteverify token validation and replay pro

Security & Infra @cloudflare ✓

Blueprint →

Agent Skill

⚡ 86

Cloudflare One Zero Trust & Access Policy Architecture Skill

Design and audit Cloudflare Zero Trust Access applications, WARP device posture checks, identity provider OIDC claims, and Cloudflare Tunnel (`cloudflared`

Security & Infra @cloudflare ✓

Blueprint →

Agent Skill

⚡ 85

Enterprise VPN to Cloudflare One Zero Trust Migration Playbook

Step-by-step migration blueprint from legacy VPN/SWG appliances to Cloudflare One: policy mapping, split-tunnel CIDR validation, and staged user cutover.

Security & Infra @cloudflare ✓

Blueprint →

Grok Template

⚡ 83

Cloud IAM Wildcard & Over-Privileged Role Tightener

Scans IAM policies, service accounts, and API tokens for `*` wildcard permissions and generates least-privilege policy diffs based on 30-day usage.

Security & Infra @cloudflare ✓

Launch in Grok Bot ↗ Blueprint →

Grok Template

⚡ 84

Zero-Day CVE Reachability & Patch PR Agent

Evaluates new GitHub Security Advisories against actual call-graph reachability in production services and opens tested bump PRs for reachable CVEs.

Security & Infra @simonw ✓

Launch in Grok Bot ↗ Blueprint →

Grok Template

⚡ 85

Agent Tool-Call & Untrusted Input Red-Team Bot

Tests agent workflows and webhook ingestion pipelines against indirect prompt-injection payloads hidden in emails, web pages, and guestbook entries.

Security & Infra @threepointone ✓

Launch in Grok Bot ↗ Blueprint →

Grok Template

⚡ 88

Perimeter & Repository Security Auditor (DNS, TLS, Secrets & CVEs)

Audits GitHub repositories, SPF/DKIM/DMARC mail records, TLS certificates, and dependency lockfiles to produce a prioritized remediation checklist.

Security & Infra @simonw ✓

Launch in Grok Bot ↗ Blueprint →

Grok Template

⚡ 87

Inbox Injection Guard — Prompt-Injection & Phishing Firewall

Screens inbound emails, attachments, and webhook payloads for hidden prompt injections, spoofed headers, and credential-harvesting links before other bots

Security & Infra @simonw ✓

Launch in Grok Bot ↗ Blueprint →

Grok Template

⚡ 86

DNS Subdomain Takeover & TLS Expiry Auditor

Audits Cloudflare DNS zones daily for dangling CNAME records pointing to deprovisioned cloud services and verifies TLS certificate auto-renewal.

Security & Infra @steipete ✓

Launch in Grok Bot ↗ Blueprint →

Use Case

⚡ 91

Frontend Third-Party Script & Subprocessor Privacy Audit

Trace outbound network requests in headless Playwright to inventory analytics pixels, cookies, and GDPR/CCPA subprocessor disclosures.

Security & Infra @simonw ✓

Blueprint →

Agent Skill

⚡ 87

Supabase Postgres Row-Level Security (RLS) Audit Playbook

Audit every table in a Supabase `public` schema for missing RLS policies, insecure `USING (true)` clauses, unindexed foreign keys, and leaked `service_role

Security & Infra @supabase ✓

Blueprint →

Agent Skill

⚡ 87

Next.js (Type LLM) — Production Architecture & Agent Playbook

Deterministic architecture, strict typing, testing, and security guardrails for Next.js (Type LLM) projects.

Security & Infra @getsentry ✓

Blueprint →

Use Case

⚡ 89

Automated TLS 1.3 Cipher Suite & HSTS Preload Compliance Audit

Scan all production and marketing subdomains weekly for weak cipher suites, missing HSTS headers, or mixed-content assets.

Security & Infra @cloudflare ✓

Blueprint →

Grok Template

⚡ 87

GitHub Secret Leak & Instant Token Rotation Sentinel

Scans every pushed commit and PR diff for high-entropy API keys, JWTs, or cloud credentials and immediately alerts security with rotation commands.

Security & Infra @getsentry ✓

Launch in Grok Bot ↗ Blueprint →

Agent Skill

⚡ 81

HTMX (Basic Setup) — Production Architecture & Agent Playbook

Deterministic architecture, strict typing, testing, and security guardrails for HTMX (Basic Setup) projects.

