dos-resource-exhaustion
Find denial of service vulnerabilities through resource exhaustion, algorithmic complexity, memory exhaustion, and file/network resource abuse. Use when auditing code for availability issues.
Découvrez les skills devops security, comparez leurs dépôts et consultez leurs instructions.
Find denial of service vulnerabilities through resource exhaustion, algorithmic complexity, memory exhaustion, and file/network resource abuse. Use when auditing code for availability issues.
This skill should be used when the user asks to "test for insecure direct object references," "find IDOR vulnerabilities," "exploit broken access control," "enumerate user IDs or object references," or "bypass...
Hunt for hardcoded secrets, API keys, tokens, credentials, private keys, and sensitive configuration. Use when auditing code for credential exposure or before committing code.
This skill should be used when the user asks to "security review", "check for vulnerabilities", "audit security", "find security issues", "security scan", "check for injection", "find hardcoded secrets", "OWASP...
Design security controls and threat mitigations. Use for features involving auth, data, or external exposure.
Identify vulnerability class, analyze root cause, and plan exploitation strategy.
Security requirements, threats, and controls that apply across this system.
Scan code for security vulnerabilities. Use after implementation changes.
Comprehensive security and code quality audit. Use for thorough security, vulnerability, and code quality analysis. Related: project-health-checker for quick diagnostic checks.
Quick diagnostic tool (30s) running validation and health checks. Use for fast status checks. Related: audit-agent for comprehensive security and code quality audits.
Analyzes and maps frontend API calls to backend endpoints. Detects missing endpoints, unused endpoints, and integration gaps. Optional: trace complete data flows to database and design tokens. Related: api-cont...
Clarify requirements before implementing. Do not use automatically, only when invoked explicitly.
IntelliFill authentication flow patterns using Supabase Auth, JWT tokens, and backend auth mode
Implement secure authentication with JWT, sessions, OAuth, and password hashing. Use when adding login/logout, token auth, or integrating OAuth providers.
Write secure web pages and applications. Use when handling user input, forms, external resources, authentication, or implementing security headers and CSP.
Inline orchestration workflow for security vulnerability detection and remediation with Beads integration. Provides step-by-step phases for security-scanner detection, priority-based fixing with vulnerability-f...
Application security patterns - authentication, secrets management, input validation, OWASP Top 10. Use when: auth, JWT, secrets, API keys, SQL injection, XSS, CSRF, RLS, security audit, pen testing basics.
Authentication and authorization patterns using Clerk and RBAC
Complete WorkOS authentication management including OAuth, SSO, SCIM, email templates, domain verification, and user management. Use for enterprise auth configuration.
Use when updating environment secrets like GITHUB_TOKEN, NPM_TOKEN, or API keys on the user's machine
OWASP API Security Top 10 (2023) と {開発言語をここに書く} セキュリティベストプラクティス。脆弱性検出。Use when: セキュリティレビュー、脆弱性チェック、バージョン管理確認を依頼された時。
セキュリティレビュースキル。OWASP Top 10に基づくセキュリティ脆弱性のチェック。SQLインジェクション、XSS、認証・認可、暗号化などの観点でコードをレビュー。「セキュリティレビュー」「脆弱性チェック」「セキュリティ確...
Detect configuration drift using hash-based verification
Perform comprehensive security analysis to identify vulnerabilities. Integrates with codex-review for automatic security checks. Covers OWASP Top 10, common vulnerabilities, and secure coding practices. Output:...
Le classement utilise les étoiles du dépôt GitHub indexé. Plusieurs skills peuvent partager ce nombre : ce n’est ni un nombre d’installations ni une note de qualité.