BUNDLE Security scanned24 skills

    Complete Past Skills Vault – All-In-One Bundle

    Unlock the full archive of all my previously published skills. Instead of purchasing each skill individually, grab this value pack to save money and get immediate access to every tool and asset in my past catalog.

    17 installs477 views5.0 (1 review)

    Works with every agent that reads SKILL.md — Claude Code, Cursor, Codex CLI, Gemini CLI, GitHub Copilot, Windsurf, OpenClaw, and more.

    RuH
    Created by
    RuH
    $165$235.96
    Save 30% · $70.96

    One payment, lifetime access. 24 skills unlock instantly in your library.

    30-day refund guarantee

    Instant unlock in your library

    Free updates from the creator

    What's included

    24 skills
    1/24
    Ai Code Security Auditor

    Audits code and LLM integrations for security vulnerabilities, exploit paths, and agent-specific risks.

    View skill
    $5$3.50Save 30%
    2/24
    Auth Session Security Reviewer

    Security-focused code reviewer for JWT, OAuth, session management, and password storage vulnerabilities.

    View skill
    $10$6.99Save 30%
    3/24
    CI/CD & Docker Security Linter

    Lints Docker and GitHub Actions configurations for security risks, root escalations, and supply chain vulnerabilities.

    View skill
    $5$3.50Save 30%
    4/24
    Cold Outreach Sequence

    Generate multi-touch, pain-first B2B outreach sequences with LinkedIn integration and spam-compliance checks.

    View skill
    $5.99$4.19Save 30%
    5/24
    Cross Browser Bug Triager

    Diagnose and fix engine-specific CSS and layout bugs for Safari, iOS, and mobile browsers.

    View skill
    $5$3.50Save 30%
    6/24
    CSS Architecture Reviewer

    Debug specificity conflicts and audit CSS architecture for maintainability using modern standards and methodologies.

    View skill
    $9$6.29Save 30%
    7/24
    DB Migration Safety Auditor

    Audit SQL, Rails, Django, and Prisma migrations for blocking locks, data loss, and deployment breaking changes.

    View skill
    $15$10.49Save 30%
    8/24
    DB Query Optimizer

    Detects and fixes N+1 queries, missing indexes, and ORM performance bottlenecks in SQL, Prisma, Django, and more.

    View skill
    $5$3.50Save 30%
    9/24
    Dependency vulnerability auditor

    Audits project dependencies for CVEs, license compliance risks, and supply-chain attacks.

    View skill
    $6.99$4.89Save 30%
    10/24
    IaC Cost and Security Auditor

    Audit Terraform, CDK, and CloudFormation for security vulnerabilities and cloud cost leaks.

    View skill
    $5$3.50Save 30%
    11/24
    Legacy Code Modernizer

    Plans and executes safe, incremental migrations of legacy frontend code to modern frameworks and build tools.

    View skill
    $5$3.50Save 30%
    12/24
    PR Review Standards

    Systematic code reviews with severity-tagged findings and concrete failure examples.

    View skill
    $9$6.29Save 30%
    13/24
    PRD Generator

    Transform feature ideas into engineering-ready PRDs with Given/When/Then criteria and explicit non-goals.

    View skill
    $9.99$6.99Save 30%
    14/24
    Proposal sow Generator

    Generates agency-grade proposals and SOWs with tiered pricing, explicit exclusions, and milestone terms.

    View skill
    $5$3.50Save 30%
    15/24
    Secret Leak Scanner

    Scans your codebase or staged git changes for accidentally committed API keys, AWS credentials, private keys and tokens before you push.

    View skill
    $5$3.50Save 30%
    16/24
    Security Audit Report

    Transform raw security scanner logs into client-ready audit reports with executive summaries and remediation steps.

    View skill
    $5$3.50Save 30%
    17/24
    Security Headers CSP Auditor

    Audit HTTP security headers and CSP strings for misconfigurations, weak values, and dangerous CORS patterns.

    View skill
    $5$3.50Save 30%
    18/24
    Security Hygiene Checklist

    Automated scanner for security misconfigurations, credential exposure risks, and unsafe environment settings.