Security & Infra @getsentry ✓

Blueprint →

Agent Skill

⚡ 93

LLM Indirect Prompt Injection & Untrusted Data Fencing Skill

Defend autonomous agents against indirect prompt injection in emails, web pages, and MCP tool outputs using XML data fencing, privilege separation, and hum

Security & Infra @simonw ✓

Blueprint →

Use Case

⚡ 79

OAuth 2.0 PKCE S256 & Open-Redirect Hardening Blueprint

Audit social sign-in and account-claim flows for strict PKCE `S256` challenge verification, `HttpOnly` state cookies, and exact redirect URIs.

Security & Infra @threepointone ✓

Blueprint →

MCP Server ✓ Claimed

⚡ 93

PagerDuty On-Call Schedules, Incident Escalation & Runbook MCP

Check current on-call engineer rotations, inspect active PagerDuty incidents and alerts, attach diagnostic notes, and acknowledge pages safely.

Security & Infra @getsentry ✓

Blueprint →

MCP Server ✓ Claimed

⚡ 79

Datadog APM Traces, Log Explorer & Active Monitor Alerts MCP

Query Datadog APM latency percentiles, search structured production logs, inspect triggered P1/P2 monitor alerts, and correlate incident timelines.

Security & Infra @getsentry ✓

Blueprint →

Use Case

⚡ 90

PagerDuty Alert Deduplication & Automated Runbook Linker

Cluster flapping PagerDuty alerts by root infrastructure dependency and attach the exact Notion remediation runbook to every page.

Security & Infra @simonw ✓

Blueprint →

Use Case

⚡ 87

Follow-the-Sun SRE On-Call Shift Handoff Synthesizer

Summarize active PagerDuty incidents, noisy alerts, recent production deploys, and open mitigation PRs at every 8-hour on-call rotation.

Security & Infra @getsentry ✓

Blueprint →

Agent Skill

⚡ 84

Vue 3 (Composition API) — Production Architecture & Agent Playbook

Deterministic architecture, strict typing, testing, and security guardrails for Vue 3 (Composition API) projects.

Security & Infra @cloudflare ✓

Blueprint →

Grok Template

⚡ 80

Automated Edge L7 DDoS & Scraper Mitigation Bot

Correlates sudden origin latency spikes with Cloudflare edge request logs to isolate abusive ASNs, user-agents, and JA3 fingerprints and stage WAF blocks.

Security & Infra @threepointone ✓

Launch in Grok Bot ↗ Blueprint →

Agent Skill

⚡ 80

Python 3.12 (FastAPI Best Practices) — Production Architecture & Agent Playbook

Deterministic architecture, strict typing, testing, and security guardrails for Python 3.12 (FastAPI Best Practices) projects.

Security & Infra @cloudflare ✓

Blueprint →

Use Case

⚡ 80

Pre-Apply Terraform Security & Cloud Cost Drift Gate

Run static IAM policy checks and monthly cost-delta estimates on every Terraform/OpenTofu PR before infrastructure apply.

Security & Infra @steipete ✓

Blueprint →

Agent Skill

⚡ 87

Laravel (TALL Stack) — Production Architecture & Agent Playbook

Deterministic architecture, strict typing, testing, and security guardrails for Laravel (TALL Stack) projects.

Security & Infra @threepointone ✓

Blueprint →

Agent Skill

⚡ 88

Docker Multi-Stage Distroless Builds & Image Hardening Skill

Shrink container images by 80% and eliminate OS-level CVEs using multi-stage BuildKit Dockerfiles, non-root distroless runtime images, and Trivy vulnerabil

Security & Infra @steipete ✓

Blueprint →

Use Case

⚡ 87

GDPR/CCPA User Deletion & Anonymization Cascade Verifier

Execute and verify complete PII erasure across Postgres, Stripe, PostHog, and Attio within statutory 30-day windows with audit receipts.

Security & Infra @threepointone ✓

Blueprint →

Agent Skill

⚡ 87

React (Next.js UI Development) — Production Architecture & Agent Playbook

Deterministic architecture, strict typing, testing, and security guardrails for React (Next.js UI Development) projects.

