GitHub
input-validation
Use when accepting user input. Use when handling request data. Use when trusting external data without validation.
Skills IA devops security
Découvrez les skills devops security, comparez leurs dépôts et consultez leurs instructions.
Catégories: devops security
devops security Effacer les filtres
Explorer
GitHub
authentication-security
Автоматизация JWT аутентификации, Telegram OAuth и security middleware
GitHub
zero-credential-claude
Explains how Claude Code works in containers with zero credentials via the clauderon proxy. Use when testing Claude in containers, debugging authentication issues, or understanding the zero-trust proxy architec...
GitHub
connector-generation
Guide for creating new external service connectors in DEVS. Use this when asked to add a new OAuth app connector, API connector, or integration with external services like Slack, Trello, Linear, Asana, Dropbox,...
GitHub
permission-patterns
Rules for evaluating, classifying, and deduplicating AI tool permissions
GitHub
security-audit
Security analysis, vulnerability assessment, and security code reviews
GitHub
security-scanner
Scan code and infrastructure for security vulnerabilities and compliance issues
GitHub
wp-security-review
WordPress security audit and vulnerability analysis. Use when reviewing WordPress code for security issues, auditing themes/plugins for vulnerabilities, checking authentication/authorization, analyzing input va...
GitHub
security
Web application security best practices including OWASP Top 10, authentication, authorization, input validation, cryptography, and secure coding patterns. Use when implementing security features, reviewing code...
GitHub
tizen-security-compliance
Maps security requirements to implementation. Coordinates compliance against FIPS 140-3, OCF, CommonCriteria, and Tizen specification.
GitHub
sharp-edges
Identifies error-prone APIs, dangerous configurations, and footgun designs that enable security mistakes. Use when reviewing API designs, configuration schemas, cryptographic library ergonomics, or evaluating w...
GitHub
burp-suite
Web application security testing with Burp Suite.
GitHub
manifest-privilege-validator
Validates tizen-manifest.xml privilege declarations. Checks privilege correctness, required privilege levels, and manifest conformance.
GitHub
iot-device-provisioning
Secure provisioning for TizenRT/ARTIK IoT devices. Coordinates certificate installation, key management, and network onboarding.
GitHub
smack-policy-auditor
Analyzes SMACK policy files for correctness, label conflicts, and access control issues. Verifies mandatory access control rules.
GitHub
mdm-cobordism
macOS MDM with auth manifolds as cobordisms for credential derivation
GitHub
cynara-policy-validator
Validates Cynara privilege access control policies. Checks policy syntax, logical consistency, and permission accuracy.
GitHub
wev-verification
WEV Verification Skill
GitHub
cynara-policy-checker
Queries Cynara database and validates runtime privilege policies. Coordinates access control decisions across system services.
GitHub
fullstory-identify-users
Comprehensive guide for implementing Fullstory's User Identification API (setIdentity) across web applications. Teaches proper uid handling, property passing, re-identification behavior, and session management....
GitHub
fullstory-anonymize-users
Comprehensive guide for implementing Fullstory's User Anonymization API (setIdentity with anonymous:true) for web applications. Teaches proper logout handling, session management, privacy compliance, and user s...
GitHub
link-evidence
Prevents fabricated URLs. Only use links that appear in the sources pool or are provided by the user.
GitHub
oauth2-flows
OAuth 2.0認可フローの実装パターンとセキュリティベストプラクティス。 Authorization Code Flow、PKCE、Refresh Token Flowの正確な実装を提供。 Web/SPA/モバイルアプリでの安全な認可フロー実装を支援。 Anchors: • OAuth...
GitHub
cryptographic-practices
暗号化・ハッシュ・CSPRNG・鍵管理の実装を安全に進めるためのスキル。 要件整理から設計、実装、監査までの一連フローを提供する。 Anchors: • Applied Cryptography / 適用: アルゴリズム選定と強度判断 / 目的: 標準準拠の...
Le classement utilise les étoiles du dépôt GitHub indexé. Plusieurs skills peuvent partager ce nombre : ce n’est ni un nombre d’installations ni une note de qualité.