    5.0 (1)View skill
    $5$3.50Save 30%
    19/24
    SEO Content Brief

    Generates data-driven SEO content briefs with competitor gap analysis, search intent mapping, and heading structures.

    View skill
    $6$4.20Save 30%
    20/24
    Structured Interview Kit Generator

    Generates structured, competency-mapped interview kits with behavioral questions and pre-defined scoring rubrics.

    View skill
    $9.99$6.99Save 30%
    21/24
    Support Response Drafter

    Drafts empathetic, de-escalating customer support replies that avoid robotic corporate jargon.

    View skill
    $9$6.29Save 30%
    22/24
    Test Quality Auditor

    Audit test suites for false confidence, flakiness, and hidden CI suppressions to ensure they catch real regressions.

    View skill
    $5$3.50Save 30%
    23/24
    wcag accessibility auditor

    Audit web apps for WCAG 2.2 compliance with prioritized remediation reports and code-level fixes.

    View skill
    $50$34.96Save 30%
    24/24
    Web Performance Vitals Auditor

    A diagnostic engine for Core Web Vitals that identifies root causes for slow LCP, INP, and CLS scores.

    View skill
    $35$24.47Save 30%

    See it in action

    Ai Code Security Auditor

    Example session with this skill installed

    Audit the new authentication middleware and the OpenAI tool-calling logic I just wrote for security vulnerabilities. Is this safe to deploy?

    • Read your context and instructions
    • Compiled the ai code security
    • Generated the document

    I have completed a security audit of the new authentication middleware and the LLM tool-calling logic. While the basic JWT validation is sound, there are two high-severity issues related to tool permissions and error logging.

    Security Audit — Auth & LLM Integration

    Critical

    [src/auth/middleware.ts:24] Sensitive data leak in logs — The middleware logs the entire req.headers object when a token fails validation, which includes the raw Authorization header. Concretely, an attacker or a system admin with log access could harvest valid tokens from failed attempts due to unrelated malformed headers.
    Fix:

    // Change this:
    console.error("Auth failed:", req.headers);
    // To this:
    console.error("Auth failed for user-agent:", req.headers['user-agent']);
    

    High

    [src/agents/openai_tools.ts:88] Excessive tool permissions — The execute_shell tool is exposed to the LLM without a restricted allowlist or path validation. An attacker could use prompt injection to trick the model into executing rm -rf / or exfiltrating .env files.
    Fix:

    const ALLOWED_COMMANDS = ['ls', 'git status', 'npm test'];
    if (!ALLOWED_COMMANDS.includes(input.command)) {
      throw new Error("Unauthorized command execution");
    }
    

    Medium / Low

    [src/auth/middleware.ts:12] Weak JWT secret — The code uses a hardcoded default string for development. Ensure this is pulled from a secure environment variable in production.

    Next steps

    1. Apply the log masking fix to middleware.ts immediately.
    2. Implement the command allowlist in the tool-calling logic.
    3. Verify that your production environment variables are properly configured for the JWT secret.

    ai-code-security-auditor.pdf

    PDF · document

    Generated

    Example file from a real run - the skill writes it into your workspace.

    How to install

    Works the same in every agent - Claude, Cursor, Codex, Copilot and 20+ more.

    ~30 seconds
    1. 1

      Download the ZIP

      Free skills download straight away. Paid skills unlock right after purchase.

    2. 2

      Unzip into your skills folder

      Every agent reads skills from one folder on your machine. Drop the unzipped folder in there.

    3. 3

      Ask your agent to use it

      Restart the agent if it was already running. It picks the skill up automatically - no config needed.

    Skills folder by agent

    Click the path to copy it. Create the folder if it does not exist yet.

    Reviews

    No reviews yet

    Be one of the first to try it. Every skill in this bundle passes our trust checks.

    Security scanned

    Passed our 8-point scan before listing

    17 installs

    Downloaded by developers to date

    30-day refund

    Not a fit? Get your money back

    Frequently asked questions

    More bundles from RuH