Security & Infra @simonw ✓

Blueprint →

Use Case

⚡ 91

SLSA Level 3 Artifact Signing & Release Provenance Pipeline

Sign CLI binaries, container images, and npm packages with Cosign/Sigstore provenance attestations in GitHub Actions.

Security & Infra @threepointone ✓

Blueprint →

Agent Skill

⚡ 85

Vue 3 (Nuxt 3, TypeScript) — Production Architecture & Agent Playbook

Deterministic architecture, strict typing, testing, and security guardrails for Vue 3 (Nuxt 3, TypeScript) projects.

Security & Infra @simonw ✓

Blueprint →

Agent Skill

⚡ 83

UIKit Guidelines — Production Architecture & Agent Playbook

Deterministic architecture, strict typing, testing, and security guardrails for UIKit Guidelines projects.

Security & Infra @threepointone ✓

Blueprint →

Use Case

⚡ 90

Nightly Staging vs Production Postgres Schema & RLS Drift Auditor

Compares table definitions, indexes, and Row-Level Security policies between staging and production every night—alerting on unmigrated drift or exposed tab

Security & Infra @supabase ✓

Blueprint →

Agent Skill

⚡ 85

OWASP Top-10 API Security, AuthZ & Secret Hygiene Audit Skill

Systematic security audit for REST and GraphQL APIs: detect Broken Object Level Authorization (BOLA/IDOR), mass assignment, SSRF, JWT algorithm confusion,

Security & Infra @simonw ✓

Blueprint →

Agent Skill

⚡ 81

Python (FastAPI) — Production Architecture & Agent Playbook

Deterministic architecture, strict typing, testing, and security guardrails for Python (FastAPI) projects.

Security & Infra @simonw ✓

Blueprint →

Agent Skill

⚡ 90

Next.js (SEO Development) — Production Architecture & Agent Playbook

Deterministic architecture, strict typing, testing, and security guardrails for Next.js (SEO Development) projects.

Security & Infra @threepointone ✓

Blueprint →

Agent Skill

⚡ 88

Laravel (PHP 8.3) — Production Architecture & Agent Playbook

Deterministic architecture, strict typing, testing, and security guardrails for Laravel (PHP 8.3) projects.

Security & Infra @steipete ✓

Blueprint →

Agent Skill

⚡ 81

Slack Bolt App Scaffolding & Bootstrap Playbook

Use when a developer wants to create, scaffold, or bootstrap a new Slack app or agent from scratch with the Slack CLI. Covers prerequisites, authentication

Security & Infra @simonw ✓

Blueprint →

Agent Skill

⚡ 84

Automated Dependency CVE Triage & Semver Lockfile Upgrade Skill

Audit `package-lock.json`, `pnpm-lock.yaml`, and `Cargo.lock` for reachable CVEs, test minimal semver patches against the full test suite, and open verifie

Security & Infra @kentcdodds ✓

Blueprint →

Grok Template

⚡ 81

Continuous SOC2 Type II Evidence Snapshooter

Automatically collects weekly proof of branch-protection rules, PR review approvals, encrypted backups, and incident drills into a Notion compliance vault.

Security & Infra @steipete ✓

Launch in Grok Bot ↗ Blueprint →

Use Case

⚡ 81

Credential-Stuffing & Scraper ASN Edge Mitigation Pipeline

Analyze `/login` and `/api/*` rate spikes by ASN and JA3 fingerprint to deploy targeted Cloudflare WAF challenge rules.

Security & Infra @getsentry ✓

Blueprint →

Agent Skill

⚡ 86

Salesforce (Apex) — Production Architecture & Agent Playbook

Deterministic architecture, strict typing, testing, and security guardrails for Salesforce (Apex) projects.

Security & Infra @steipete ✓

Blueprint →

Use Case

⚡ 88

Continuous SOC 2 & ISO 27001 Infrastructure Evidence Collector

Collects weekly compliance evidence across GitHub branch-protection rules, Cloudflare WAF policies, WorkOS SSO logs, and dependency CVE scans.

Security & Infra @cloudflare ✓

Blueprint →

Agent Skill

⚡ 86

Vue 3 (Nuxt 3 Development) — Production Architecture & Agent Playbook

Deterministic architecture, strict typing, testing, and security guardrails for Vue 3 (Nuxt 3 Development) projects.

