rysweet/amplihack
2 skills1.6k installs126 starsGitHub
Install
npx skills add https://github.com/rysweet/amplihackSkills in this repo
1Cybersecurity AnalystCybersecurity Analyst is an agent skill that walks a solo builder through security analysis using established frameworks rather than ad-hoc worry lists. It centers on the CIA triad and STRIDE so you can reason about spoofing, tampering, repudiation, disclosure, denial of service, and privilege escalation in systems you are designing or shipping. The skill fits threat modeling and risk assessment, reviewing code for common vulnerability classes, validating cryptography and access control, and scoping incident response or forensic questions when something goes wrong. It also helps when you need a structured lens for SOC 2, GDPR, or HIPAA style compliance conversations without pretending to replace a formal audit. Install it when your product touches sensitive data, authentication, payments, or multi-tenant boundaries and you want your coding agent to apply consistent security vocabulary during design and review passes.1kinstalls2Lawyer AnalystLawyer Analyst is an agent skill that guides solo builders through legal-information analysis using IRAC and domain checklists for contracts, intellectual property, privacy regulation, liability, and platform governance. It fits indie founders who must draft or review terms of service, privacy policies, vendor agreements, employment basics, and open-source licensing without treating chat output as a substitute for counsel. The skill names when to skip purely technical or UX-only threads and when regulatory dimensions matter. During validation it helps bound scope around compliance cost and risk; before ship and launch it supports security-adjacent privacy requirements and distribution rules; in growth it can frame content moderation and lifecycle obligations. Outputs are structured risk identification and argument maps—not filings or attorney work product. Always escalate binding decisions to a licensed attorney.608installs