aif-security-checklist
Security Checklist
Comprehensive security checklist based on OWASP Top 10 (2021) and industry best practices.
Quick Reference
/aif-security-checklist— Full audit checklist/aif-security-checklist auth— Authentication & sessions/aif-security-checklist injection— SQL/NoSQL/Command injection/aif-security-checklist xss— Cross-site scripting/aif-security-checklist csrf— Cross-site request forgery/aif-security-checklist secrets— Secrets & credentials/aif-security-checklist api— API security/aif-security-checklist infra— Infrastructure security/aif-security-checklist prompt-injection— LLM prompt injection/aif-security-checklist race-condition— Race conditions & TOCTOU/aif-security-checklist ignore <item>— Ignore a specific check item
Config
More from lee-to/ai-factory
aif-skill-generator
Generate professional Agent Skills for AI agents. Creates complete skill packages with SKILL.md, references, scripts, and templates. Use when creating new skills, generating custom slash commands, or building reusable AI capabilities. Validates against Agent Skills specification.
41aif-implement
Execute implementation tasks from the current plan. Works through tasks sequentially, marks completion, and preserves progress for continuation across sessions. Use when user says "implement", "start coding", "execute plan", or "continue implementation".
41aif-plan
Plan implementation for a feature or task. Two modes — fast (single quick plan) or full (richer plan with optional git branch/worktree flow). Use when user says "plan", "new feature", "start feature", "create tasks".
38aif-improve
Refine and enhance an existing implementation plan with a second iteration. Re-analyzes the codebase, checks for gaps, missing tasks, wrong dependencies, and improves the plan quality. Use after /aif-plan to polish the plan before implementation, or to improve an existing /aif-fix plan.
37aif-commit
Create conventional commit messages by analyzing staged changes. Generates semantic commit messages following the Conventional Commits specification. Use when user says "commit", "save changes", or "create commit".
37aif
Set up agent context for a project. Analyzes tech stack, installs relevant skills from skills.sh, generates custom skills, and configures MCP servers. Use when starting new project, setting up AI context, or asking "set up project", "configure AI", "what skills do I need".
36