Herman Stevens
Community@igbuend · Singapore
Loves technology, traveling, photography and Belgian Trappist beers. Installed Slackware Linux from 24 floppy disks and it all went downhill from then.
Agent Skills by Herman Stevens
Showing 89 vetted skills indexed across 1 GitHub repositories.
cryptography-as-a-service-pattern
Delegate cryptographic operations and key management to an external service.
cryptographic-action-pattern
Guide secure integration of cryptographic primitives into software systems.
transparent-encrypted-storage-pattern
Implement transparent encrypted storage patterns for data at rest protection.
osv-scanner
Scan project dependencies for known vulnerabilities using Google OSV-Scanner.
weak-encryption-anti-pattern
Identifies weak encryption algorithms, insecure modes, and improper nonce/IV usage in code.
skill-reviewer
Audits AI skill metadata, prose, and structure for vendor-independent best practices and risks.
sarif-tools
Process, analyze, and transform SARIF files using the Microsoft sarif-tools CLI.
log-injection-anti-pattern
Detect unsanitized user input in log messages to prevent CWE-117 injection.
authentication-pattern
Implement authentication flows with credential management and security considerations.
hardcoded-secrets-anti-pattern
Detect hardcoded credentials and API keys in source code.
insufficient-randomness-anti-pattern
Identifies weak random number generators in security-sensitive code and suggests CSPRNGs.
noir
Scan codebases to discover and catalog API endpoints across web frameworks.
mass-assignment-anti-pattern
Detect mass assignment vulnerabilities (CWE-915) in Python and JavaScript code.
unicode-security-anti-pattern
Detects and prevents Unicode-based security vulnerabilities in strings.
type-confusion-anti-pattern
Detect type-confusion vulnerabilities (CWE-843) in dynamic-language code with == usage and weak input validation.
cryptographic-key-management-pattern
Manage cryptographic key lifecycle with configuration and action protection guidance.
agent-review
Review AI agent codebases for architecture, design patterns, and error handling.
self-managed-cryptography-pattern
Manage cryptographic key storage, derivation, and lifecycle for self-managed applications.
booktabs
Generate LaTeX table code using booktabs, tabularx, and siunitx packages.
graphicx
Include and manipulate graphics in LaTeX documents using the graphicx package.
session-based-access-control-pattern
Implement session-based authentication with authorization checks for web applications.
limit-request-rate-pattern
Implement rate limiting and throttling security patterns for API endpoints.
data-visualization
Guide data visualization design with Tufte, Gestalt, WCAG, and color theory.
semgrep
Automates static code analysis with Semgrep to detect vulnerabilities and anti-patterns.