GitHub
workflow-security-review
Guide for reviewing GitHub Actions for security vulnerabilities.
Skills IA devops security
Découvrez les skills devops security, comparez leurs dépôts et consultez leurs instructions.
Catégories: devops security
devops security Effacer les filtres
Explorer
GitHub
nextjs-middleware
When you need to run code before a request completes: auth checks, redirects, headers, A/B testing. **Version Context**: Next.js 16.0+ uses `proxy.ts` (replaces `middleware.ts` from v15 and earlier).
GitHub
api-authentication
Apply when implementing API authentication: JWT tokens, session management, API keys, and auth middleware. Follows JWT Best Current Practices (RFC 8725).
GitHub
supabase-auth
Apply when implementing authentication: sign up, sign in, OAuth providers, session management, and protected routes.
GitHub
auditing-python-security
Audits Python libraries for security vulnerabilities using Bandit, pip-audit, Semgrep, and detect-secrets. Identifies SQL injection, command injection, hardcoded credentials, weak cryptography, and insecure des...
GitHub
zod
A Zod v4 validation specialist.
GitHub
auditing-plugins
Comprehensive plugin auditing for compliance with marketplace best practices. MUST Use when validating, refactoring, or improving plugin quality. Do not use for creating new plugins, scaffolding components, or...
GitHub
security-review
Security audit checklist and best practices for bCommGuard WhatsApp bot
GitHub
security-advisor
Security Advisor for vulnerability analysis and risk assessment. Reviews code and architecture for security issues. Use this skill for security review, vulnerability assessment, or risk analysis.
GitHub
detection
Security detection use cases for identifying threats across network, endpoint, identity, cloud, application, and email vectors. Use for building detection rules, analyzing security events, and threat hunting op...
GitHub
grc
Governance, Risk, and Compliance documentation and assessment support. Generate policies, assess controls, and track compliance status. Use for GRC programs, audits, and regulatory compliance.
GitHub
pentest-toolkit
AI-Powered Security Testing Toolkit - Professional penetration testing scripts for discovering vulnerabilities, analyzing application structure, and generating context-aware security tests. All scripts return s...
GitHub
api-testing
Test and debug Next.js API routes, validate responses, check authentication, and troubleshoot API errors. Use when testing API endpoints, debugging 500 errors, validating API responses, or checking authenticati...
GitHub
secrets-guard
Claude Codeで秘密情報を安全に管理するための多層防御アプローチガイド。APIトークン、DB認証情報、SSH鍵などを保護する3層防御戦略（物理的分離 + deny設定 + PreToolUse Hook）。
GitHub
health-checks
Post-deployment validation and health check scripts for validating HTTP endpoints, APIs, MCP servers, SSL/TLS certificates, and performance metrics. Use when deploying applications, validating deployments, test...
GitHub
security-validation
Runtime security validation including secret scanning, PII detection, prompt injection defense, audit logging, and output validation for AI agents. Use when validating user input, scanning for secrets, detectin...
GitHub
security-scanning-patterns
Security vulnerability scanning, secret detection, dependency auditing, and OWASP best practices. Use when performing security audits, scanning for vulnerabilities, detecting exposed secrets, checking dependenc...
GitHub
senior-security
Expert security engineering covering application security, infrastructure security, threat modeling, penetration testing, and compliance.
GitHub
mcp-integration
Configure and manage MCP (Model Context Protocol) servers for AI agent tooling. Use when adding MCP servers, configuring authentication (OAuth 2.1 or API keys), managing opencode.json, implementing token flows,...
GitHub
oauth-pkce-flow
Implement OAuth 2.1 with PKCE for secure authentication flows in CLI applications. This skill provides comprehensive guidance for implementing browser-based OAuth flows with local callback servers, token manage...
GitHub
security-auditor
Performs comprehensive security audits of KrakenD configurations to identify vulnerabilities, authentication gaps, and security best practices violations with Flexible Configuration support
GitHub
keychain-security
Secure credential handling using macOS Keychain. Use when working with API keys, passwords, tokens, or any sensitive data. Triggers: 'API key', 'credentials', 'secret', 'password', 'token', 'authenticate'.
GitHub
security-compliance-guard
Implement zero-trust security, secrets management, and compliance. Use for Vault, ESO, Kyverno, OPA, Pod Security, RBAC, and supply chain security. Keywords: security, secrets, Vault, ESO, Kyverno, OPA, RBAC, c...
GitHub
multi-tenancy-patterns
Use this skill when implementing or modifying multi-tenant data isolation and security.
Le classement utilise les étoiles du dépôt GitHub indexé. Plusieurs skills peuvent partager ce nombre : ce n’est ni un nombre d’installations ni une note de qualité.