Security & Infra @threepointone ✓

Blueprint →

MCP Server

⚡ 78

FHIR MCP — Model Context Protocol server for Fast Healthcare Interoperability R

Model Context Protocol server for Fast Healthcare Interoperability Resources (FHIR) APIs, enabling seamless integration with healthcare data through SMART-

Security & Infra @threepointone ✓

Blueprint →

Agent Skill

⚡ 86

Angular (TypeScript) — Production Architecture & Agent Playbook

Deterministic architecture, strict typing, testing, and security guardrails for Angular (TypeScript) projects.

Security & Infra @simonw ✓

Blueprint →

Agent Skill

⚡ 84

Go Temporal DSL — Production Architecture & Agent Playbook

Deterministic architecture, strict typing, testing, and security guardrails for Go Temporal DSL projects.

Security & Infra @threepointone ✓

Blueprint →

Agent Skill

⚡ 91

Elixir Engineer Guidelines — Production Architecture & Agent Playbook

Deterministic architecture, strict typing, testing, and security guardrails for Elixir Engineer Guidelines projects.

Security & Infra @getsentry ✓

Blueprint →

Agent Skill

⚡ 82

Rails 8 (Basic Setup) — Production Architecture & Agent Playbook

Deterministic architecture, strict typing, testing, and security guardrails for Rails 8 (Basic Setup) projects.

Security & Infra @threepointone ✓

Blueprint →

Agent Skill

⚡ 89

Kotlin Ktor Development — Production Architecture & Agent Playbook

Deterministic architecture, strict typing, testing, and security guardrails for Kotlin Ktor Development projects.

Security & Infra @getsentry ✓

Blueprint →

Agent Skill

⚡ 82

Netlify Edge Functions Playbook

Guide for writing Netlify Edge Functions. Use when building middleware, geolocation-based logic, request/response manipulation, authentication checks, A/B

Security & Infra @steipete ✓

Blueprint →

Agent Skill

⚡ 80

WordPress (macOS) — Production Architecture & Agent Playbook

Deterministic architecture, strict typing, testing, and security guardrails for WordPress (macOS) projects.

Security & Infra @threepointone ✓

Blueprint →

Agent Skill

⚡ 89

React Components Creation — Production Architecture & Agent Playbook

Deterministic architecture, strict typing, testing, and security guardrails for React Components Creation projects.

Security & Infra @steipete ✓

Blueprint →

Agent Skill

⚡ 87

Python LLM & ML Workflow — Production Architecture & Agent Playbook

Deterministic architecture, strict typing, testing, and security guardrails for Python LLM & ML Workflow projects.

Security & Infra @getsentry ✓

Blueprint →

Agent Skill

⚡ 80

Netlify Identity Playbook

Use when the task involves authentication, user signups, logins, password recovery, OAuth providers, role-based access control, or protecting routes and fu

Security & Infra @threepointone ✓

Blueprint →

Use Case

⚡ 82

Automated API BOLA / IDOR Authorization Matrix Verifier

Replay authenticated API endpoints with swapped tenant and user IDs in staging to catch Broken Object Level Authorization bugs.

Security & Infra @cloudflare ✓

Blueprint →

MCP Server

⚡ 82

WorkOS Enterprise SSO, Directory Sync (SCIM) & AuthKit MCP

Manage enterprise SAML/OIDC Single Sign-On connections, SCIM directory provisioning, RBAC roles, and Audit Logs via the WorkOS MCP server.

Security & Infra @shadcn ✓

Blueprint →

Grok Template

⚡ 82

Zero-Trust SSH & Database Access Anomaly Auditor

Reviews infrastructure access logs, off-hours production database queries, and new device enrollments to flag anomalous administrative activity.

Security & Infra @getsentry ✓

Launch in Grok Bot ↗ Blueprint →

Agent Skill

⚡ 87

TanStack Router (React) — Production Architecture & Agent Playbook

TanStack Router v1 with file-based routing, typed params, search validation, loaders, auth guards, and route preloading.

Security & Infra @steipete ✓

Blueprint →

Agent Skill

⚡ 85

SwiftUI Guidelines — Production Architecture & Agent Playbook

Deterministic architecture, strict typing, testing, and security guardrails for SwiftUI Guidelines projects.

