GitHub
security-review
A specialist skill for security reviews, threat modeling, and remediation guidance. Use for auth/permissions changes, secrets or PII handling, public endpoints, or dependency upgrades.
Skills IA blockchain security
Découvrez les skills blockchain security, comparez leurs dépôts et consultez leurs instructions.
Catégories: blockchain security
blockchain security Effacer les filtres
Explorer
GitHub
rendering-check
SEO 호환성 검증 - 브라우저 API 사용 및 이중 구현 확인, SPA 감지 시 경고
GitHub
1password
Plan, validate, and use 1Password CLI setup for secret injection and auth. Use when tasks need 1Password CLI usage, secret references, op run/read/inject, or provisioning secrets via env vars/.env files and scr...
GitHub
better-auth-best-practices
Analyze Better Auth setups and highlight secure integration best practices. Use this when adding Better Auth, configuring plugins/providers, or debugging auth/session flows.
GitHub
claude-code-sdk
Claude Code SDK integration for building AI-powered applications with OAuth and API Key authentication
GitHub
security-practices
OWASP Top 10, authentication, and secure coding practices
GitHub
security
Security patterns for the 3SC widget host. Covers credential storage, input validation, secure coding practices, and protecting user data.
GitHub
rbac-security
Role-based access control (RBAC) patterns, authentication wrappers, authorization checks, input validation with Zod schemas, security boundaries, server action security, real-time message validation, preventing...
GitHub
reviewing-security
OWASP API Security Top 10 (2023) と {開発言語をここに書く} セキュリティベストプラクティス。脆弱性検出。Use when: セキュリティ、脆弱性、OWASP、認証、認可、監査を依頼された時。
GitHub
permissions
Guide for working with team-based permissions and authorization in the WODsmith codebase. Use when touching TEAM_PERMISSIONS constants, hasTeamPermission/requireTeamPermission functions, adding permission check...
GitHub
security-audit
Audit system security configuration for vulnerabilities. Use when the user says "audit security", "harden server", "check security", "is my server secure", "security review", or asks about server hardening.
GitHub
security-expert
Expert-level application security, OWASP Top 10, penetration testing, and security best practices
GitHub
fnox-secrets
Manages fnox encrypted secrets for the micelio project. Use when setting up secrets, adding new environment variables, configuring deployment credentials, or troubleshooting fnox/age encryption.
GitHub
create-auth-skill
Skill for creating auth layers in TypeScript/JavaScript apps using Better Auth.
GitHub
better-auth-best-practices
Skill for integrating Better Auth - the comprehensive TypeScript authentication framework.
GitHub
jwt-attack-surface
Audit JWT implementation for algorithm confusion, secret weakness, claim validation issues, and token handling vulnerabilities. Use when reviewing authentication systems using JWT.
GitHub
crypto-audit
Audit cryptographic implementations for weak algorithms, insecure defaults, predictable randomness, key management issues, and timing attacks. Use when reviewing security-critical crypto code.
GitHub
injection-hunter
Hunt for injection vulnerabilities including SQL injection, command injection, XSS, SSTI, path traversal, LDAP injection, and other input validation flaws. Use when auditing code that processes user input.
GitHub
go-security-audit
Security audit for Go backend code and SDKs. Covers Go-specific vulnerabilities, common security pitfalls, and best practices. Use when auditing Go codebases.
GitHub
authz-bypass-hunter
Hunt for authorization bypass vulnerabilities including IDOR, privilege escalation, missing access controls, broken object-level authorization. Use when auditing authentication/authorization code or API endpoin...
GitHub
dos-resource-exhaustion
Find denial of service vulnerabilities through resource exhaustion, algorithmic complexity, memory exhaustion, and file/network resource abuse. Use when auditing code for availability issues.
GitHub
idor-vulnerability-testing
This skill should be used when the user asks to "test for insecure direct object references," "find IDOR vulnerabilities," "exploit broken access control," "enumerate user IDs or object references," or "bypass...
GitHub
secrets-hunter
Hunt for hardcoded secrets, API keys, tokens, credentials, private keys, and sensitive configuration. Use when auditing code for credential exposure or before committing code.
GitHub
security-review
This skill should be used when the user asks to "security review", "check for vulnerabilities", "audit security", "find security issues", "security scan", "check for injection", "find hardcoded secrets", "OWASP...
Le classement utilise les étoiles du dépôt GitHub indexé. Plusieurs skills peuvent partager ce nombre : ce n’est ni un nombre d’installations ni une note de qualité.