GitHub
enforce-business-rules
Validates code against the project's critical business logic (Multi-tenancy, RBAC, IDOR, SaaS Limits).
☆ 29Voir le skill
Skills IA devops security
Découvrez les skills devops security, comparez leurs dépôts et consultez leurs instructions.
Catégories: devops security
devops security Effacer les filtres
Explorer
GitHub
api-hardening
API security hardening patterns. Use when implementing rate limiting, input validation, CORS configuration, API key management, request throttling, or protecting endpoints from abuse. Covers defense-in-depth st...
☆ 29Voir le skill
GitHub
secure-auth
Secure authentication implementation patterns. Use when implementing user login, registration, password reset, session management, JWT authentication, or OAuth integration. Provides production-ready patterns th...
☆ 29Voir le skill
GitHub
security-checklist
Pre-deployment security audit for web applications. Use when reviewing code before shipping, auditing an existing application, or when users mention "security review," "ready to deploy," "going to production,"...
☆ 29Voir le skill
GitHub
fintech-integration
Use when integrating Plaid, Stripe, payment processors, or financial APIs - covers account linking, payment processing, KYC/AML compliance, and webhook handlingUse when ", " mentioned.
☆ 29Voir le skill
GitHub
auth-specialist
Authentication and authorization expert for OAuth, sessions, JWT, MFA, and identity securityUse when "authentication flow, login system, oauth integration, jwt tokens, session management, password hashing, mfa...
☆ 29Voir le skill
GitHub
clerk-auth
Expert patterns for Clerk auth implementation, middleware, organizations, webhooks, and user syncUse when "adding authentication, clerk auth, user authentication, sign in, sign up, user management, multi-tenanc...
☆ 29Voir le skill
GitHub
authentication-oauth
Expert guidance on authentication implementation including OAuth 2.0/OIDC, JWT tokens, session management, and secure password handling. Covers both implementing auth from scratch and integrating auth providers...
☆ 29Voir le skill
GitHub
security-review
Security review skill: comprehensive security checklist and patterns. Use when adding authentication, handling user input, working with secrets, or creating API endpoints.
☆ 29Voir le skill
GitHub
supabase-security
Deep expertise in securing Supabase applications. Covers Row Level Security (RLS) patterns, auth token validation, storage security, multi-tenant isolation. Use when "supabase security, rls policy, row level s...
☆ 29Voir le skill
GitHub
security-patterns
Security Pattern Detector - Real-time detection of dangerous coding patterns during file edits. Based on Anthropic's official security-guidance hook. Activates proactively when writing code. Warns about command...
☆ 28Voir le skill
GitHub
security
Security Engineer and application security expert. Performs threat modeling, security architecture review, penetration testing, vulnerability assessment, and security compliance. Handles OWASP Top 10, authentic...
☆ 28Voir le skill
GitHub
security-patterns
brainbaseのセキュリティパターン（XSS Prevention、CSRF Protection、Input Validation）への準拠をチェックし、脆弱性を検出して修正提案する3 Phase Orchestrator Skill。
☆ 27Voir le skill
GitHub
security-compliance
Implement security scanning, vulnerability detection, and compliance checks. Use when working with security audits, dependency vulnerabilities, secret detection, CodeQL scanning, SAST/DAST tools, or security be...
☆ 27Voir le skill
GitHub
security-audit
Comprehensive security audit of codebase using multiple security-auditor agents. Use before production deployments or after major features.
☆ 27Voir le skill
GitHub
dag-permission-validator
Validates permission inheritance between parent and child agents. Ensures child permissions are equal to or more restrictive than parent. Activate on 'validate permissions', 'permission check', 'inheritance val...
☆ 27Voir le skill
GitHub
security-auditor
Security vulnerability scanner and OWASP compliance auditor for codebases. Dependency scanning (npm audit, pip-audit), secret detection (high-entropy strings, API keys), SAST for injection/XSS vulnerabilities,...
☆ 27Voir le skill
GitHub
modern-auth-2026
Modern authentication implementation for 2026 - passkeys (WebAuthn), OAuth (Google, Apple), magic links, and cross-device sync. Use for passwordless-first authentication, social login setup, Supabase Auth, Next...
☆ 27Voir le skill
GitHub
hipaa-compliance
Ensure HIPAA compliance when handling PHI (Protected Health Information). Use when writing code that accesses user health data, check-ins, journal entries, or any sensitive information. Activates for audit logg...
☆ 27Voir le skill
GitHub
dag-scope-enforcer
Runtime enforcement of file system boundaries and tool access restrictions. Blocks unauthorized operations and logs violations. Activate on 'enforce scope', 'access control', 'boundary enforcement', 'tool restr...
☆ 27Voir le skill
GitHub
common-appsec-patterns
Application security testing coordinator for common vulnerability patterns including XSS, injection flaws, and client-side security issues. Orchestrates specialized testing agents to identify and validate commo...
☆ 27Voir le skill
GitHub
pentest
Execute comprehensive penetration testing engagements following industry-standard methodologies including reconnaissance, vulnerability analysis, exploitation, privilege escalation, and professional reporting.
☆ 27Voir le skill
GitHub
web-application-mapping
Comprehensive web application reconnaissance and mapping coordinator that orchestrates passive browsing, active endpoint discovery, attack surface analysis, and headless browser automation for complete applicat...
☆ 27Voir le skill
GitHub
dependency-risk-audit
Audit dependencies for licensing, security, and maintenance risk. Use when a senior developer needs risk assessment.
☆ 27Voir le skill
Le classement utilise les étoiles du dépôt GitHub indexé. Plusieurs skills peuvent partager ce nombre : ce n’est ni un nombre d’installations ni une note de qualité.