GitHub
security-check-config
檢查應用程式的安全配置，包括 HTTPS、CORS、Security Headers、Cookie 等
Skills IA devops security
Découvrez les skills devops security, comparez leurs dépôts et consultez leurs instructions.
Catégories: devops security
devops security Effacer les filtres
Explorer
GitHub
security-check-secrets
掃描程式碼和配置檔中的敏感資料洩漏，包括 API Keys、密碼、Token 等
GitHub
security-fast-scan
執行完整的應用程式安全掃描，檢查 OWASP Top 10 漏洞、敏感資料洩漏、依賴套件漏洞和安全配置問題。
GitHub
security-deep-review
深度程式碼安全審查，檢測注入攻擊、XSS、CSRF、身份驗證和授權問題
GitHub
backend-safeguard
Supabase schema validation, RLS enforcement, and API security best practices.
GitHub
draconian-rls-audit
Default-Deny security posture for Supabase. Mandates strict RLS and 'WITH CHECK' clauses.
GitHub
security-audit
Checklist for security-sensitive coding, ensuring MaiHouses guards and policies are respected.
GitHub
explain
Explain and validate what was implemented in the current session.
GitHub
qa-security-scan
Security scanning templates and checklists for OWASP Top 10, authentication, authorization, data protection. Use when conducting security testing or vulnerability assessment. This skill provides comprehensive...
GitHub
azure-role-selector
When user is asking for guidance for which role to assign to an identity given desired permissions, this agent helps them understand the role that will meet the requirements with least privilege access and how...
GitHub
clerk-auth-proxy
Implement Clerk authentication with Next.js 16 proxy pattern, session claims, onboarding gates, and user metadata management. Use when working with authentication, authorization, or user session management.
GitHub
building-mcp-servers
Use when building MCP servers in TypeScript, Python, or C#; when implementing tools, resources, or prompts; when configuring Streamable HTTP transport; when migrating from SSE; when adding OAuth authentication;...
GitHub
reviewing-casbin
Review Go code using Casbin authorization for security issues, model correctness, policy design, and common anti-patterns. Use when reviewing PRs with Casbin code or auditing authorization implementations.
GitHub
implementing-casbin
Implement role-based (RBAC) and attribute-based (ABAC) access control in Go using Casbin. Covers model configuration, GORM adapters, Chi/gRPC middleware, and production patterns. Use when implementing authoriza...
GitHub
security-scan
⚠️ MANDATORY - Automatically invoked by safe-commit. Performs comprehensive security scanning before commits. Checks for secrets (API keys, passwords, tokens), dependency vulnerabilities, code injection risks,...
GitHub
security-lens
Apply security awareness during code review and implementation. Catches common vulnerabilities without requiring full security audit.
GitHub
security-audit
Perform automated security analysis on code changes to identify common vulnerabilities including SQL injection, path traversal, hardcoded secrets, XSS, and insecure API usage. Reviews Python code for OWASP Top...
GitHub
microservice-auth
IOE-DREAM微服务认证架构规范。涵盖Gateway集中认证(JWT验证、Token黑名单)、业务层授权(@PermissionCheck注解)、Spring Security依赖管理(业务服务排除)、Gateway身份头转发(X-User-Id等HTTP头)、RBAC规则引擎。使用时机:实现...
GitHub
nrpg-workflow
Use when working on NRPG Platform tasks to follow repo conventions (NextAuth cookie sessions, tenant safety, and contractor privacy) and to run the correct checks.
GitHub
eridu-authentication-authorization-frontend
Provides frontend-specific authentication and authorization implementation patterns for React applications. This skill should be used when implementing login flows, protecting routes, storing tokens securely, m...
GitHub
eridu-authentication-authorization-backend
Provides backend-specific authentication and authorization implementation patterns for NestJS/TypeScript servers. This skill should be used when implementing JWT validation, role-based access control, API key g...
GitHub
eridu-authentication-authorization
Provides general authentication and authorization principles for designing secure systems. This skill should be used when implementing login flows, protecting endpoints, enforcing permissions, or designing API...
GitHub
middleware-patterns
Next.js middleware patterns for protected routes, auth redirects, and URL handling. Use when working with middleware.ts, protected routes, or auth redirects. Keywords: middleware, protected routes, redirect, au...
GitHub
auth-patterns
Supabase authentication patterns including getUser vs getSession, deadlock avoidance, session handling, and bypass patterns. Use when working with auth, sessions, cookies, or encountering auth hangs/timeouts. K...
Le classement utilise les étoiles du dépôt GitHub indexé. Plusieurs skills peuvent partager ce nombre : ce n’est ni un nombre d’installations ni une note de qualité.