GitHub
csrf-testing
CSRF跨站请求伪造测试的专业技能和方法论
☆ 799Voir le skill
Skills IA devops security
Découvrez les skills devops security, comparez leurs dépôts et consultez leurs instructions.
Catégories: devops security
devops security Effacer les filtres
Explorer
GitHub
ssrf-testing
SSRF服务器端请求伪造测试的专业技能和方法论
☆ 799Voir le skill
GitHub
cloud-security-audit
云安全审计的专业技能和方法论
☆ 799Voir le skill
GitHub
api-security-testing
API安全测试的专业技能和方法论
☆ 799Voir le skill
GitHub
xpath-injection-testing
XPath注入漏洞测试的专业技能和方法论
☆ 799Voir le skill
GitHub
ldap-injection-testing
LDAP注入漏洞测试的专业技能和方法论
☆ 799Voir le skill
GitHub
vulnerability-assessment
漏洞评估的专业技能和方法论
☆ 799Voir le skill
GitHub
ask-questions-if-underspecified
Clarify requirements before implementing. Do not use automatically, only when invoked explicitly.
☆ 783Voir le skill
GitHub
oauth-social-login
Implement OAuth 2.0 social login with Google, GitHub, and other providers. Handles token exchange, user creation, and account linking.
☆ 756Voir le skill
GitHub
webhook-security
Implement secure webhook handling with signature verification, replay protection, and idempotency. Use when receiving webhooks from third-party services like Stripe, GitHub, Twilio, or building your own webhook...
☆ 756Voir le skill
GitHub
idempotency
Implement idempotent API operations to safely handle retries and prevent duplicate processing. Use when building payment APIs, order systems, or any operation that must not be executed twice.
☆ 756Voir le skill
GitHub
jwt-auth
Implement secure JWT authentication with refresh token rotation, secure storage, and automatic renewal. Use when building authentication for SPAs, mobile apps, or APIs that need stateless auth with refresh capa...
☆ 756Voir le skill
GitHub
rate-limiting
Implement subscription-tier aware API rate limiting with sliding window algorithm. Use when building SaaS APIs that need per-user or per-tier rate limits with Redis or in-memory storage.
☆ 756Voir le skill
GitHub
tier-entitlements
Implement subscription tier-based feature gating and usage limits. Centralized tier configuration, database usage tracking, and clean APIs for checking limits.
☆ 756Voir le skill
GitHub
file-uploads
Production-grade secure file upload pipeline with multi-stage validation, malware scanning (ClamAV), hash-based duplicate detection, and race condition protection using distributed locks.
☆ 756Voir le skill
GitHub
audit-logging
Comprehensive audit logging for compliance and security. Track user actions, data changes, and system events with tamper-proof storage.
☆ 756Voir le skill
GitHub
moai-platform-firebase-auth
Firebase Authentication specialist covering Google ecosystem, social auth, phone auth, and mobile-first patterns. Use when building Firebase-backed or Google ecosystem apps, implementing social login, or adding...
☆ 659Voir le skill
GitHub
moai-platform-clerk
Clerk modern authentication specialist covering WebAuthn, passkeys, passwordless, and beautiful UI components. Use when implementing modern auth with great UX.
☆ 659Voir le skill
GitHub
moai-platform-convex
Convex real-time backend specialist covering TypeScript-first reactive patterns, optimistic updates, server functions, and file storage. Use when building real-time collaborative apps, implementing reactive que...
☆ 659Voir le skill
GitHub
moai-platform-auth0
Auth0 security specialist covering attack protection, multi-factor authentication, token security, sender constraining, and compliance. Use when implementing Auth0 security features, configuring attack defenses...
☆ 659Voir le skill
GitHub
onvifscan
ONVIF device security scanner for testing authentication and brute-forcing credentials. Use when you need to assess security of IP cameras or ONVIF-enabled devices.
☆ 651Voir le skill
GitHub
wsdiscovery
WS-Discovery protocol scanner for discovering and enumerating ONVIF cameras and IoT devices on the network. Use when you need to discover ONVIF devices, cameras, or WS-Discovery enabled equipment on a network.
☆ 651Voir le skill
GitHub
ai-truthfulness-enforcer
MANDATORY verification system that prevents Claude Code instances from making false claims or fabricating evidence. Enforces cryptographic verification, real testing evidence, and automatic claim validation bef...
☆ 639Voir le skill
GitHub
secrets-scanner
Detects leaked API keys, tokens, passwords, and credentials in code with pre-commit hooks, CI checks, scanning rules, and remediation procedures. Use for "secret scanning", "credential detection", "API key leak...
☆ 626Voir le skill
Le classement utilise les étoiles du dépôt GitHub indexé. Plusieurs skills peuvent partager ce nombre : ce n’est ni un nombre d’installations ni une note de qualité.