Security & Infra @getsentry ✓

Blueprint →

Agent Skill

⚡ 87

Angular (Novo Elements) — Production Architecture & Agent Playbook

Deterministic architecture, strict typing, testing, and security guardrails for Angular (Novo Elements) projects.

Security & Infra @threepointone ✓

Blueprint →

Agent Skill

⚡ 85

Go with Fiber — Production Architecture & Agent Playbook

Deterministic architecture, strict typing, testing, and security guardrails for Go with Fiber projects.

Security & Infra @steipete ✓

Blueprint →

Grok Template

⚡ 92

Urgenta — P0/P1 Incident Commander & Status Page Coordinator

Correlates Sentry spikes, PagerDuty alerts, and recent GitHub deployments during live incidents—drafting stakeholder status updates and rollback commands.

Security & Infra @getsentry ✓

Launch in Grok Bot ↗ Blueprint →

Grok Template

⚡ 79

Vendor Invoice Fraud, Wire-Change & BEC Verification Guard

Verifies vendor ACH/wire change requests, inspects invoice PDF metadata against historical vendor records, and blocks Business Email Compromise (BEC) attem

Security & Infra @simonw ✓

Launch in Grok Bot ↗ Blueprint →

MCP Server

⚡ 81

Clerk User Authentication, B2B Organizations & Session Audit MCP

Inspect Clerk user profiles, B2B organization memberships, active session tokens, and webhook events directly from your engineering or support agent.

Security & Infra @shadcn ✓

Blueprint →

Agent Skill

⚡ 85

Next.js (TypeScript App) — Production Architecture & Agent Playbook

Deterministic architecture, strict typing, testing, and security guardrails for Next.js (TypeScript App) projects.

Security & Infra @threepointone ✓

Blueprint →

Use Case

⚡ 80

Automated Multi-Region Origin Health Check & DNS Failover

Probe primary and secondary origin endpoints every 30 seconds and execute instant Cloudflare DNS failover if origin health degrades.

Security & Infra @getsentry ✓

Blueprint →

MCP Server

⚡ 78

Grafana MCP — Search dashboards, investigate incidents and query datasources in yo

Search dashboards, investigate incidents and query datasources in your Grafana instance

Security & Infra @steipete ✓

Blueprint →

Agent Skill

⚡ 79

Drupal 11 — Production Architecture & Agent Playbook

Deterministic architecture, strict typing, testing, and security guardrails for Drupal 11 projects.

Security & Infra @cloudflare ✓

Blueprint →

Agent Skill

⚡ 90

Qwik (with Tailwind CSS) — Production Architecture & Agent Playbook

Deterministic architecture, strict typing, testing, and security guardrails for Qwik (with Tailwind CSS) projects.

Security & Infra @getsentry ✓

Blueprint →

Agent Skill

⚡ 88

Python (Flask JSON Guide) — Production Architecture & Agent Playbook

Deterministic architecture, strict typing, testing, and security guardrails for Python (Flask JSON Guide) projects.

Security & Infra @cloudflare ✓

Blueprint →

MCP Server

⚡ 79

LeakPatrol MCP — Real-Time Secret Scanning & Prompt-Exfiltration Firewall

Scan agent tool outputs, outbound HTTP requests, and git commits in real time to block API key leakage, PII exfiltration, and indirect prompt injection.

Security & Infra @simonw ✓

Blueprint →

Use Case

⚡ 83

Automated SOC2 Type II Continuous Evidence Collection

Export weekly cryptographic proof of PR approvals, production branch protections, and database encryption to Notion and Google Drive.

Security & Infra @simonw ✓

Blueprint →

Agent Skill

⚡ 88

SvelteKit (TypeScript Guide) — Production Architecture & Agent Playbook

Deterministic architecture, strict typing, testing, and security guardrails for SvelteKit (TypeScript Guide) projects.

Security & Infra @getsentry ✓

Blueprint →

Agent Skill

⚡ 86

React Native Expo — Production Architecture & Agent Playbook

Deterministic architecture, strict typing, testing, and security guardrails for React Native Expo projects.

