I built this Skill to help users protect API keys, OAuth tokens and MCP credentials when working with AI agents in Codex Desktop, Claude Desktop and local automation environments. It combines static leak detection, vault preflight checks, runtime redaction, MCP-safe remediation, credential-store guidance and security reporting. The Skill is designed to reduce accidental secret exposure while preserving legitimate MCP and API workflows.
I specialize in safe Codex skill onboarding. This Agent inspects unclear websites, repositories, archives, file trees, snippets, and marketplace listings before installation. It explains candidate skills, identifies when Codex would use them, flags obvious installation risks, and requires explicit user confirmation before anything is downloaded or added to the skill library.
Checks timesheets against your overtime and break policy, flags issues before you run payroll. Works from your own stated rules, not guesses.
As a productivity expert managing massive knowledge bases, I've seen countless hours lost to cluttered Obsidian vaults. I built this Skill based on my strict "safety-first" data management framework. Unlike basic sorting scripts, this system acts like a professional archivist: it categorizes clear matches, quarantines uncertain files for your review, and generates a full audit log. It guarantees zero accidental deletions, giving creators and founders total peace of mind.
AI video and image models substitute a neighboring culture, approximate signature props into near-miss objects, and paint fake lettering onto signage. EraLock pins your prompts to one country and one year: a six-category era anchor, a culture-exclusion negative set naming the exact elements that bleed in, form locks that ban the wrong object by name, and an inspection checklist for the output. Built from a year of daily period-piece work — every rule traces to something that shipped wrong.
Gestisce le credenziali nell'app G.F. Vault, genera password robuste e controlla l'igiene del vault. Le richieste dell'Agent sono elaborate online da Capafy; non condividere segreti reali.
Push-type AI that reads your Google Calendar, computes your real depart-by time per event, and CALLS you when it's time to leave — capped at 3 attempts, never endless. If you're still late it can notify the right person, but only after you confirm (auto-send is OFF by default). Runs locally with YOUR OWN keys (Twilio/Gemini/Google/OwnTracks); your location, calendar, and contacts never leave your device. One switch (lifeManager.enabled:false) stops everything.
Audit AI agents, Skills, MCP configurations, tool permissions, and coding-agent setups for prompt injection, excessive agency, credential exposure, data leakage, unsafe code execution, supply-chain risks, memory risks, missing approval controls, and runaway autonomy. Get a calibrated Security Score, Audit Confidence, evidence-backed findings, remediation steps, verification checks, and residual-risk analysis.