Skill.md files: teach Claude once, not every chat.

• SKILL.md

---
name: sandbase-mcp
description: Discover, inspect, and invoke 2,000+ AI models and APIs through SandBase's local MCP bridge with explicit schema and cost checks.
---

• SKILL.md

---
name: sast-configuration
description: Static Application Security Testing (SAST) tool setup, configuration, and custom rule creation for comprehensive security scanning across multiple programming languages.
---

• SKILL.md

---
name: sast-scanning
description: Perform static application security testing with tools like Semgrep, CodeQL, and SonarQube.
---

• SKILL.md

---
name: satori
description: Clinically informed wisdom companion blending psychology and philosophy into a structured thinking partner
---

• SKILL.md

---
name: sbom-supply-chain
description: Generate, sign, and verify SBOMs and provenance attestations to secure the software supply chain. Use when implementing SLSA controls, artifact trust policies, or compliance evidence for releases.
---

• SKILL.md

---
name: scanning-tools
description: Master essential security scanning tools for network discovery, vulnerability assessment, web application testing, wireless security, and compliance validation. This skill covers tool selection, configuration, and practical usage across different scanning categories.
---

• SKILL.md

---
name: schema-markup
description: Design, validate, and optimize schema.org structured data for eligibility, correctness, and measurable SEO impact.
---

• SKILL.md

---
name: scientific-writing
description: This is the core skill for the deep research and writing tool—combining AI-driven deep research with well-formatted written outputs. Every document produced is backed by comprehensive literature search and verified citations through the research-lookup skill.
---

• SKILL.md

---
name: scikit-learn
description: Machine learning in Python with scikit-learn. Use for classification, regression, clustering, model evaluation, and ML pipelines.
---

• SKILL.md

---
name: screen-adverse-media
description: Screen a person or organisation for adverse media coverage, PEP status, and sanctions exposure — corroboration-gated, returns "review" never "guilty". Use when the user asks to screen someone before onboarding, partnership, or investment; for AML/CTF flows; or for ongoing counterparty monitoring.
---

• SKILL.md

---
name: screen-reader-testing
description: Practical guide to testing web applications with screen readers for comprehensive accessibility validation.
---

• SKILL.md

---
name: screenshots
description: Generate marketing screenshots of your app using Playwright. Use when the user wants to create screenshots for Product Hunt, social media, landing pages, or documentation.
---

• SKILL.md

---
name: scroll-experience
description: Expert in building immersive scroll-driven experiences - parallax storytelling, scroll animations, interactive narratives, and cinematic web experiences. Like NY Times interactives, Apple product pages, and award-winning web experiences.
---

• SKILL.md

---
name: sdk-dx
description: Design SDKs that developers love to use—APIs that feel native, error messages that guide, and experiences that reduce friction. This skill covers creating SDKs that drive adoption through exceptional developer experience rather than aggressive marketing.
---

• SKILL.md

---
name: seaborn
description: Seaborn is a Python visualization library for creating publication-quality statistical graphics. Use this skill for dataset-oriented plotting, multivariate analysis, automatic statistical estimation, and complex multi-panel figures with minimal code.
---

• SKILL.md

---
name: secrets-management
description: Secure secrets management practices for CI/CD pipelines using Vault, AWS Secrets Manager, and other tools.
---

• SKILL.md

---
name: security-and-hardening
description: Hardens code against vulnerabilities. Use when handling user input, authentication, data storage, or external integrations. Use when building any feature that accepts untrusted data, manages user sessions, or interacts with third-party services.
---

• SKILL.md

---
name: security-audit
description: Comprehensive security auditing workflow covering web application testing, API security, penetration testing, vulnerability scanning, and security hardening.
---

• SKILL.md

---
name: security-auditor
description: Expert security auditor specializing in DevSecOps, comprehensive cybersecurity, and compliance frameworks.
---

• SKILL.md

---
name: security-automation
description: Automate security workflows and remediation. Build security pipelines, automate compliance checks, and implement SOAR capabilities. Use when scaling security operations or implementing DevSecOps.
---

• SKILL.md

---
name: security-compliance-compliance-check
description: You are a compliance expert specializing in regulatory requirements for software systems including GDPR, HIPAA, SOC2, PCI-DSS, and other industry standards. Perform comprehensive compliance audits and provide implementation guidance for achieving and maintaining compliance.
---

• SKILL.md

---
name: security-requirement-extraction
description: Derive security requirements from threat models and business context. Use when translating threats into actionable requirements, creating security user stories, or building security test cases.
---

• SKILL.md

---
name: security-scanning-security-dependencies
description: You are a security expert specializing in dependency vulnerability analysis, SBOM generation, and supply chain security. Scan project dependencies across multiple ecosystems to identify vulnerabilities, assess risks, and provide automated remediation strategies.
---

• SKILL.md

---
name: security-scanning-security-hardening
description: Coordinate multi-layer security scanning and hardening across application, infrastructure, and compliance controls.
---