Security & Infra @cloudflare ✓

Blueprint →

Use Case

⚡ 82

Kubernetes Pod CrashLoopBackOff & OOMKilled Root-Cause Triage

Detects restarting Kubernetes pods, pulls previous container logs (`--previous`), correlates memory limit spikes in Datadog, and proposes the manifest patc

Security & Infra @steipete ✓

Blueprint →

Agent Skill

⚡ 86

Go (Basic Setup) — Production Architecture & Agent Playbook

Deterministic architecture, strict typing, testing, and security guardrails for Go (Basic Setup) projects.

Security & Infra @getsentry ✓

Blueprint →

Agent Skill

⚡ 84

Node.js (MongoDB) — Production Architecture & Agent Playbook

Deterministic architecture, strict typing, testing, and security guardrails for Node.js (MongoDB) projects.

Security & Infra @getsentry ✓

Blueprint →

Agent Skill

⚡ 91

Java (Spring Boot, JPA) — Production Architecture & Agent Playbook

Deterministic architecture, strict typing, testing, and security guardrails for Java (Spring Boot, JPA) projects.

Security & Infra @simonw ✓

Blueprint →

Agent Skill

⚡ 80

Deno Integration — Production Architecture & Agent Playbook

Deterministic architecture, strict typing, testing, and security guardrails for Deno Integration projects.

Security & Infra @simonw ✓

Blueprint →

Use Case

⚡ 81

Zero-Egress R2 Presigned Upload & Malware Quarantine Pipeline

Issue short-lived Cloudflare R2 presigned PUT URLs, verify magic-byte MIME types in a Worker, and quarantine suspicious uploads.

Security & Infra @cloudflare ✓

Blueprint →

Agent Skill

⚡ 82

TYPO3 CMS Extension — Production Architecture & Agent Playbook

Deterministic architecture, strict typing, testing, and security guardrails for TYPO3 CMS Extension projects.

Security & Infra @getsentry ✓

Blueprint →

Agent Skill

⚡ 91

Qwik — Production Architecture & Agent Playbook

Deterministic architecture, strict typing, testing, and security guardrails for Qwik (Basic Setup with TypeScript and Vite) projects.

Security & Infra @cloudflare ✓

Blueprint →

Agent Skill

⚡ 82

Slack CLI Workspace & Manifest Management Playbook

Use when a developer works with the Slack CLI (slack command) to create, run, or manage a Slack app from the terminal: logging in or authenticating (slack

Security & Infra @getsentry ✓

Blueprint →

Grok Template

⚡ 87

Hermes Adversary — Red-Team Prompt & API Abuse Simulator

Probes your customer-facing AI features and API endpoints with adversarial jailbreaks, SSRF payloads, and boundary-condition inputs before launch.

Security & Infra @simonw ✓

Launch in Grok Bot ↗ Blueprint →

Agent Skill

⚡ 87

NativeScript — Production Architecture & Agent Playbook

Deterministic architecture, strict typing, testing, and security guardrails for NativeScript projects.

Security & Infra @simonw ✓

Blueprint →

Agent Skill

⚡ 87

Cloudflare Architecture & Product Selection Playbook

Discover and choose Cloudflare products for apps, APIs, AI agents, storage, networking, and security. Use for architecture and product selection, including

Security & Infra @getsentry ✓

Blueprint →

Grok Template

⚡ 86

VeilBreaker — Continuous SSL, DNS Hijack & Uptime Watchdog

Monitors production domains for unauthorized DNS record mutations, expiring TLS certificates, unexpected HTTP redirects, and origin latency regressions.

Security & Infra @cloudflare ✓

Launch in Grok Bot ↗ Blueprint →

Use Case

⚡ 84

Leaked Credential Blast-Radius Audit & Zero-Downtime Rotation

Detect exposed secrets in git history or logs, audit 30-day API access logs for abuse, and rotate keys across Cloudflare and Vercel.

Security & Infra @threepointone ✓

Blueprint →

MCP Server

⚡ 82

Dash0 MCP — Navigate your OpenTelemetry resources, investigate incidents and que

Navigate your OpenTelemetry resources, investigate incidents and query metrics, logs and traces on Dash0.

Security & Infra @cloudflare ✓

Blueprint →

Agent Skill

⚡ 87

Go ServeMux REST API — Production Architecture & Agent Playbook

Deterministic architecture, strict typing, testing, and security guardrails for Go ServeMux REST API projects.

