GitHub
reviewing-security
OWASP Top 10-based security review and vulnerability detection. Triggers: security, OWASP, XSS, SQL injection, セキュリティ, 脆弱性, vulnerability.
Skills IA devops security
Découvrez les skills devops security, comparez leurs dépôts et consultez leurs instructions.
Catégories: devops security
devops security Effacer les filtres
Explorer
GitHub
probe
OWASP ZAP/Burp Suite連携、ペネトレーションテスト計画、DAST実行、脆弱性スキャン。動的セキュリティテスト、侵入テスト、実行時脆弱性検証が必要な時に使用。Sentinelの静的分析を補完。
GitHub
sentinel
ハードコード秘密鍵検出、SQLインジェクション対策、入力検証追加、セキュリティヘッダー設定。セキュリティ監査、脆弱性修正、安全性向上が必要な時に使用。
GitHub
api-integration
Guide for integrating external APIs securely and correctly
GitHub
github-oauth-skill
GitHub integration with OAuth2 Device Flow authentication for repositories, issues, pull requests, and more
GitHub
pop-assessment-security
Validates PopKit security posture using concrete vulnerability patterns, automated secret scanning, and OWASP-aligned checklists
GitHub
data-validation
Security pattern for input validation and sanitization. Use when implementing input handling, preventing injection attacks (SQL, XSS, command), ensuring data integrity, or processing data from untrusted sources...
GitHub
verifiable-token-based-authentication
Security pattern for self-contained token authentication (e.g., JWT). Use when implementing stateless authentication, designing tokens with embedded claims, or building systems where tokens contain principal in...
GitHub
limit-request-rate
Security pattern for implementing rate limiting and throttling. Use when protecting against brute-force attacks, DoS/DDoS mitigation, preventing resource exhaustion, or limiting API abuse. Addresses "Entity abs...
GitHub
transparent-encrypted-storage
Security pattern for full-disk or database-level encryption at rest. Use when implementing Transparent Data Encryption (TDE), full-disk encryption, or when storage infrastructure should handle encryption withou...
GitHub
selective-encrypted-storage
Security pattern for field-level encryption at rest. Use when encrypting specific sensitive data fields before storage, implementing application-level encryption for databases, or when only certain data element...
GitHub
opaque-token-based-authentication
Security pattern for server-side token authentication (e.g., session IDs). Use when implementing session management, designing stateful authentication where server maintains token-to-principal mapping, or build...
GitHub
encryption
Security pattern for implementing encryption and decryption operations. Use when encrypting data for confidentiality, selecting encryption algorithms (AES, RSA), configuring cipher modes (GCM, CBC), choosing ke...
GitHub
cryptographic-key-management
Security pattern for managing cryptographic keys throughout their lifecycle. Use when integrating cryptography requiring key generation, storage, distribution, or usage. Provides guidance on key confidentiality...
GitHub
message-authentication-code-mac
Security pattern for implementing Message Authentication Codes (MACs) to ensure data integrity and origin authentication. Use when implementing HMAC, CMAC, or other MAC algorithms, verifying message integrity,...
GitHub
self-managed-cryptography
Security pattern for systems that manage cryptographic keys themselves rather than delegating to an external service. Use when the application must store, retrieve, and manage cryptographic keys directly. Imple...
GitHub
selective-encrypted-transmission
Security pattern for encrypting specific data before transmission. Use when only certain data elements need encryption, implementing field-level encryption for transit, or when entities must actively manage enc...
GitHub
authentication-security-pattern
Security pattern for implementing authentication in software systems. Use when designing or reviewing authentication mechanisms, implementing login systems, verifying user identity, protecting system access, or...
GitHub
session-based-access-control
Security pattern combining session authentication with authorization. Use when implementing web application security requiring both user authentication via session IDs and authorization checks for resource acce...
GitHub
password-based-authentication
Security pattern for implementing password-based authentication. Use when designing login systems with username/password, implementing password storage, hashing, salting, peppering, password policies, or passwo...
GitHub
output-filter
Security pattern for filtering data before sending to external entities. Use when preventing excessive data exposure, implementing data minimization, protecting sensitive information in API responses, or ensuri...
GitHub
digital-signature
Security pattern for implementing digital signatures. Use when implementing document signing, code signing, certificate signing, non-repudiation, or verifying authenticity and integrity of messages using asymme...
GitHub
encrypted-tunnel
Security pattern for channel-level encryption (TLS/SSH). Use when implementing HTTPS, securing all communication between endpoints, setting up TLS connections, or when infrastructure should handle encryption tr...
GitHub
authorisation
Security pattern for implementing access control and authorization. Use when designing permission systems, implementing RBAC/ABAC, preventing unauthorized access, addressing privilege escalation, or ensuring us...
Le classement utilise les étoiles du dépôt GitHub indexé. Plusieurs skills peuvent partager ce nombre : ce n’est ni un nombre d’installations ni une note de qualité.