Découvrez les skills devops security, comparez leurs dépôts et consultez leurs instructions.
Master authentication and authorization patterns including JWT, OAuth2, session management, and RBAC to build secure, scalable access control systems. Use when implementing auth systems, securing APIs, or debug...
A skill to integrate better-auth. And auth framework for TypeScript projects.
A skill to create auth service for new applications.
Generates authentication infrastructure with Sign in with Apple, biometrics, and Keychain storage. Use when user wants to add authentication, login, or Sign in with Apple.
Clarify requirements before implementing. Do not use automatically, only when invoked explicitly.
REST API standards for Java Spring services. Covers Bitso API guidelines, authentication integration, OpenAPI documentation, and RFC-37 service documentation. Use when creating or maintaining REST endpoints.
Performs security analysis on code changes including credential scanning, input validation, authentication checks, and dependency vulnerability assessment. Use when reviewing code for security issues or before...
Authenticate requests through Cloudflare Access / Cloudflare Tunnel using Service Token headers. Use when accessing services protected by Cloudflare Zero Trust.
Secures Kirby sites with access restriction, user roles, permissions, and protected downloads. Use when implementing login/role-based access, permissions, or file protection.
Regulatory compliance testing for GDPR, CCPA, HIPAA, SOC2, PCI-DSS and industry-specific regulations. Use when ensuring legal compliance, preparing for audits, or handling sensitive data.
Apply comprehensive API testing patterns including contract testing, REST/GraphQL testing, and integration testing. Use when testing APIs, microservices, or designing API test strategies.
Test for security vulnerabilities using OWASP principles and security testing techniques. Use when conducting security audits, testing authentication/authorization, or implementing security practices.
Expert penetration tester specializing in ethical hacking, vulnerability assessment, and security testing. Masters offensive security techniques, exploit development, and comprehensive security assessments with...
Code Reviewer Specialist. Use this to review PRs, check security, and ensure code quality standards before merging.
Security Auditor Specialist. Use this to review PRs for vulnerabilities, perform STRIDE threat modeling, and ensure zero-trust architecture.
Workflow to review authentication and authorization flows (sessions, tokens, RBAC/ABAC) and produce fix guidance.
Process for tightening input validation, canonicalization, and safe parsing to prevent injection and logic abuse.
Workflow for preventing secret leaks and sensitive logging (PII/credentials) and adding redaction defaults.
Repeatable process for an application security code review that produces prioritized findings and fix guidance.
Security best practices including CSP, XSS prevention, input validation, and secrets management. Use when reviewing security or hardening applications.
Modern application security patterns aligned with OWASP Top 10:2025 (final), OWASP API Security Top 10 (2023), NIST SSDF, zero trust (incl. NSA ZIGs 2026), supply chain security (SBOM), passkeys/WebAuthn, authe...
Docs as QA: audit doc coverage and freshness, validate runbooks, and maintain documentation quality gates for APIs, services, events, and operational workflows. Includes AI-assisted audits, observability patter...
Use this skill when asked to investigate a user account for security issues, suspicious activity, or compliance review. Triggers on keywords like "investigate user", "security investigation", "user investigatio...
Use this skill when asked to investigate Conditional Access policy changes, sign-in failures related to CA policies (error codes 53000, 50074, 530032), or suspected policy bypass/manipulation. Triggers on keywo...
Le classement utilise les étoiles du dépôt GitHub indexé. Plusieurs skills peuvent partager ce nombre : ce n’est ni un nombre d’installations ni une note de qualité.