Security & Infra @cloudflare ✓

Blueprint →

Grok Template

⚡ 85

Dependency CVE & Leaked Credential Pre-Merge Gatekeeper

Scans every commit and lockfile diff for accidentally staged API keys, high-severity npm/PyPI/Cargo CVEs, and typosquatted packages.

Security & Infra @steipete ✓

Launch in Grok Bot ↗ Blueprint →

Agent Skill

⚡ 81

Convex Best Practices — Production Architecture & Agent Playbook

Deterministic architecture, strict typing, testing, and security guardrails for Convex Best Practices projects.

Security & Infra @threepointone ✓

Blueprint →

Agent Skill

⚡ 83

TypeScript (NestJS Best Practices) — Production Architecture & Agent Playbook

Deterministic architecture, strict typing, testing, and security guardrails for TypeScript (NestJS Best Practices) projects.

Security & Infra @cloudflare ✓

Blueprint →

Agent Skill

⚡ 81

Next.js 15 — Production Architecture & Agent Playbook

27 architecture rules preventing AI hallucinations: insecure auth (getSession vs getUser), synchronous params, deprecated imports, missing RLS, and Stripe

Security & Infra @simonw ✓

Blueprint →

Agent Skill

⚡ 79

HTMX (Django) — Production Architecture & Agent Playbook

Deterministic architecture, strict typing, testing, and security guardrails for HTMX (Django) projects.

Security & Infra @threepointone ✓

Blueprint →

Agent Skill

⚡ 88

Go Backend Scalability — Production Architecture & Agent Playbook

Deterministic architecture, strict typing, testing, and security guardrails for Go Backend Scalability projects.

Security & Infra @simonw ✓

Blueprint →

Use Case

⚡ 85

Indirect Prompt-Injection Fence & Canary Token Audit

Inject benign canary strings into untrusted email, web, and guestbook inputs to verify agents never execute fenced data as instructions.

Security & Infra @steipete ✓

Blueprint →

Agent Skill

⚡ 86

Manifest — Production Architecture & Agent Playbook

Deterministic architecture, strict typing, testing, and security guardrails for Manifest projects.

Security & Infra @simonw ✓

Blueprint →

Agent Skill

⚡ 91

Python (FastAPI Best Practices) — Production Architecture & Agent Playbook

Deterministic architecture, strict typing, testing, and security guardrails for Python (FastAPI Best Practices) projects.

Security & Infra @steipete ✓

Blueprint →

Agent Skill

⚡ 80

HTMX (Flask) — Production Architecture & Agent Playbook

Deterministic architecture, strict typing, testing, and security guardrails for HTMX (Flask) projects.

Security & Infra @steipete ✓

Blueprint →

Agent Skill

⚡ 91

Svelte 5 vs Svelte 4 — Production Architecture & Agent Playbook

Deterministic architecture, strict typing, testing, and security guardrails for Svelte 5 vs Svelte 4 projects.

Security & Infra @threepointone ✓

Blueprint →

Agent Skill

⚡ 89

Flutter Expert — Production Architecture & Agent Playbook

Deterministic architecture, strict typing, testing, and security guardrails for Flutter Expert projects.

Security & Infra @steipete ✓

Blueprint →

Agent Skill

⚡ 80

Next.js (App Router) — Production Architecture & Agent Playbook

Deterministic architecture, strict typing, testing, and security guardrails for Next.js (App Router) projects.

Security & Infra @threepointone ✓

Blueprint →

Agent Skill

⚡ 89

ES Module (Node.js) — Production Architecture & Agent Playbook

Deterministic architecture, strict typing, testing, and security guardrails for ES Module (Node.js) projects.

Security & Infra @threepointone ✓

Blueprint →

Use Case

⚡ 86

Reachable CVE Triage & Automated Regression-Tested Patching

Filter Dependabot noise by verifying whether vulnerable functions are imported in production code before auto-merging patches.

Security & Infra @getsentry ✓

Blueprint →

MCP Server

⚡ 82

Unbound AI — Enterprise MCP Policy Governance, DLP & Audit Gateway

Enforce granular RBAC policies, PII redaction, and human-approval rules across every MCP server and AI coding agent in your engineering organization.

