check▌

Security audit framework for web applications and REST APIs covering OWASP Top 10 vulnerabilities. \n \n 20 rules organized across 5 categories: Authentication & Authorization, Data Protection, Input/Output Security, Configuration & Headers, and API & Monitoring \n Covers critical vulnerabilities including injection attacks, broken access control, cryptographic failures, CSRF, SSRF, and insecure deserialization with code examples for both vulnerable and secure patterns \n Includes

Systematic verification of claims in generated content. Designed to catch hallucinations, confabulations, and unsupported assertions.

Perform comprehensive QC on the presentation across four dimensions. Read every slide, then report findings.

CRITICAL INSTRUCTION FOR AI AGENTS: You are NOT just a command-runner. You are the Lead Security Analyst. This tool provides the data, but YOU provide the intelligence.

Systematically verify suspected security bugs and classify them as true or false positives with documented evidence. \n \n Guides you through structured claim analysis, data flow tracing, and gate reviews to eliminate false positives before reporting \n Supports two verification routes: standard (single-pass checklist for straightforward bugs) and deep (full task orchestration for complex, cross-component, or concurrent bugs) \n Includes built-in escalation checkpoints, bug-class-specific verifi

Apply PDCA cycle for continuous improvement through iterative problem-solving and process optimization.

Universal code quality tool supporting 70+ linters for 40+ languages via qlty CLI.

Use this skill to verify the technical accuracy of concept documentation pages for the 33 JavaScript Concepts project. This ensures we're not spreading misinformation about JavaScript.

Implement health check endpoints to monitor service health, dependencies, and readiness for traffic.

Run every .continue/checks/*.md check against the current changes, just like the GitHub PR checks do in CI.