From ai-brain-starter
Generates a client-ready security hygiene report for a prospect domain covering SSL/TLS grade, HTTP headers, email auth, and server fingerprint leaks. Useful as a lead magnet for consulting practices.
How this skill is triggered — by the user, by Claude, or both
Slash command
/ai-brain-starter:security-snapshot <domain> [--company 'Display Name']<domain> [--company 'Display Name']The summary Claude sees in its skill listing — used to decide when to auto-load this skill
When the user types /security-snapshot [domain] or asks for a security check on a prospect, run the security snapshot generator and deliver a client-ready report.
When the user types /security-snapshot [domain] or asks for a security check on a prospect, run the security snapshot generator and deliver a client-ready report.
Prospects rarely have budget for a full security audit upfront, but they will read a free one-page report that exposes real issues with their public-facing setup. This skill generates that report in under 3 minutes and opens the door for a paid follow-up on security work, AI implementation, or adjacent consulting.
python3 "$HOME/.claude/skills/ai-brain-starter/scripts/security-snapshot.py" <domain> --company "<Display Name>"
The script ships with the starter repo. Output goes to $SNAPSHOTS_DIR if set, otherwise $VAULT_ROOT/security-snapshots/ if VAULT_ROOT is set, otherwise a security-snapshots/ folder next to wherever you run the command from. It takes 60-180 seconds because SSL Labs is slow. The script prints the saved report path to stdout and progress to stderr.
$SNAPSHOTS_DIR/<domain>/<YYYY-MM-DD>-snapshot.md (defaults to $VAULT_ROOT/security-snapshots/ when SNAPSHOTS_DIR is unset). Read the file before summarizing.The script produces the base report. If the user asks you to customize or rewrite any section before sending, follow the generic voice rules in templates/rules/voice-firewall.md:
--out to write to an internal folder).The script does not currently cover these because they need paid API keys or explicit authorization. Offer to add manually when relevant:
$SNAPSHOTS_DIR/
├── acme.com/
│ ├── 2026-04-16-snapshot.md
│ └── 2026-07-22-snapshot.md (if re-run later)
└── another-prospect.co/
└── 2026-04-18-snapshot.md
One folder per domain. Re-running on the same day overwrites. Running weeks later creates a new dated file so you can track improvement (or lack of it) across conversations.
npx claudepluginhub mycelium-hq/ai-brain-starter --plugin ai-brain-starterEstablishes a security baseline for websites and web apps covering HTTPS, TLS, security headers, CSP, secrets management, and vulnerability scans. Use before launch or for periodic audits.
Analyzes HTTP/HTTPS security headers for vulnerabilities, misconfigurations, OWASP compliance, cookie issues, and info leaks. Assigns grades and suggests Nginx/Apache/Cloudflare fixes.
Audits domain email deliverability (SPF, DKIM, DMARC, MX records, blacklists, TLS), generates 0-100 health score with prioritized fixes, checks bulk sender compliance, provides DNS updates.