Security & Infra @simonw ✓

Blueprint →

Agent Skill

⚡ 85

Kubernetes Progressive Rollout & Pod Security Playbook

Audit Kubernetes manifests for resource requests, readiness probes, PodSecurityStandards, and safe rollouts.

Security & Infra @steipete ✓

Blueprint →

Agent Skill

⚡ 85

Stripe Projects Cloud Infrastructure Provisioning Playbook

> Use when the user wants to provision infrastructure or third-party services using Stripe Projects. Triggers: "I need a database", "set up auth", "add cac

Security & Infra @steipete ✓

Blueprint →

MCP Server ✓ Claimed

⚡ 81

OpenZiti Zero-Trust Overlay Network Gateway for Private MCP Servers

Reach internal VPC databases and private stdio/HTTP MCP servers without opening inbound firewall ports using OpenZiti mutual-TLS zero-trust tunnels.

Security & Infra @cloudflare ✓

Blueprint →

Agent Skill

⚡ 90

Cursor Rules Pack v2 — Production Architecture & Agent Playbook

7 sample production-tested rules (dependency discipline, error handling, state management, webhook security, and more). See the pack README for full-pack d

Security & Infra @getsentry ✓

Blueprint →

Agent Skill

⚡ 79

Python (Django Best Practices) — Production Architecture & Agent Playbook

Deterministic architecture, strict typing, testing, and security guardrails for Python (Django Best Practices) projects.

Security & Infra @getsentry ✓

Blueprint →

Agent Skill

⚡ 79

Solid.js (Tailwind CSS) — Production Architecture & Agent Playbook

Deterministic architecture, strict typing, testing, and security guardrails for Solid.js (Tailwind CSS) projects.

Security & Infra @steipete ✓

Blueprint →

Agent Skill

⚡ 86

OpenTofu & Terraform State Drift & Plan Guard Playbook

Validate Terraform/OpenTofu modules, enforce tflint/trivy security checks, and review plan diffs before apply.

Security & Infra @getsentry ✓

Blueprint →

Use Case

⚡ 87

Zero-Trust Access & Ephemeral SSH Certificate Rollout

Replace static bastion SSH keys and VPNs with Cloudflare Access identity-aware policies and short-lived certificates.

Security & Infra @cloudflare ✓

Blueprint →

MCP Server

⚡ 85

Cycode MCP — Boost security in your dev lifecycle via SAST, SCA, Secrets & IaC sc

Boost security in your dev lifecycle via SAST, SCA, Secrets & IaC scanning with Cycode.

Security & Infra @steipete ✓

Blueprint →

Agent Skill

⚡ 91

Android Native (Jetpack Compose) — Production Architecture & Agent Playbook

Deterministic architecture, strict typing, testing, and security guardrails for Android Native (Jetpack Compose) projects.

Security & Infra @cloudflare ✓

Blueprint →

Agent Skill

⚡ 80

Solid.js (TypeScript) — Production Architecture & Agent Playbook

Deterministic architecture, strict typing, testing, and security guardrails for Solid.js (TypeScript) projects.

Security & Infra @getsentry ✓

Blueprint →

Agent Skill

⚡ 87

Tailscale Zero-Trust ACL & Subnet Router GitOps Playbook

Manage Tailscale tailnet HuJSON ACL policies, SSH session recording, and CI validation via GitOps.

Security & Infra @cloudflare ✓

Blueprint →

Agent Skill

⚡ 85

Astro (TypeScript) — Production Architecture & Agent Playbook

Deterministic architecture, strict typing, testing, and security guardrails for Astro (TypeScript) projects.

Security & Infra @cloudflare ✓

Blueprint →

Agent Skill

⚡ 81

Solid.js (Basic Setup) — Production Architecture & Agent Playbook

Deterministic architecture, strict typing, testing, and security guardrails for Solid.js (Basic Setup) projects.

Security & Infra @cloudflare ✓

Blueprint →

Agent Skill

⚡ 84

Next.js (TypeScript) — Production Architecture & Agent Playbook

Deterministic architecture, strict typing, testing, and security guardrails for Next.js (TypeScript) projects.

Security & Infra @simonw ✓

Blueprint →

Connect Any Autonomous Agent in 1 Command